Deploying Endpoint Agent MDM profile on macOS using VMware Workspace ONE

Products

• Data Loss Prevention Endpoint Prevent
• Data Loss Prevention

Issue/Introduction

How to deploy the Symantec Data Loss Prevention (DLP) Endpoint Agent Mobile Device Management (MDM) profile using VMware Workspace ONE (previously known as AirWatch). It's important to note that the DLP agent and its browser add-ons will not work correctly until the MDM profile is properly configured.

Environment

Release : 15.x

Component : Symantec DLP Endpoint Agent

Operating System: macOS 10.15 and higher

Cause

The MDM template provided by Broadcom is geared towards Jamf; however, VMware Workspace ONE requires only the XML data inside the <dict> elements.

Resolution

Create a new MDM profile in VMware Workspace ONE and add custom settings. You can create multiple custom settings entries by clicking the plus sign in the lower-right corner. Paste in the settings for Privacy Policy Preferences Control (PPPC, aka Full Disk Access), Firefox, and Chrome into separate custom settings entries and then click save and publish.

Additional Information

You can copy and paste the contents of the attached text files into the custom settings window in VMware Workspace ONE.