Skip to main content

Hi all,



I'm following Cisco documentation to prepare for deploying a new AMP connector that is compatible with Big Sur.



I'm aware of where/how to add & configure payloads for allowed system extensions, system policy kernel extensions, and full disk access... But I'm stuck on configuring the web content filter payload. I can't find any equivalent spot in configuration profiles to set these.



https://www.cisco.com/c/en/us/support/docs/security/amp-endpoints/216089-advisory-for-amp-for-endpoints-mac-conne.html#anc4

I tried searching around on my own, but "web content filter" just gets me hits on folks blocking web URLs, essentially.



Where/how is this payload configured?



Thanks in advance!



@ajc196 Did a reboot and now it's green and the text is there. Rebooting fixes this as well. One thing to note that since this is enforced through a config profile, you can't remove it. (The minus sign is greyed out.) New screenshot. Now I'll go on to the next problem. Thanks for the help.

We are not yet on Jamf Pro 10.26 and I needed to fix this quickly so I used Profile Creator. I worried about the Custom Data fields shown by @ccliff and @ajc196 as according to https://developer.apple.com/documentation/devicemanagement/webcontentfilter the fields they had as custom are just part of the spec. However, even for Profile Creator, the field AutoFilterEnabled was not listed so I put it in the VendorConfig area but I suspect that's wrong. The default value for AutoFilterEnabled is true so even though we set it to false, I wonder if the value of AutoFilterEnabled is actually true. Also, why would you set it to false? Surely you want it on?



Here's screenshots if anyone else needs to make the Configuration Profile outside of Jamf Pro. I signed it using my Apple Developer signing certificate so it wouldn't get messed with and then uploaded it into the Jamf pro





@ccliff There's been a bunch of updates on here but are you able to post a few screenshots of your configuration that you have working? I've been trying to get it configured but the Web Content Filtering is definitely throwing me for a loop. Thanks!

Hey guys,

the profile seems to be failing on the new M1 MacBooks as they handle kernel extensions differently. Does anyone have a new working profile for M1 devices?

Reply


Terms & ConditionsCookie settings