I've read in all the other articles/discussions on people having the same issues as me in deploying the new version of AMP... but have yet to see a clear-cut solution on getting this deployed... I've seen the "solution" of finding the hidden policy.xml file in the DMG, but am still a little confused about that part.... Can anyone (maybe not exactly) step-by-step have an easier way of deploying this?

Deploying Cisco Amp v.1.9

Thank you very much for the reminder. I've cleaned it. I'll mod the script and see what happens.

@winterboerMight want to double check that, url is still in the photo.

Glad you got it working.

If you want the script less chatty, just add a # in front of the set -x at the top or remove it completely. I often use it when troubleshooting and getting things going then comment it out.

@mm2270 @rhernandez_hg Hi Guys,

I'm struggling to copy the policy.xml file ?

administrator$ cp /Volumes/ampmac_connector/ampmac_connector/.policy.xml /private/tmp/ampmac_connector/policy.xml
cp: /Volumes/ampmac_connector/ampmac_connector/.policy.xml: No such file or directory

Any ideas?

Thanks
George.

it's the following command:

cp /Volumes/ampmac_connector/.policy.xml /private/tmp/ampmac_connector/policy.xml

notice that it's only 1x ampmac_connector?

It'll probably differ from version to version, so you might have to pay attention to that part

@Morgan.Cooledge thanks ! i've got it sorted now

Also for PPPC, i used https://github.com/jamf/PPPC-Utility to
create the configuration profile then uploaded to Jamf.

also, that depreciated in Big Sur. You might want to swap it to system extensions.

Cisco Secure Endpoint Mac Connector Advisory: System Extensions, MDM, and Orbital - Cisco

My download URL recently changed, so if you get the failed to download error, go check your URL in the amp portal.

I believe they expire at some point by design?

Hey Guys,

Anyone had success in 2023 with the new Cisco Secure Endpoint (VS AMP)? Any tips if so, as we are hitting roadblocks.

Hey Guys,

Anyone had success in 2023 with the new Cisco Secure Endpoint (VS AMP)? Any tips if so, as we are hitting roadblocks.

installing fresh or upgrade? due to the hidden .policy.xml i re-pack in composer and use a script to install in pkg. i'm using this to upgrade from AMP and so far no issues. Note of course all the requirement for config profile PPPC, System Ext, Content Filter.. what versions are you going from - to?

#!/bin/sh

## postinstall



BASE="/private/tmp/camp"



PKG="${BASE}/ciscoampmac_connector.pkg"

XML="${BASE}/.policy.xml"



if [[ -e "$PKG" && -e "$XML" ]]; then

    /usr/sbin/installer -pkg "$PKG" -tgt /

    RES=$?

else

    echo "Package or XML was missing. Aborting installation…"

    exit 1

fi



if f $RES == 0 ]; then

    ## Cleanup folder payload

    rm -Rfd "$BASE"

    exit 0

else

    echo "Installation may have failed with exit code $RES"

    exit $RES

fi

postinstall

sure i borrowed that script from somewhere..

Hey Guys,

Anyone had success in 2023 with the new Cisco Secure Endpoint (VS AMP)? Any tips if so, as we are hitting roadblocks.

I'm deploying 1.21.0.885 with the script provided here on Jamf.

#!/bin/bash



#set -x



#ciscoAMPPath="/Applications/Cisco AMP/AMP for Endpoints Connector.app/Contents/Info.plist"

redirectingURL="$4"

localInstallerVolume="/Volumes/ampmac_connector"

localInstallerPackage="ciscoampmac_connector.pkg"

tmpFolder="/Library/CiscoAMPtmp"



checkAndGetURLs()

{

dmgURL=$(curl --head "$redirectingURL" | grep -i "Location:" | awk '{print $2}')

if [[ -z $dmgURL ]]

  then

    echo "Unable to retrieve DMG url. Exiting..."

    exit 1

fi



echo "DMG URL found. Continuing..."



dmgFile=$(basename "$(echo $dmgURL | awk -F '?' '{print $1}')")

dmgName=$(echo "${dmgFile%.*}")

}



downloadInstaller()

{

mkdir -p "$tmpFolder"

echo "Downloading $dmgFile..."

/usr/bin/curl -L -s "$redirectingURL" -o "$tmpFolder"/"$dmgFile" --location-trusted

}



installPackage()

{

if [[ -e "$tmpFolder"/"$dmgFile" ]]

  then

    hdiutil attach "$tmpFolder"/"$dmgFile" -nobrowse -quiet

    if [[ -e "$localInstallerVolume"/"$localInstallerPackage" ]]

      then

        echo "$localInstallerPackage found. Installing..."

        /usr/sbin/installer -pkg "$localInstallerVolume"/"$localInstallerPackage" -target /

        if [[ $(echo $?) -gt 0  ]]

          then

            echo "Installer encountered error. Exiting..."

            hdiutil detach "$localInstallerVolume" -force

            rm -Rf "$tmpFolder"

            exit 1

          else

            echo "Successfully installed "$localInstallerPackage". Exiting..."

            hdiutil detach "$localInstallerVolume" -force

            rm -Rf "$tmpFolder"

            exit 0

        fi

    fi

  else

    echo "$dmgFile failed to download. Exiting..."

    exit 1

fi

}



checkAndGetURLs

downloadInstaller

installPackage

installing fresh or upgrade? due to the hidden .policy.xml i re-pack in composer and use a script to install in pkg. i'm using this to upgrade from AMP and so far no issues. Note of course all the requirement for config profile PPPC, System Ext, Content Filter.. what versions are you going from - to?

#!/bin/sh

## postinstall



BASE="/private/tmp/camp"



PKG="${BASE}/ciscoampmac_connector.pkg"

XML="${BASE}/.policy.xml"



if [[ -e "$PKG" && -e "$XML" ]]; then

    /usr/sbin/installer -pkg "$PKG" -tgt /

    RES=$?

else

    echo "Package or XML was missing. Aborting installation…"

    exit 1

fi



if f $RES == 0 ]; then

    ## Cleanup folder payload

    rm -Rfd "$BASE"

    exit 0

else

    echo "Installation may have failed with exit code $RES"

    exit $RES

fi

postinstall

sure i borrowed that script from somewhere..

Truly appreciate the quick feedback! This is for a fresh/new install, most recent version

Have been struggling with AMP install in our lab environment for a long time and this script seems to get me most of the way there (some naming convention changes to the app and installer for example). This may be a silly question but my attempts to make this work always seem to fail as they are unable to retrieve the DMG URL. I have tried both posted versions of the code (one with the URL inserted into the code and one with the URL defined as variable $4.) Does anyone have any thoughts why this may be failing? Thanks in advance!

Aha I can see some additional fixes to the script re: DMG location above. I apologize for appearing to not read the post fully.

Reply

Sign up

Login with SSO

Login to the community

Login with SSO

Scanning file for viruses.

This file cannot be downloaded