Deploying Cisco Secure Client XDR with Jamf School

Hi rm5604,

Deploying Cisco Secure Client XDR on macOS can be tricky - the DMG package can't simply be extracted and repackaged like a standard PKG. You'll need a script-based approach plus the right MDM configuration profiles.

Here are the resources you'll need:

1. Deployment Script There's a working script shared on Jamf Nation specifically for XDR deployment:https://community.jamf.com/t5/jamf-pro/deployment-for-cisco-secure-client-xdr-working-script/td-p/347550

This script handles architecture detection (Intel vs Apple Silicon) and installs the correct version using cached DMG files.

2. Cisco's Official JAMF Deployment Guide Cisco has documentation for deploying Secure Client via JAMF:https://support.umbrella.com/hc/en-us/articles/34452404176020-How-to-deploy-Cisco-Secure-Client-via-JAMF-MacOS

3. Configuration Profiles Required For silent installation, you'll need these MDM profiles:

• System Extension - Team ID: DE8Y96K9QP, Bundle ID: com.cisco.anyconnect.macos.acsockext
• PPPC / Full Disk Access - Required for Network Visibility Module (see Cisco's XDR documentation: https://docs.xdr.security.cisco.com/Content/Client-Management/deployment-management.htm)
• Content Filter - If using Umbrella module

4. Cisco's macOS 11+ Guide Important info about system extensions and MDM requirements:https://www.cisco.com/c/en/us/td/docs/security/vpn_client/anyconnect/Cisco-Secure-Client-5/admin/guide/b-cisco-secure-client-admin-guide-5-1/macos11-on-ac.html

Note for Jamf School: The script above was written for Jamf Pro, but the concept applies - you'll need to upload the DMGs, create a script to handle the installation, and deploy the configuration profiles. Jamf School's workflow differs slightly in the UI.

Hope this helps get you started!