Allow app to "find devices on local networks"

[EWiggins]

Hello all,

First-time poster on Jamf Nation, so please criticize formatting, grammar, etc.

We use Bomgar Remote Support on our Macs, but when deploying to a test machine running Sequoia, I get the message "Allow Remote Support Customer Client to find devices on local networks?" It looks like a PPPC popup with options to "Don't Allow" or "Allow", but I can't find a corresponding PPPC setting. We already have Accessibility, SystemPolicyAllFiles, and ScreenCapture set up according to this deployment guide, and I don't see another PPPC option that looks related to this error message. I'm not even sure why this is a permission that needs to be allowed. It feels like the Windows message to "allow this device to be discoverable on local networks," but it's going the opposite way. Why would I need permission to go out on the network and connect to the Bomgar server from my endpoint? 

Has anyone else seen this popup before or something similar?

[byrnese · Accepted solution]

You are on the right track. It is definitely something we'd expect to be manageable with PPPCs. However, Apple hasn't yet made it manageable, so it is not supported by Jamf. Until the keys are available, we'll be stuck waiting on Apple.

[AJPinto]

This is working as intended, and yes it's very annoying. Apple has expressed they have no interest in letting us managed this popup. feedback.apple.com 

[EWiggins]

Thank you both!

[johnalimin]

[EWiggins]

I highly suspect this is linked to Bonjour now. If I turn it off with 

defaults write /Library/Preferences/com.apple.mDNSResponder.plist NoMulticastAdvertisements -bool YES

that popup goes away. We started getting it for browsers, Zoom, and other things to the point it was super annoying to do anything, so I dug into it a little bit more.

Possibly related, we had a few Macs constantly getting renamed (think Mac12345 to Mac12345 (248).local), and disabling Bonjour massively cut down on how often that was happening. I don't really understand it, but that's what I'm seeing.