CrowdStrike required to approved the full disk approval setup, any advise?

[Laura7878]

I already set the configuration profile, but crowstrike full disk approval still shows / require? any advise 

[Laura7878]

@YanW @arnoldtaw 

[arnoldtaw]

This is what our System Extension looks like for Falcon. 

For us, we split them into different ones. I can see that you have everything in one profile, that should work too as long as you have everything added. 

[Laura7878]

my setting is like this :   seems like missing the bottom one you set?

[Laura7878]

i targeted the application from policies with script  and deploy the profile to the same group  ( crowdstrike not install) , wondering if that is the way to setup ? 

[arnoldtaw]

You'll have to make sure the profile gets installed before the application is deployed. 

[Laura7878]

O, do you mind assist me on how to ? is there any sequence i can set ? 

[Laura7878]

also, i think you help me out the other day with Zscaler. will that need to be before the application before get the installer installed? 

[arnoldtaw]

Yes, you'll need to make sure all necessary profiles are installed/scoped before you deploy the application. 

[Laura7878]

[Jmazzuca182]

Make sure you have firmware analysis off too. Even if you do all of the profiles correctly, it will still prompt the user if firmware analysis is turned on.

[Laura7878]

can you please tell me a bit more on the firmware analysis ? 

[gachowski]

@Laura7878 

there isn't a lot of documentation on that Firmware analysis issue ...  : ) here is the page I found however you need a CS support account..

https://falcon.crowdstrike.com/documentation/22/falcon-sensor-for-mac

C