Updated 5 February 2024 iCloud Private Relay is a feature provided by Apple designed to enhance online privacy by ensuring that neither the source IP of users' Apple devices nor the websites they visit can be accessed by a single entity. Due to the d... View more
Hello,I am looking to create a custom analytic that will alert when a software installation occurs. I found this: custom_analytic_detections/app_bundle_installedIt does work and creates alerts, however it alerts on everything installed and there are ... View more
I've got a strange one. I had played around with trials of Jamf Protect and Jamf Connect back in March of this year but ultimately removed them. I must have done so incorrectly (likely deleted the Profiles from the Jamf tenant rather than un-scoping ... View more
Hi everyonei'm trying to understand the best way to configure Jamf Protect with our jamf instance. I set up a smart group in jamf to alert users about security issues and that works fine.Unfortunately the jamf protect documentation is a bit incomplet... View more
We retired 200+ macs this summer. How can I mass delete them from Protect? Doing it one at a time is not a viable use of time. View more
Updated 5 February 2024 iCloud Private Relay is a feature provided by Apple designed to enhance online privacy by ensuring that neither the source IP of users' Apple devices nor the websites they visit can be accessed by a single entity. Due to the d... View more
As the subject says. Working on redirecting the logs for a user account generating event to SIEM. View more
I'm working to push out network threat prevention in Jamf Protect as described here: https://learn.jamf.com/bundle/jamf-protect-documentation/page/Configuring_Network_Threat_Prevention.htmlUsing Jamf Pro, We have successfully deployed the configurati... View more
I'm trying to push Sophos onto a machine through Jamf Self Service and when I click install it says done but the app doesn't install. I've packaged Sophos using Composer and use the same .pkg for a Sophos policy which is pushed out to all the devices... View more
Is there a way to remove multiple computers at once from Jamf Protect?I cannot find a way to delete multiple at once and it seems pretty unreasonable to delete hundreds of old computers 1 by 1... View more
I have a customer who uses Jamf Protect and we just recently integrated it with Azure Sentinel for GCC High. The native connector isn't available in GCC High yet, so we had to use the manual Data Forwarding method to an Azure Log Analytics Workspace.... View more
Hello,We employ Jamf in a facility where a large majority of our computers are offline / do not have access to the internet. So far, we've had no issues with our Jamf Pro deployment by following this guide to make sure that the necessary traffic is a... View more
Hello Jamf Nation! Jamf Protect Insights have been updated to adhere to the current CIS Benchmark guidance for macOS Ventura 13. As a result, the Insight names and categories in Jamf Protect have been updated. For additional information, see Insights... View more
I have deployed a Jamf Protect plan to one of our computers. Following the instructions here: https://learn.jamf.com/bundle/jamf-protect-evaluation-guide/page/Threat_Prevention_with_Jamf_Protect.htmlI run the program and it gets blocked. However, we ... View more
Hi everyone, I wonder if someone could help or, if I am missing something here.We are setting up Jamf Radar, and when we try to do the UEM connection with MS Endpoint manager, the permissions get granted. However, the tenant ID does not populate. Wou... View more
Hello Jamf Nation!We recently released Jamf Protect 4.2.0.This release includes two resolved issues:Occasionally, computers with a large queue experienced high CPU usage if disconnected from the Jamf server. This has been resolved and in the event of... View more
In Jamf Pro, we disabled the Airdrop feature for one of our systems to comply with CIS benchmarks. However, in Jamf Protect insight, it still states that the system is non-compliant. Could you please assist us in resolving this issue. View more
How can I pull the specific insight's non-compliant system list as a csv file or as report in Jamf Protect? is there any options available for this? View more
Hello Jamf Nation! We recently released Jamf Protect 4.1.0. This release includes the following changes and improvements: Telemetry enhancements for collecting performance metrics, BIOS/EFI data, and diagnostic/crash files. These enhancements aid in ... View more
Is there a way to enable reasonable security audit log retention via script to comply with CIS Level 1 requirements? Thank in advance View more
Have you encountered any challenges in achieving CIS level one compliance for Ventura on your MacBook devices, even after pushing all configuration profiles using the JAMF Compliance Editor for Mac Ventura OS and scoping all your MAC machines to thes... View more
Hi all,I hope someone can help me to find a solution.Within FireEye HX I could create an alert with "fileWriteEvent/fileName starts-with xxx"I try to rebuild this within Jamf Protect.I have created a custom analytic with the following analytic filter... View more
We are just getting set up with Jamf Protect and are running into an issue with deploying Airtame. We are using Jamf Pro and following the instructions here https://help.airtame.com/hc/en-us/articles/5213653434909-Mass-deploy-the-Airtame-app-on-macOS... View more
Hello Jamf Nation! We recently released Jamf Protect 4.0.0 which includes significant enhancements to how analytics are managed, standardized versioning for the Endpoint Threat Prevention database, new accessibility theme options, and the ability to ... View more
We've been having some sporadic Mac devices lose items/icons in their menu bar and both Chrome and Slack (main tools in the company) open but do not load anything. Just spinning wheel. Also Privacy & Security in System Prefs (Settings) would not load... View more
Hi all,we just configured Jamf Protect, and it seems that the Macs removed from Jamf Pro were not removed automatically from the list on Protect.Is there a way to automatize the offboarding, or the only solution is to remove a device manually from bo... View more
Hello folks! Wondering if it's advised to remove a computer from Jamf Protect if we plan to repurpose it from one user to another - or will Jamf Protect be able to tell it's on a new user, with a new hostname, etc? Noticed that one of our computers h... View more
Hello fellow Mac SysAdmins,Just started at a new company and they are in dire need of an endpoint AV solution (among just about every other security precaution that exists).I am working to set us up with Jamf Pro and I wanted to reach out to see if y... View more
Hello Jamf Nation!I am looking forward to configuring Jamf Protect for our org. I fully understand the concept of the CIS benchmarks and that I should, at the very least, have the endpoint threat prevention in my plan set to block and report. Since t... View more
Hi allI have setup our Jamf Protect tenant and have integrated it with Jamf Pro.Ive setup Jamf Pro to automatically install the Jamf Protect Plan. When it trys to install the configuration profile on a macbook I get the following error message“The ce... View more
