IntuneAppUtil`)ĭownload the Cisco An圜onnect DMG (I get it directly from my server) and mount it to get the package Otherwise they won't install or install in a loop.ĭownload the Intune App Wrapping Tool and make it executable (`chmod +x.

Remember that macOS LOB apps must be signed and notarized, and contain an application installing in /Applications. The latter is more flexible, but the former is more integrated, and I believe easier to maintain. You have two possibilities to install the Cisco An圜onnect package: wrap it then deploy it as a macOS line-of-business (LOB) app, or host it somewhere and use the scripting agent to curl and install it on macOS. PayloadContent Enabled FilterType Plugin AutoFilterEnabled FilterBrowsers FilterSockets FilterPackets FilterGrade firewall FilterDataProviderBundleIdentifier .acsockext FilterDataProviderDesignatedRequirement anchor apple generic and identifier '.acsockext' and (certificate leaf /* exists */ or certificate 1 /* exists */ and certificate leaf /* exists */ and certificate leaf = DE8Y96K9QP) PluginBundleID .acsock VendorConfig UserDefinedName Cisco An圜onnect Content Filter PayloadDisplayName Cisco An圜onnect Content Filter PayloadIdentifier .42B8BA0E-57F4-4E57-872B-1F5FCB8527EA.2512DB6A-B5EA-41DB-B6C6-3A07726C214E PayloadType -filter PayloadUUID 2512DB6A-B5EA-41DB-B6C6-3A07726C214E PayloadVersion 1 PayloadDisplayName Cisco An圜onnect Content Filter PayloadIdentifier .42B8BA0E-57F4-4E57-872B-1F5FCB8527EA PayloadScope System PayloadType Configuration PayloadUUID 42B8BA0E-57F4-4E57-872B-1F5FCB8527EA PayloadVersion 1 Under Allowed system extension types, add a line to allow team identifier 'DE8Y96K9QP' to provide 'Network extensions'. Under System extensions > Allowed system extensions, set the Bundle identifier as '.acsockext' and the Team identifier to 'DE8Y96K9QP' Go to Devices > macOS > Configuration Profiles and create a new Templates > Extensions profile Start with these ones because you want them to be on the Mac before installing the package, so it will be automatically allowed. If you skip this section and the next, your users will get prompted to allow the System Extension or the content filter to load. In order to deploy Cisco An圜onnect on macOS, you'll need the following resources on the client: Please leave a comment for suggestions or ideas! I only wanted to share my findings in the hope that it'll help others to save time. This article is not intended to be exhaustive or 'best practices'.

Install anyconnect on mac