NinjaOne MDM per macOS: configurazione di esempio per SentinelOne

Argomento

Questo articolo fornisce un esempio di configurazione per l'implementazione di software di sicurezza comuni e l'ottimizzazione dell'esperienza dell'utente finale per SentinelOne.

Si noti che queste configurazioni sono fornite a titolo esemplificativo e si consiglia di consultare prima la documentazione del software dello strumento di sicurezza per assicurarsi che sia configurato correttamente.

Ambiente

NinjaOne Mobile Device Management (MDM)
Apple macOS
NinjaOne Integrations
SentinelOne

Descrizione

Gli strumenti e le app di sicurezza richiedono generalmente l'applicazione di varie configurazioni durante l'installazione per funzionare correttamente all'interno di un ambiente configurato. Quando i dispositivi sono gestiti da NinjaOne MDM, è possibile utilizzare NinjaOne per distribuire queste configurazioni standard.

Agente SentinelOne per macOS

Questa sezione illustra come semplificare la distribuzione e la configurazione dell'agente SentinelOne per macOS. Distribuisci la seguente configurazione mobile come payload personalizzato nella tua politica NinjaOne macOS su tutti i dispositivi su cui è installato l'agente SentinelOne. Per ulteriori informazioni sui payload personalizzati macOS registrati in MDM, consulta Impostazioni della politica NinjaOne Apple MDM: payload personalizzati.

Questo payload configurerà quanto segue:

Le notifiche dell'agente SentinelOne sono sempre visibili.
Le autorizzazioni per accedere a Tutti i file e Bluetooth vengono concesse automaticamente.
L'estensione di sistema viene approvata automaticamente.
Il filtro dei contenuti web viene configurato automaticamente.
L'elaborazione in background viene approvata automaticamente e non può essere disabilitata.

 &lt;?xml version="1.0" encoding="UTF-8"?&gt;
&lt;!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd"&gt;
&lt;plist version="1.0"&gt;
&lt;dict&gt;
   &lt;key&gt;PayloadContent&lt;/key&gt;
   &lt;array&gt;
       &lt;dict&gt;
           &lt;key&gt;NotificationSettings&lt;/key&gt;
           &lt;array&gt;
               &lt;dict&gt;
                   &lt;key&gt;BundleIdentifier&lt;/key&gt;
                   &lt;string&gt;com.sentinelOne.SentinelAgent&lt;/string&gt;
                   &lt;key&gt;BadgesEnabled&lt;/key&gt;
                   &lt;true /&gt;
                   &lt;key&gt;AlertType&lt;/key&gt;
                   &lt;integer&gt;2&lt;/integer&gt;
                   &lt;key&gt;CriticalAlertEnabled&lt;/key&gt;
                   &lt;true /&gt;
                   &lt;key&gt;NotificationsEnabled&lt;/key&gt;
                   &lt;true /&gt;
                   &lt;key&gt;ShowInCarPlay&lt;/key&gt;
                   &lt;false /&gt;
                   &lt;key&gt;ShowInLockScreen&lt;/key&gt;
                   &lt;true /&gt;
                   &lt;key&gt;ShowInNotificationCenter&lt;/key&gt;
                   &lt;true /&gt;
                   &lt;key&gt;SoundsEnabled&lt;/key&gt;
                   &lt;true /&gt;
               &lt;/dict&gt;
           &lt;/array&gt;
           &lt;key&gt;PayloadType&lt;/key&gt;
           &lt;string&gt;com.apple.notificationsettings&lt;/string&gt;
           &lt;key&gt;PayloadOrganization&lt;/key&gt;
           &lt;string&gt;Sentinel Labs, Inc.&lt;/string&gt;
           &lt;key&gt;PayloadIdentifier&lt;/key&gt;
           &lt;string&gt;com.apple.notificationsettings.FBAE4EE4-76AA-4839-959A-26A115241574&lt;/string&gt;
           &lt;key&gt;PayloadUUID&lt;/key&gt;
           &lt;string&gt;FBAE4EE4-76AA-4839-959A-26A115241574&lt;/string&gt;
           &lt;key&gt;PayloadDisplayName&lt;/key&gt;
           &lt;string&gt;Notifiche SentinelOne&lt;/string&gt;
           &lt;key&gt;PayloadVersion&lt;/key&gt;
           &lt;integer&gt;1&lt;/integer&gt;
       &lt;/dict&gt;
       &lt;dict&gt;
           &lt;key&gt;Servizi&lt;/key&gt;
           &lt;dict&gt;
               &lt;key&gt;SystemPolicyAllFiles&lt;/key&gt;
               &lt;array&gt;
                   &lt;dict&gt;
                       &lt;key&gt;Allowed&lt;/key&gt;
                       &lt;integer&gt;1&lt;/integer&gt;
                       &lt;key&gt;CodeRequirement&lt;/key&gt;
                       &lt;string&gt;anchor apple generic and identifier "com.sentinelone.sentineld" and (certificate leaf[campo.1.2.840.113635.100.6.1.9] /* esiste */ o certificato 1[campo.1.2.840.113635.100.6.2.6] /* esiste */ e certificato foglia[campo.1.2.840.113635.100.6.1.13] /* esiste */ e certificato foglia[subject.OU] = "4AYE5J54KN")&lt;/string&gt;
                       &lt;key&gt;Identificatore&lt;/key&gt;
                       &lt;string&gt;com.sentinelone.sentineld&lt;/string&gt;
                       &lt;key&gt;IdentificatoreTipo&lt;/key&gt;
                       &lt;string&gt;bundleID&lt;/string&gt;
                       &lt;key&gt;CodiceStatico&lt;/key&gt;
                       &lt;integer&gt;0&lt;/integer&gt;
                   &lt;/dict&gt;
                   &lt;dict&gt;
                       &lt;key&gt;Allowed&lt;/key&gt;
                       &lt;integer&gt;1&lt;/integer&gt;
                       &lt;key&gt;CodeRequirement&lt;/key&gt;
                       &lt;string&gt;anchor apple generic and identifier "com.sentinelone.sentineld-helper" and (certificate leaf[field.1.2.840.113635.100.6.1.9] /* esiste */ o certificato 1[campo.1.2.840.113635.100.6.2.6] /* esiste */ e certificato foglia[campo.1.2.840.113635.100.6.1.13] /* esiste */ e certificato foglia[soggetto.OU] = "4AYE5J54KN")&lt;/string&gt;
                       &lt;chiave&gt;Identificatore&lt;/chiave&gt;
                       &lt;string&gt;com.sentinelone.sentineld-helper&lt;/string&gt;
                       &lt;key&gt;IdentifierType&lt;/key&gt;
                       &lt;string&gt;bundleID&lt;/string&gt;
                       &lt;key&gt;StaticCode&lt;/key&gt;
                       &lt;integer&gt;0&lt;/integer&gt;
                   &lt;/dict &gt;
                   &lt;dict&gt;
                       &lt;key&gt;Allowed&lt;/key&gt;
                       &lt;integer&gt;1&lt;/integer&gt;
                       &lt;key&gt;CodeRequirement&lt;/key&gt;
                       &lt;string&gt;anchor apple generic and identifier "com.sentinelone.sentineld-shell" and (certificate leaf[field.1.2.840.113635.100.6.1.9] /* esiste */ o certificato 1[campo.1.2.840.113635.100.6.2.6] /* esiste */ e certificato foglia[campo.1.2.840.113635.100.6.1.13] /* esiste */ e certificato foglia[soggetto.OU] = "4AYE5J54KN")&lt;/string&gt;
                       &lt;key&gt;Identificatore&lt;/key&gt;
                       &lt;string&gt;com.sentinelone.sentineld-shell&lt;/string&gt;
                       &lt;key&gt;IdentificatoreTipo&lt;/key&gt;
                       &lt;string&gt;bundleID&lt;/string&gt;
                       &lt;key&gt;StaticCode&lt;/key&gt;
                       &lt;integer&gt;0&lt;/integer&gt;
                   &lt;/dict&gt;
               &lt;/array&gt;
               &lt;key&gt;BluetoothAlways&lt;/key&gt;
               &lt;array&gt;
                   &lt;dict&gt;
                       &lt;key&gt;Allowed&lt;/key&gt;
                       &lt;integer&gt;1&lt;/integer&gt;
                       &lt;key&gt;CodeRequirement&lt;/key&gt;
                       &lt;string&gt;anchor apple generic and identifier "com.sentinelone.sentinel-helper" and (certificate leaf[field.1.2.840.113635.100.6.1.9] /* esiste */ o certificato 1[campo.1.2.840.113635.100.6.2.6] /* esiste */ e certificato foglia[campo.1.2.840.113635.100.6.1.13] /* esiste */ e certificato foglia[subject.OU] = "4AYE5J54KN")&lt;/string&gt;
                       &lt;key&gt;Identifier&lt;/key&gt;
                       &lt;string&gt;com.sentinelone.sentinel-helper&lt;/string&gt;
                       &lt;key&gt;IdentifierType&lt;/key&gt;
                       &lt;string&gt;bundleID&lt;/string&gt;
                       &lt;key&gt;StaticCode&lt;/key&gt;
                       &lt;integer&gt;0&lt;/integer&gt;
                   &lt;/dict&gt;
               &lt;/array&gt;
           &lt;/dict&gt;
           &lt;key&gt;PayloadType&lt;/key&gt;
           &lt;string&gt;com.apple.TCC.configuration-profile-policy&lt;/string&gt;
           &lt;key&gt;PayloadOrganization&lt;/key&gt;
           &lt;string&gt;Sentinel Labs, Inc.&lt;/string&gt;
           &lt;key&gt;PayloadIdentifier&lt;/key&gt;
           &lt;string&gt;com.apple.TCC.configuration-profile-policy.820943C1-D570-4466-B18D-BD00FF002A36&lt;/string&gt;
           &lt;key&gt;PayloadUUID&lt;/key&gt;
           &lt;string&gt;820943C1-D570-4466-B18D-BD00FF002A36&lt;/string&gt;
           &lt;key&gt;PayloadDisplayName&lt;/key&gt;
           &lt;string&gt;Privacy Preferences Policy Control&lt;/string&gt;
           &lt;key&gt;PayloadVersion&lt;/key&gt;
           &lt;integer&gt;1&lt;/integer&gt;
       &lt;/dict&gt;
       &lt;dict&gt;
           &lt;key&gt;FilterDataProviderBundleIdentifier&lt;/key&gt;
           &lt;string&gt;com.sentinelone.network-monitoring&lt;/string&gt;
           &lt;key&gt;FilterDataProviderDesignatedRequirement&lt;/key&gt;
           &lt;string&gt;identificatore "com.sentinelone.network-monitoring" e anchor apple generic e (certificato foglia[campo.1.2.840.113635.100.6.1.9] /* esiste */ o certificato 1[campo.1.2.840.113635.100.6.2.6] /* esiste */ e certificato foglia[campo.1.2.840.113635.100.6.1.13] /* esiste */ e certificato foglia[subject.OU] = "4AYE5J54KN")&lt;/string&gt;
           &lt;key&gt;FilterGrade&lt;/key&gt;
           &lt;string&gt;firewall&lt;/string&gt;
           &lt;key&gt;FilterPackets&lt;/key&gt;
           &lt;false/&gt;
           &lt;key&gt;FilterSockets&lt;/key&gt;
           &lt;true/&gt;
           &lt;key&gt;FilterType&lt;/key&gt;
           &lt;string&gt;Plugin&lt;/string&gt;
           &lt;key&gt;PluginBundleID&lt;/key&gt;
           &lt;string&gt;com.sentinelone.extensions-wrapper&lt;/string&gt;
           &lt;key&gt;UserDefinedName&lt;/key&gt;
           &lt;string&gt;SentinelOne Extensions&lt;/string&gt;
           &lt;key&gt;PayloadType&lt;/key&gt;
           &lt;string&gt;com.apple.webcontent-filter&lt;/string&gt;
           &lt;key&gt;PayloadOrganization&lt;/key&gt;
           &lt;string&gt;Sentinel Labs, Inc.&lt;/string&gt;
           &lt;key&gt;PayloadIdentifier&lt;/key&gt;
           &lt;string&gt;com.apple.webcontent-filter.5C9D8A65-3FDC-4488-ACA9-7D61151C8FD4&lt;/string&gt;
           &lt;key&gt;PayloadUUID&lt;/key&gt;
           &lt;string&gt;5C9D8A65-3FDC-4488-ACA9-7D61151C8FD4&lt;/string&gt;
           &lt;key&gt;PayloadDisplayName&lt;/key&gt;
           &lt;string&gt;Web Content Filter Payload&lt;/string&gt;
           &lt;key&gt;PayloadVersion&lt;/key&gt;
           &lt;integer&gt;1&lt;/integer&gt;
       &lt;/dict&gt;
       &lt;dict&gt;
           &lt;key&gt;AllowUserOverrides&lt;/key&gt;
           &lt;false/&gt;
           &lt;key&gt;AllowedTeamIdentifiers&lt;/key&gt;
           &lt;array&gt;
               &lt;string&gt;4AYE5J54KN&lt;/string&gt;
           &lt;/array&gt;
           &lt;key&gt;RemovableSystemExtensions&lt;/key&gt;
           &lt;dict&gt;
               &lt;key&gt;4AYE5J54KN&lt;/key&gt;
               &lt;array&gt;
                   &lt;string&gt;com.sentinelone.network-monitoring&lt;/string&gt;
               &lt;/array&gt;
           &lt;/dict&gt;
           &lt;key&gt;NonRemovableFromUISystemExtensions&lt;/key&gt;
           &lt;dict&gt;
               &lt;key&gt;4AYE5J54KN&lt;/key&gt;
               &lt;array&gt;
                   &lt;string&gt;com.sentinelone.network-monitoring&lt;/string&gt;
               &lt;/array&gt;
           &lt;/dict&gt;
           &lt;key&gt;PayloadType&lt;/key&gt;
           &lt;string&gt;com.apple.system-extension-policy&lt;/string&gt;
           &lt;key&gt;PayloadOrganization&lt;/key&gt;
           &lt;string&gt;Sentinel Labs, Inc.&lt;/string&gt;
           &lt;key&gt;PayloadIdentifier&lt;/key&gt;
           &lt;string&gt;com.apple.system-extension-policy.CC5F64AF-7C8C-4977-912F-8060B56CE223&lt;/string&gt;
           &lt;key&gt;PayloadUUID&lt;/key&gt;
           &lt;string&gt;CC5F64AF-7C8C-4977-912F-8060B56CE223&lt;/string&gt;
           &lt;key&gt;PayloadDisplayName&lt;/key&gt;
           &lt;string&gt;Estensioni di sistema&lt;/string&gt;
           &lt;key&gt;PayloadVersion&lt;/key&gt;
           &lt;integer&gt;1&lt;/integer&gt;
       &lt;/dict&gt;
       &lt;dict&gt;
           &lt;key&gt;Regole&lt;/chiave&gt;
           &lt;array&gt;
               &lt;dict&gt;
                   &lt;chiave&gt;RuleType&lt;/chiave&gt;
                   &lt;string&gt;LabelPrefix&lt;/string&gt;
                   &lt;chiave&gt;RuleValue&lt;/chiave&gt;
                   &lt;string&gt;com.sentinelone.&lt;/string&gt;
                   &lt;key&gt;Comment&lt;/key&gt;
                   &lt;string&gt;Prevent removal of SentinelOne Launch Agents and Launch Daemons&lt;/string&gt;
               &lt;/dict&gt;
               &lt;dict&gt;
                   &lt;key&gt;RuleType&lt;/key&gt;
                   &lt;string&gt;BundleIdentifierPrefix&lt;/string&gt;
                   &lt;key&gt;RuleValue&lt;/key&gt;
                   &lt;string&gt;com.sentinelone.&lt;/string&gt;
                   &lt;key&gt;Comment&lt;/key&gt;
                   &lt;string&gt;Impedisci la rimozione degli agenti di avvio e dei daemon di avvio SentinelOne&lt;/string&gt;
               &lt;/dict&gt;
           &lt;/array&gt;
           &lt;key&gt;PayloadType&lt;/key&gt;
           &lt;string&gt;com.apple.servicemanagement&lt;/string&gt;
           &lt;key&gt;PayloadOrganization&lt;/key&gt;
           &lt;string&gt;Sentinel Labs, Inc.&lt;/string&gt;
           &lt;key&gt;PayloadIdentifier&lt;/key&gt;
           &lt;string&gt;com.apple.servicemanagement.C4050BE2-2915-4548-89B5-F2E16EBCE2DD&lt;/string&gt;
           &lt;key&gt;PayloadUUID&lt;/key&gt;
           &lt;string&ampgt;C4050BE2-2915-4548-89B5-F2E16EBCE2DD&lt;/string&gt;
           &lt;key&gt;PayloadVersion&lt;/key&gt;
           &lt;integer&gt;1&lt;/integer&gt;
       &lt;/dict&gt;
   &lt;/array&gt;
   &lt;key&gt;PayloadDescription&lt;/key&gt;
   &lt;string&gt;Fornisce accesso a tutti i dischi ai processi Sentinel One&lt;/string&gt;
   &lt;key&gt;PayloadDisplayName&lt;/key&gt;
   &lt;string&gt;SentinelOne - Controllo della privacy&lt;/string&gt;
   &lt;key&gt;PayloadIdentifier&lt;/key&gt;
   &lt;string&gt;SentinelOne.014D9FCD-A9F9-4F66-927D-7214A8B1A0BC&lt;/string&gt;
   &lt;key&gt;PayloadOrganization&lt;/key&gt;
   &lt;string&gt;Sentinel Labs, Inc.&lt;/string&gt;
   &lt;key&gt;PayloadScope&lt;/key&gt;
   &lt;string&gt;System&lt;/string&gt;
   &lt;key&gt;PayloadType&lt;/key&gt;
   &lt;string&gt;Configuration&lt;/string&gt;
   &lt;key&gt;PayloadUUID&lt;/key&gt;
   &lt;string&gt;014D9FCD-A9F9-4F66-927D-7214A8B1A0BC&lt;/string&gt;
   &lt;key&gt;PayloadVersion&lt;/key&gt;
   &lt;integer&gt;1&lt;/integer&gt;
&lt;/dict&gt;
&lt;/plist&gt;

Risorse aggiuntive

Per ulteriori informazioni su NinjaOne MDM, consultare le seguenti risorse:

NinjaOne MDM per macOS: configurazione di esempio per SentinelOne

Argomento

Ambiente

Descrizione

Agente SentinelOne per macOS

Risorse aggiuntive

Domande frequenti

Passi successivi

Risorse

Azienda

Informazioni di contatto