G DATA MXDR

Installing the G DATA Agent on macOS systems

The installation on macOS systems can be performed either via a GUI or via a command-line command.

For unique identification, the system’s FQDN on which the G DATA Agent is to be installed is used. Please ensure that the HostName (not ComputerName or LocalHostName!) is set accordingly on the macOS system.

Important information on using templates.

The G DATA Agent must not be installed on system images/templates that are then used for cloning on other systems. The installation of the G DATA Agent must always be performed after a cloning process to ensure unique identification of Incidents.

Installation via GUI

1

Download the installation file either from the G DATA Web-Portal in the "New endpoint installation" view, or via direct download here.

2

Click the installation file and run it.
Start of installation

3

Enter the Setup ID. You can view it in the G DATA Web-Portal in the "New endpoint installation" view.
Enter Setup ID

4

You can then optionally configure a proxy server. If you do not use a proxy server, leave the fields empty.
Configure proxy server

5

Next, select which users the installation should apply to. Due to the nature of the software, it is only possible to install the Agent for all users. Click Continue.
Select users

6

Next, you must select the volume on which the installation will be performed. As in the previous step, there is also no selection option here. Click Install.

If you click the Change Install Location …​ button, you will be taken back to the previous step. As described, there is no selection option here.
Installation path

7

The installation process now starts. After the installation completes successfully, you will receive a confirmation that the Agent was installed successfully.
Installation process
Summary

8

As the final step, you must grant Full Disk Access (FDA) to the "G DATA Agent" and the "G DATA MESP Service". To do so, go to "Privacy & Security" in Settings and enable the corresponding switch for both applications.
Grant Full Disk Access

Installation via the command line

1

Download the installation file either from the G DATA Web-Portal in the "New endpoint installation" view, or via direct download here.

2

At the location of the installation file, a file named gdata.agent.cfg must be present or created with the following content:

SETUPID="setupid"
PROXYPACURL="pacurl"
PROXYURL="proxyurl"
PROXYUSERNAME="proxyusername"
PROXYPASSWORD="proxypassword"
PROXYBYPASS="proxybypasslist"

Replace "setupid" with your Setup ID (including the quotation marks), which you can view in the G DATA Web-Portal in the "New endpoint installation" view. Except for this entry, all entries are optional and only need to be created if a proxy server is to be configured.

3

Now open the command line.

4

Enter the following command:

sudo installer -pkg gdata-agent-universal.pkg -target /

5

Now grant Full Disk Access (FDA) to the applications "G DATA Agent" and "G DATA MESP service". To do so, open "Privacy & Security" in Settings and enable the corresponding switches.
Grant Full Disk Access

6

The installation is complete after the command has been executed successfully and Full Disk Access has been granted.

Accessibility of the G DATA cloud

To ensure reliable and timely alerting of events and Incidents, the G DATA Cloud must be reachable and must not be blocked by a firewall. The settings listed below are required for this. It must be ensured that *.gdatasecurity.de and *.gdatasoftware.com can be resolved via DNS and are reachable.

  • Port openings

    • The G DATA agents on the Endpoints must be able to reach the IPs of our backend servers via port TCP/443, IP range 194.156.84.0/22 (194.156.84.0 - 194.156.87.255).

  • Protocols

    • The systems must be able to communicate using the HTTPS:// and WSS:// protocols.

  • TLS

    • Deployed proxy servers must support at least TLS 1.2.

    • SSL Inspection or Deep Packet Inspection must not be enabled.