Installing the DLP Agent for macOS

You can
install
upgrade
one DLP Agent to a Mac endpoint at a time, or you can use deployment software to install many DLP Agents automatically.
Symantec recommends that you install one DLP Agent using the manual method before you install many DLP Agents using your SMS. Installing in this manner helps you troubleshoot potential issues and ensure that installing using your SMS goes smoothly.

Understanding the DLP Agent Installation Process

The DLP Agent for macOS endpoints provides a set of features that are distinct from Windows agents. See DLP Agent Version 15.8 Monitoring Support
DLP Agent version 16.0 feature level-support in the Symantec Data Loss Prevention Help Center
for more details.
Various roles in your organization complete tasks to prepare for and complete the installation process. See the following table for a list and description of each role. These roles are identified in each subtask where they apply.
Roles for installing the DLP Agent on macOS endpoints
Name
Description
DLP administrator
Generates the macOS agent installation package and provides it to the macOS endpoint administrator for deployment.
macOS endpoint administrator
Uses the installation package to create an agent deployment confirmation.
MDM administrator
Deploys agent mobileconfig to macOS endpoints.
Network administrator
Manages the firewall to enable web access for agents.
O365 administrator
Deploys the Outlook add-in manifest to enable Outlook monitoring for agents.

Before You Begin

Confirm the following prerequisites before you start the process to install DLP Agents on macOS endpoints:

Steps to Install the Agent on macOS Endpoints