Record Screen During Rule Violations Only
We've enabled support for capturing screen recordings only when a behavior rule is violated. This targeted approach provides several key benefits, including reduced storage needs by avoiding continuous, unnecessary recordings and optimized performance for your system. Additionally, this method enhances user privacy and ensures cleaner evidence by capturing only clear, relevant proof of policy violations without the filler of routine daily activity.
How to Use the Feature
Turn on the “Record only when a behavior rule was violated” option in the Screen monitoring settings and then use the Record Video rule action with any supported rule to automatically capture a video clip of a rule violation incident. You can specify how many minutes before and after the incident the recording should be.
Resources
For more information check out the documentation for SCREEN monitoring settings and the RECORD VIDEO rule action.
Support for Palo Alto GlobalProtect VPN
We’ve improved the Mac Agent to better support environments that use Palo Alto Networks GlobalProtect VPN for all network access to perform SSL inspection / certificate injection on web traffic. The Agent now includes three configuration parameters that can be used to keep network monitoring working correctly when traffic is forced through the VPN.
How to Use This Feature
Add the following parameters to your
agent.conffile:g-protect-workaround=<1/0>
network-monitored-ports=<port 1>, <port 2>...,<port N>
network-exclude-domains=<domain 1>, <domain 2>...,<domain N>g-protect-workaround:
1= enables GlobalProtect support,0= disables it.network-monitored-ports (Optional): Comma-separated list of ports to monitor (default HTTP/HTTPS). For example,
80, 8080, 443.network-exclude-domains (Optional): Comma-separated list of domains (e.g.,
login.vpn.com, service.ringcentral.com) that should not be intercepted by Teramind’s certificate effectively bypassing the SSL inspection. Adjust this value based on the list of domains from your GlobalProtect configuration or your internal IT/security requirements.
Activate the Teramind Network Extension or reboot the Mac. The Mac Agent should now operate correctly in VPN-enforced environments.
Resources
Check out this article to learn how to activate macOS permissions.
Check out the Agent Installation/Configuration Parameters (Mac) section of the Agent installation article to learn about Agent configuration parameters.