New Features
Monitoring > Network Monitoring
The Mac Agent is now able to monitor TCP/IPv4-based network connections on macOS 11 (Big Sur) and later.
You will be able to see the users' network activities under the Monitoring > Network Monitoring report:
Here are a few things to note:
This feature isn't available on macOS 10.15 (Catalina) or older versions.
At the moment, only the TCP/IPv4 protocol can be monitored.
You will be able to view all of the parameters, such as: Duration, Destination IP, Destination Port, Out (bytes sent), In (bytes received), Process, etc.
At the moment, the settings under the Monitoring Settings > Network have no effect. The network monitoring is turned on by default and cannot be turned off:
Behavior Rules > Networking
Agent support for the Networking Activity-based rules is now available on macOS 11 (Big Sur) and later.
You can create a Networking rule by clicking the ADD RULE FOR THIS POLICY button on the Behavior > Policies screen:
Here are a few things to note:
This feature isn't available on macOS 10.15 (Catalina) or older versions.
The rule currently supports Application Name, Remote Host, Remote Port, Bytes Sent and Bytes Received conditions.
Only the Block, Warn and Lock Out User rule actions are supported at the moment.
You will be able to view the rule violation events on the BI Reports > Behavior Alerts report.
Please see the Rules Guide >Activity Rules: What Activities Can You Detect? > Networking section to learn more.
Behavior Rules > Lock Out User Action
The Agent now supports the Lock Out User rule action:
Here are a few things to note:
When the rule is triggered, the user is locked out only once and taken to the login screen. They can log back in.
In case the action is configured with an Applications condition, then the last active application specified in the condition will be terminated and the user will be locked out.
In case the action is used with a Network-based rule, the network connection that triggered the rule will be closed.
Please see the Rules Guide >Defining Rule Actions > Lock Out User Action section to learn more.
New Versioning Scheme
From now on, Teramind will be using a new versioning scheme for the Mac Agents: <major>.<minor>.<build number>. For example, 0.1.233.1015.
This will simplify version control and help admins keep track of which computers have which app installed. Especially, if you are using a custom agent, it will help decide what/when you need to update.
New Agent Installation/Uninstallation Steps
The installation/uninstallation process for the Mac Agent has changed slightly. The documentation has been updated to reflect the changes:
Bug Fixes
Uninstaller Would Open All Minimized Windows
You might have noticed that, during the uninstall process, the uninstaller would open all minimized windows at the end of the process, when it's removing the NetApp extension. The bug is fixed.