Deploying Infoblox Endpoint by Using JAMF
This guide provides step-by-step instructions for deploying Infoblox Endpoint on multiple Apple devices using JAMF Pro. The deployment process includes downloading the installer, uploading it to JAMF, configuring policies, and scoping the deployment to devices.
Notes
Ensure that you have administrator privileges on JAMF Pro before proceeding with the deployment.
Verify that the target Apple devices meet the Infoblox Endpoint system requirements.
Step 1: Download the Infoblox Endpoint Installer
To download the Mac Client Installer Package:
Log into the Infoblox Portal.
Navigate to Configure > Administration > Downloads.
On the Downloads page, click Download Mac Client Installer Package to download the latest version of Infoblox Endpoint on the supported Apple server
Save the downloaded zip file to a designated Apple server for deployment.
Step 2: Upload the Installer to JAMF Pro
To deploy Infoblox Endpoint on multiple Apple devices using JAMF, the Infoblox Endpoint installer package must be uploaded to JAMF Pro for deployment. To upload the installer:
Log into JAMF Pro.
Navigate to Settings > Computer Management > Packages.
Image: The Settings page of Jamf Pro, showing with various configuration options. The Packages section allows users to upload packages, configure settings, and set deployment priorities.Click + New, then upload the downloaded installer package zip file.
Image: The Packages section under Computer management in Jamf Pro settings. Create a new packabe by clicking the + New button.
Step 3: Create or Update a Policy in JAMF Pro
A deployment policy must be created or updated to manage Infoblox Endpoint installation.
In JAMF Pro, navigate to Computers > policies.
Click + New to create a new policy or update an existing policy.
Image: Shows the sidebar navigation menu under the Computers section in Jamf Pro.Click Configure and select package which was uploaded.
Image: The New Policy creation screen in Jamf Pro under the Computers section, allowing users to install, cache, or uninstall packages.Select the Packages payload and add the uploaded BloxOneEndpoint-2.4.22.zip file.ip.
Image: The file upload or attachment interface.Set an appropriate trigger (such as Recurring Check-in) and configure the execution frequency to Once per computer.
Image: The policy configuration screen in Jamf Pro.
Step 4: Scope the Deployment to Target Devices
To assign the Infoblox Endpoint policy to devices:
Navigate to the Scope tab.
Image: The Scope tab in a Jamf Pro policy configuration screen.Click on + Add button and scope to devices or groups.
Click Save.
Running infoblox Service in a Corporate Environment
In macOS settings, under the Login Items & Extensions section, users can find a list of services running in the background or functioning as daemons. To ensure the Infoblox service operates correctly, users can manually enable it in this section. However, in a corporate environment, it is crucial to keep this service active without user intervention. This can be achieved by deploying a configuration profile via JAMF, which enforces the necessary settings.
Configuring Managed Login Items in JAMF Pro
This procedure explains how to configure Managed Login Items in JAMF Pro to prevent users from disabling Infoblox BloxOne Endpoint login items and extensions. After applying this configuration, the login items and extensions will appear grayed out and cannot be turned off by the end user.
Configuring Managed Login Items
To configure Managed Login Items in JAMF Pro, follow these steps:
Log in to JAMF Pro.
Navigate to Devices > Configuration Profiles.
Image: The location of Configuration Profiles menu inthe side navigation panel of JAMF Pro.Click + New to create a new configuration profile.
Image: Click New to create a new configuration profile.Select Managed Login Items.
Image: The locaton of Managed Login Items within the Configuration Profiles menu.
Adding Rule Types and Rule Options
In the New macOS Configuration Profile pane add Managed Login Items.
Configure the following rules based on Rule Type, Rule Value, and Team Identifier.
Rule Type | Rule Value | Team Identifier |
---|---|---|
Label Prefix | com.infoblox.ActiveTrustEndpoint | 6EQCN365UU |
Label Prefix | com.uninstall.infoblox.ActiveTrustEndpoint |
|
Label Prefix | com.gui.infoblox.ActiveTrustEndpoint |
|
Assigning the Configuration Policy
Assign the configuration policy to the respective devices or users.
After the configuration policy is applied, the Infoblox BloxOne Endpoint login items and extensions will appear grayed out in the system settings.
End users will not be able to turn off the Infoblox BloxOne Endpoint related login items and extensions.
For more information, see the following: