topic Re: Endpoint Security E83.20 deployment on MacOS via Microsoft Intune in Endpoint

Endpoint Security E83.20 deployment on MacOS via Microsoft Intune

Hrvoje_Brlek — Wed, 07 Oct 2020 09:38:05 GMT

Hi all,

We are trying to deploy Endpoint Security version E83.20 on MacOS laptops running 10.14 Mojave via Microsoft Intune. We are able to deploy the Endpoint Security application, but we are not able to deploy the desired profile configuration with the predefined VPN site and authentication method.

The Endpoint Security is deployed via this procedure (https://docs.microsoft.com/en-us/mem/intune/apps/lob-apps-macos), it uses a .pkg file format to wrap the application for deployment (we unfortunately cannot use the .zip format exported from the SmartEndpoint, cause it won't be accepted in Intune as a valid file format). Afterwards the application is installed via Intune on the MacOS, but it is just a plain Endpoint Security without any profile configuration.

The configuration profile is intended to be deployed via Intune VPN configuration settings. The options that are predefined are Check Point Capsule VPN or Custom VPN. We tried with Check Point Capsule VPN but with no luck. For the Custom VPN there are some options that need to be defined, and that is the part where we need help.
Which VPN identifier and Key:Value pair to use to define the site and desired authentication method?
Pictures below show the configuration from Intune dashboard.

Thanks!

Re: Endpoint Security E83.20 deployment on MacOS via Microsoft Intune

G_W_Albrecht — Wed, 07 Oct 2020 09:48:19 GMT

Afaik all config is made on EPS Server and then exported in the client install packages. I have never heard of an Intune VPN Profile deployed to Mac OS X and do not believe that such a thing exists - VPN Profiles are a Win 10 speciality, i think...

Re: Endpoint Security E83.20 deployment on MacOS via Microsoft Intune

Hrvoje_Brlek — Wed, 07 Oct 2020 10:01:09 GMT

Hi, I know but apparently Check Point is supported for MacOS (https://docs.microsoft.com/th-th/mem/intune/configuration/vpn-settings-configure and https://docs.microsoft.com/en-us/mem/intune/configuration/vpn-settings-macos) although the application mentioned is Check Point Capsule VPN not the Endpoint Security.

Re: Endpoint Security E83.20 deployment on MacOS via Microsoft Intune

G_W_Albrecht — Wed, 07 Oct 2020 11:33:21 GMT

My question should rather have been: Did you export the Mac OS X package fron the EPSS WebGUI configured as needed or just deployed a blank client instead ?

Endpoint Security E83.20 for Mac OS X can either be only an Enterprise VPN client (StandAlone) or full Endpoint Security Client with many blades as you want it.