Agents with the Web Security feature enabled

  • Updated on Feb 23, 2026
  • Published on Jun 15, 2023
  • 1 minute(s) read
  • R
  • Perimeter Support
  • m
 Prev Next

When macOS and Windows agents have the Secure Web Gateway (SWG) feature enabled, additional steps are required after installation and first user sign‑in. These steps allow the agent to configure the required network extension, proxy settings, and certificate trust settings for secure web access.

Windows

When SWG is enabled, the agent may require administrator approval to complete the installation of web security components.

  1. Install the Harmony SASE Agent. 
  2.  Sign in to the agent. 
  3.  If prompted by Windows to approve additional components, click Allow or Yes. 
  4.  If prompted for administrator credentials, enter the credentials to continue. 
    Note:
    Local administrator permissions are required to complete the SWG installation.

If the installation does not complete successfully, sign out of the agent and sign in again to restart the setup process.

MacOS

Note:
If you already downloaded and installed the Secure Web Gateway (SWG) root certificate, skip this procedure. For more information, see Downloading the Secure Web Gateway (SWG) root Certificate.
  1. Install the Harmony SASE Agent. 
  2.  Sign in to the agent. 
    "Harmony SASE" would like to use a new network extension popup appears.
  3. Click Open System Settings.
    Alternatively, go to: System Settings → General â†’ Login Items & Extensions → Network Extensions.
  4. In the Network Extensions section, enable the toggle for Harmony SASE.app.
  5. Click Done.
    “Harmony SASE" Would Like to Add Proxy Configurations popup appears.
  6. Click Allow. 
  7. When the system displays the certificate trust dialog, enter your macOS password.
  8. Click Update Settings. 
  9. The SWG setup process is complete.
    Note:
    If the SWG root certificate is already installed, the certificate approval prompt does not appear.

Troubleshooting 

System Extension Installation Error

 If the network extension was not approved during login: 

  1.  Sign out of the Harmony SASE Agent. 
  2.  Sign in again.

Complete the approval procedure when prompted.

SWG Certificate Denied or Blocked 

 If the SWG certificate was denied, browsers display a certificate error when accessing websites.

  1.  Open Keychain Access (Press Cmd + Space, then search for Keychain Access). 
  2.  Locate the certificate named Harmony SASE Secure Web Gateway 2.
  3. Right-click the certificate and select Get Info. 
  4. Set trust permissions to Always Trust.
    Refresh the web page. The site should load without certificate warnings.