MDM deployment with SWG

Bypassing user permissions for SWG

1. Configure System Extensions Payload. Under system extensions payload please add the following:
   • Team ID = 924635PD62
   • Extensions bundle ID = com.safervpn.osx.smb.proxy
   • Code requirement = anchor apple generic and identifier "com.safervpn.osx.smb" and (certificate leaf[field.1.2.840.113635.100.6.1.9] /* exists */ or certificate 1[field.1.2.840.113635.100.6.2.6] /* exists */ and certificate leaf[field.1.2.840.113635.100.6.1.13] /* exists */ and certificate leaf[subject.OU] = "924635PD62") 
     
2. Deploy Perimeter 81 Proxy Configuration
   • Deploy the following proxy configuration file (.plist file) utilizing the MDM software.
     Download the Proxy list file
     
3. Modify the PKG file name and deploy the software
   • After downloading, please locate and rename PKG to include the “_mdm”suffix. This will install the client certificate as part of the post-installation process of the PKG.
     
     For example:

     If the downloaded file was named “Perimeter81_8.0.4.116.pkg”, first download it, then rename the .PKG to “Perimeter81_8.0.4.116_mdm.pkg"
4. Distribute the file through the MDM while making sure the MDM runs with admin privileges.