Two approvals are required for the An圜onnect system extension: MacOS 11 requires end user or MDM approval before system extensions are allowed to run. These components are visible in the macOS System Preferences – Network UI window:įigure 2 - App/Transparent proxy componentĪn圜onnect requires its system extension and all its components to be active in order to operate properly, which implies that the mentioned components are all present and show up as green/running in the left pane of the macOS Network UI, as per above screenshots. The An圜onnect extension has the following three components:

(This app controls the extension activation and deactivation and is installed under /Applications/Cisco.) About the An圜onnect System ExtensionĪn圜onnect uses a network system extension on macOS 11, bundled into an application named Cisco An圜onnect Socket Filter. The An圜onnect kernel extension is installed on macOS 11 solely for this purpose, it is no longer used by default. The advisory also details the steps for failing over to the An圜onnect kernel extension, as last-resort workaround in case a critical system extension (or related OS framework) issue is encountered. There are important changes in approving the An圜onnect system extension, as detailed in the next section. This advisory describes changes introduced in the new An圜onnect version and the steps administrators can take to confirm An圜onnect is operating correctly on macOS 11. This is the minimum version required to run An圜onnect on macOS 11. This differs from past An圜onnect versions, which rely on the now-deprecated Kernel Extension framework. 8įigure 10 - Extension deactivation prompt 9Īn圜onnect 4.9.04xxx leverages the System Extension framework available in macOS 11 (Big Sur).

Sample MDM Configuration Profile for An圜onnect System and Kernel Extension Approval 10įigure 2 - App/Transparent proxy component 3įigure 4 - Extension blocked - OS prompt 5įigure 5 - Extension blocked - An圜onnect prompt 5įigure 6 - An圜onnect extension approval 6įigure 7 - An圜onnect extension approval (multiple unapproved extensions) 7įigure 8 - An圜onnect extension's content filter approval 7įigure 9 - An圜onnect extension approval confirmation. 9Ĥ.1 Kernel Extension Approval using MDM. Last-resort Workaround: Failover to Kernel Extension. 4ģ.3 Confirming An圜onnect Extension Approval 8ģ.4 An圜onnect Extension Deactivation. Approving the An圜onnect System Extension. An圜onnect Changes Related to macOS 11 (Big Sur)Ģ.

Mac os version 10 11