How to Download and Install Crowdstrike Falcon Sensor on Your Mac
Crowdstrike Falcon Sensor is a lightweight agent that provides comprehensive endpoint protection for Mac devices. It detects and prevents threats from malware, ransomware, exploits, and more. In this article, we will show you how to download and install Crowdstrike Falcon Sensor on your Mac in a few simple steps.
Step 1: Download the sensor installer
To download the sensor installer, you need to log in to the Crowdstrike Falcon console using Google Chrome browser. The URL depends on which cloud your organization uses. If youâre not sure, refer to the initial setup instructions sent by Crowdstrike.
Once you are logged in, go to Hosts > Sensor Downloads and copy your Customer ID Checksum (CID) from there. You will need this later to activate the sensor.
Then, select the correct sensor version for your Mac OS by clicking on the download link to the right. The file name should end with .pkg.
Step 2: Run the sensor installer
After downloading the sensor installer, double-click on the .pkg file to launch it. You will need to enter your administrative credentials for the installation.
Follow the instructions on the screen and accept the end user license agreement. Click Install to start the installation process.
For macOS Mojave 10.14 through macOS Catalina 10.15, you will also need to approve the kernel extension on each host. You will see a message that says \"System Extension Blocked\" and asks you to open Security Preferences. Click on it and then click Allow to allow the Crowdstrike kernel extension.
Step 3: Activate the sensor
The final step is to activate the sensor using your CID. To do this, you need to run a command in the terminal using falconctl, which is installed with the sensor.
Open a terminal window and type the following command, replacing with your CID:
For macOS Big Sur 11.0 and later, you will also need to approve the system extension on each host. You will see a message that asks you to filter network content and another one that says \"System Extension Blocked\". Click Allow on both messages and then open Security Preferences. Click on the lock icon and enter your password. Then, click on Manage under System Extensions and check the box next to Crowdstrike Inc.
Step 4: Verify the sensor status
To verify that the sensor is running properly, you can check its status in two ways:
In the terminal, type sudo /Applications/Falcon.app/Contents/Resources/falconctl stats and look for \"Sensor operational: true\".
In the Crowdstrike Falcon console, go to Events App > Sensors > Newly Installed Sensors and look for your Mac device.
Congratulations! You have successfully installed Crowdstrike Falcon Sensor on your Mac. You can now enjoy comprehensive endpoint security for your device. ec8f644aee