Bulk deploying the FortiDLP Browser Extension to macOS

This section provides information about the Arc, Brave, Firefox, Google Canary, Google Chrome, Microsoft Edge Chromium, and Vivaldi extensions. For details about the Safari extension, see Bulk deploying the FortiDLP Browser Extension for Safari to macOS.

As detailed in Web monitoring, the FortiDLP Browser Extension allows the FortiDLP Agent to track users' web behavior and enforce browser-related policies—for example, to block malicious downloads.

Refer to these instructions to install or uninstall the FortiDLP Browser Extension using Jamf Pro:

• How to install the FortiDLP Browser Extension using an existing profile in Jamf Pro
• How to install the FortiDLP Browser Extension using a Fortinet profile in Jamf Pro
• How to uninstall the FortiDLP Browser Extension using Jamf Pro.

After you install the extension, you must enable web monitoring via Agent configuration groups. For instructions, see the FortiDLP Administration Guide.

Fortinet browser extension configuration profiles

Our macOS accessory bundle, which you can download from the FortiDLP Console or access on a device's file system post Agent installation, includes configuration profiles that control the installation and uninstallation of the FortiDLP Browser Extension and manage optional browser settings.

Profile	Description
browserInstallChromium.mobileconfig	Provides settings for installing the Arc, Brave, Google Chrome, Google Chrome Canary, Microsoft Edge, and Vivaldi browser extensions. If you want to exclude specific browsers, you can modify this profile before uploading it to Jamf Pro.
browserInstallFirefox.mobileconfig	Provides settings for installing the Firefox browser extension.
dnsOverHttps.mobileconfig	Provides settings for disabling browsers' DNS-over-HTTPS (DoH) support. DNS lookups in a browser that supports DoH are encrypted and may not be monitored by the FortiDLP Agent. By default, DoH settings are not modified when you install the FortiDLP Browser Extension. Installing this profile explicitly disables browsers' DoH support.
privateBrowsing.mobileconfig	Provides settings for disabling private browsing. By default, private browsing is enabled when you install the FortiDLP Browser Extension. However, as private browsing activity cannot be monitored by the FortiDLP Agent, you can use this profile to disable this functionality.
uninstallFirefoxExtension.mobileconfig	Provides settings for uninstalling the Firefox browser extension.

The way in which you use these profiles will depend on your existing Jamf Pro deployment setup. Below you will find general guidance for common deployment use cases. Refer to Jamf's documentation here for more information.

We recommend signing profiles, as described in Apple's documentation here. For guidance with setting up self-signed certificates, see our article here.

How to install the FortiDLP Browser Extension using an existing profile in Jamf Pro

If you already use a configuration profile for managing other browser settings, such as extension installation or block lists, we recommend incorporating the relevant settings from our profiles into your existing profile, as follows.

1. Do one of the following:
   • To download the macOS accessory bundle from the FortiDLP Console:
     1. On the left-hand sidebar, click .
     2. Under Agents, select the Agent deployment tab.
     3. In the Installers section:
        1. In the Operating system menu, select MacOS.
        2. In the Agent version menu, select the Agent version number.
        3. In the Artifact menu, select Accessory bundle.
        4. Click Download.
        5. Double-click the downloaded accessory bundle (ZIP file).
   • To access the macOS accessory bundle on the device:
     1. Go to /Library/Application Support/Ava/Reveal/.
     2. Double-click the accessory bundle (ZIP file).
        
     An agent-accessory directory is created in the Downloads directory.
2. In Jamf Pro, go to Computers > Configuration Profiles.
3. Click your existing profile.
4. Click Edit.
5. Copy the relevant payload information from our profiles into your own.

   You only need to copy a portion of the payload. For guidance, see macOS FortiDLP Browser Extension payload extracts.

6. In the middle panel, select the Scope tab.
7. Verify that the profile is properly scoped and is applied to all relevant devices.
8. Click Save.
9. Click Done.

How to install the FortiDLP Browser Extension using a Fortinet profile in Jamf Pro

1. Do one of the following:
   • To download the macOS accessory bundle from the FortiDLP Console:
     1. On the left-hand sidebar, click .
     2. Under Agents, select the Agent deployment tab.
     3. In the Installers section:
        1. In the Operating system menu, select MacOS.
        2. In the Agent version menu, select the Agent version number.
        3. In the Artifact menu, select Accessory bundle.
        4. Click Download.
        5. Double-click the downloaded accessory bundle (ZIP file).
   • To access the macOS accessory bundle on the device:
     1. Go to /Library/Application Support/Ava/Reveal/.
     2. Double-click the accessory bundle (ZIP file).
        
     An agent-accessory directory is created in the Downloads directory.
2. In Jamf Pro, go to Computers > Configuration Profiles.
3. Click Upload.
4. Select one of the following profiles from the agent-accessory folder:
   • browserInstallChromium.mobileconfig (for Arc, Brave, Google Chrome, Google Chrome Canary, Microsoft Edge, and Vivaldi)
   • browserInstallFirefox.mobileconfig (for Firefox).
5. Click Upload.
6. In the middle panel, select the Scope tab.
7. Verify that the profile is properly scoped and is applied to all relevant devices.
8. Click Save.
9. Click Done.
10. Repeat as needed to install all available browser extensions.

How to uninstall the FortiDLP Browser Extension using Jamf Pro

1. In Jamf Pro, go to Computers > Configuration Profiles.
2. Click the profile you used to previously install the browser extension that you now want to remove. If you uploaded our configuration profiles, their default display names are:

   • FortiDLP Agent Browser Extension Install Chromium (for Arc, Brave, Google Chrome, Google Chrome Canary, Microsoft Edge, and Vivaldi)

   • FortiDLP Agent Browser Extension Install Firefox (for Firefox).

3. Click Delete.
4. In the dialog box, click Delete.
5. If you are uninstalling the Firefox browser extension, also do the following:
   1. Click Upload.
   2. Select the uninstallFirefoxExtension.mobileconfig profile from the agent-accessory folder.
   3. Click Upload.
   4. In the middle panel, select the Scope tab.
   5. Verify that the profile is properly scoped and is applied to all relevant devices.
   6. Click Save.
   7. Click Done.