Install the Traps Agent for Mac

Download the installation package you want to install from Traps management service.
Copy the installation package to the endpoint on which you want to install the Traps software.
Unzip the installation package.
(
Optional in Traps 6.1.2 and later releases
) Configure a Traps specific proxy on the endpoint.
If you are deploying Traps in an environment where Traps agents communicate with the Traps management service through a proxy, you must assign the proxy IP address and port number during the Traps agent installation on the endpoint.
Locate the
Config.xml
file in the unzipped installation folder.
Edit the
<proxy_list>
<proxyserver>:<port>
</proxy_list>
tag.
To install a Traps agent with a Traps specific proxy, enter your proxy IP address and port number. You can set up to five different proxies per agent. Traps management service chooses randomly which proxy is used to communicate with the agent each time.
											
<proxy_list>10.196.20.244:8080,10.196.20.245:8080</proxy_list>
										
To install a Traps agent communicating through the Palo Alto Networks Broker Service, you must enter the broker VM IP address and port number 8888 only.
After the initial installation, you can change the proxy settings in
Traps management service
Endpoints
.
Install the Traps software.
Run the
Traps.pkg
installation file.
Click
Continue
to proceed with the installation.
If prompted to confirm the destination, click
Continue
.
Click
Install
to begin the installation.
Enter the
User Name
and
Password
of the administrator with access to install software on the endpoint, and then click
Install Software
.
(
macOS 10.13 and later versions
) Allow Traps to install system extensions:
Dismiss the
System Extension Blocked
warning.
Go to
System Preferences
Security & Privacy
General
and select
Allow
.
Traps logs any installation errors to
/var/logs/installation.log
. If installation fails for any reason, you can view this log to better understand the cause of the installation failure.
After the installation completes, verify your connection.
To open the Traps console, click the Traps icon in the menu bar, and select
Open Console
.
Click
Check In Now
to initiate a connection with your tenant of Traps management service. If successful, the
Last Check-In
field updates to display the recent check-in date and time.
(
macOS 10.15 and later versions
) Grant full disk access.
Due to changes in the security settings of macOS 10.15, you must allow Traps full disk access on your endpoint to enable full protection. If you do not authorize Traps full disk access on your endpoint, the Traps agent provides only partial protection of files in the
/Applications
directory. The first time Traps detects an attempt to run an executable file located in another protected location on the endpoint as part of the anti-malware flow, macOS will deny Traps access and prompts the user to grant full disk access.
You can grant Traps full disk access manually or using a third-party tool such as JAMF.
To grant Traps full disk access locally on the endpoint:
Go to
System Preferences
Security & Privacy
tab, and select
Full Disk Access
.
To make changes, click lock icon ( ) on the bottom left, enter your credentials, and
Unlock
.
Navigate to
Macintosh HD
Library
Application Support
PaloAltoNetworks
Traps
bin
.
Select
trapsd
,
authorized
, and
pmd
.

When you’re done, click to save your changes and stop editing.