Capture Client Agent OS Requirements : Mac
Description
This article provides comprehensive guidance on the supportability of the Capture Client Agent for the macOS platform.
Resolution
The Capture Client Management Console is compatible with endpoints such as PCs, laptops, and tablets running the specified operating systems. It features advanced threat protection powered by SentinelOne, with the SentinelOne agent being automatically installed and configured based on the Threat Protection security policy. The recommended version of the SentinelOne agent is listed below:
Guidelines for MacOS
| MacOS Version | MacOS Name | Capture Client Version | SentinelOne Agent Version | Sentinel Agent (EOS) |
| 15.0, 15.0.1, 15.1, 15.1.1, 15.2 | Sequoia | 3.10.0 or later | 24.2.2 or later | - |
| 14.7.2 |
Sonoma | 3.10.0 or later | 24.2.2 or later |
|
| 14.7.1 | 3.10.0 or later | 24.2.2 or later |
| |
| 14.7 | 3.10.0 or later | 23.3.2 or later | - | |
| 14.6.1 | 3.10.0 or later | 23.3.2 or later | - | |
| 14.6 | 3.10.0 or later | 23.3.2 or later | - | |
| 14.2, 14.2.1, 14.3, 14.3.1, 14.4, 14.4.1, 14.5 | 3.10.0 or later | 23.3.2 or later | 23.2.6+ | |
| 14.0, 14.1, 14.1.1, 14.1.2 | 3.10.0 or later | 23.3.1 or later | 23.2.2+ | |
| 13.7.2 |
Ventura | 3.10.0 or later | 24.2.2 or later | - |
| 13.7.1 | 3.10.0 or later | 24.2.2 or later | - | |
| 13.7 | 3.10.0 or later | 24.2.2 or later | - | |
| 13.6.9 | 3.10.0 or later | 24.2.2 or later | - | |
| 13.6.8 | 3.10.0 or later | 23.4.1 or later | - | |
| 13.6.3, 13.6.4, 13.6.5, 13.6.6, 13.6.7 | 3.10.0 or later | 23.4.1or later | 23.2.6+ | |
| 13.5.1,13.6,13.6.1 | 3.10.0 or later | 23.4.1 or later | 23.2.1+ | |
| 13.3, 13.3.1, 13.3.1(a), 13.4,13.4.1,13.5 | 3.10.0 or later | 23.4.1 or later | 23.2.1+ | |
| 13.2, 13.2.1 | 3.10.0 or later | 23.4.1 or later | 23.2.1+ | |
| 13.0, 13.1 | 3.10.0 or later | 23.4.1 or later | 23.2.1+ | |
| 12.7.6 |
Monterey | 3.10.0 or later | 23.4.1 or later | - |
| 12.7.2, 12.7.3, 12.7.4, 12.7.5 | 3.10.0 or later | 23.4.1 or later | 23.2.6+ | |
| 12.7.1 | 3.10.0 or later | 23.4.1 or later | 23.2.3+ | |
| 12.7 | 3.10.0 or later | 23.4.1 or later | 23.2.1+ | |
| 12.6.8, 12.6.1-12.6.7 | 3.10.0 or later | 23.3.1 or later | 23.2.1+ |
TIP: Supports both Apple M1/M2 Silicon and Intel chipset Mac Endpoints
Important:
- The SentinelOne macOS Agent version 24.2.2 is confirmed stable and compatible with macOS Sequoia 15. We strongly recommend that you upgrade the Agent to the latest version 24.2.2 as soon as possible.
- The Agent version 23.2.6+ is confirmed stable and compatible with macOS Sonoma. We strongly recommend that you upgrade the Agent to version 23.3.2 as soon as possible.
- Apple changes introduced in macOS Sonoma 14.2, 13.6.3, and 12.7.2 cause Agent upgrades and installations with MDM to fail on endpoints with those operating systems. Users with macOS 14.2, 13.6.3, 12.7.2 or later that want to upgrade their SentinelOne Agent or install with an MDM tool must use version 23.2 SP2 or later.
Note:
- Due to macOS system changes to the permissions authorization mechanism introduced in macOS Sequoia 15, when a process tries to access local network resources, the system will ask the user to allow "sentineld" to access local networks. This must be allowed so that the SentinelOne Agent can fully protect the endpoint. Currently, Apple does not provide any method to pre-approve these requests using MDM.
- In some cases, due to macOS system changes in macOS Sequoia 15, SSH connection drops may occur. However, this issue seems to be resolved in macOS Sequoia 15.0.1. If you identify this behavior in your organization, please reach out to SentinelOne support for deeper investigation.
- To use Device Control for Bluetooth devices with macOS Sonoma, give Bluetooth permission to the sentinel_helper application. Setting Bluetooth permissions with MDM profile is not supported by Apple.
- Apple changes introduced in macOS Sonoma 14.4 and 14.4.1 can prevent the system notification that Full Disk Access has not been authorized for SentinelOne. If you are running macOS Sonoma 14.4 or 14.4.1 and have not authorized Full Disk Access for SentinelOne, you can upgrade to macOS Agent 24.1.2+ or macOS Sonoma 14.5 to enable the notification or you can authorize Full Disk Access for SentinelOne.
- 24.3 macOS agent is not supported on Monterey. We recommend you plan your macOS device upgrades to the latest version of macOS. Please use the following link to know more. (https://support.apple.com/en-in/109033).
- The endpoints running SentinelOne macOS agent 24.2 or less on Monterey, we recommend the following, please choose the option that is best suitable for you:
a. Upgrade the macOS version from Monterey (12.7.6 or less) to Sequoia (15.0.1) Once upgraded, set the SentinelOne agent version to the latest SonicWall-Managed release under the Client policies on the Capture Client Management Console. - Most recommended.
b. Change the SentinelOne agent version to the supported version i.e. 24.2 or less under the Client policies on the Capture Client Management
Console.
c. Download the supported SentinelOne version i.e. 24.2 or less from the Capture Client Management Console and install it on endpoints that are running macOS Monterey. - Less Recommended.