Microsoft Defender ATP macOS Big Sur

[gdramirez1]

I have seen some of the work on the Microsoft Defender ATP inside 3^rd Party Software Guidance on the VMWare Github.  I’m currently working with the new configuration profiles that Microsoft put out for the new system extensions in MDATP but cannot seem to get them to come down properly on Workspace ONE UEM 2006 with Big Sur.  They get applied to the Big Sur machine but still are being blocked and making me manually approve them.  If you guys get some time to check out these new configuration profiles and add any insight to the Github would be greatly appreciated since I can’t seem to make it work for WS1. I also noticed on the page that JAMF was talking about not having a content filter and thought maybe WS1 needs to make a work around as well.   Below is the information from Microsoft. Big thanks in advance guys!

https://docs.microsoft.com/en-us/windows/security/threat-protection/microsoft-defender-atp/mac-sysex...

[gdramirez1]

Also doesn't help Microsoft's documentation is beyond vague. :smileyconfused:

[rterakedis]

Hey gdramirez1​!

So looking at this documentation, I'm wondering if you need to set it up as follows (all the following payloads are in "Device" scoped macOS Profiles).  I don't have the infrastructure to test, but if that doesn't work let me know.  I think the "content filter" payload is the only unknown for me -- that may end up needing to be Custom XML.

Privacy Preferences:

System Extensions:

Content Filter:

[rterakedis]

Hey gdramirez1​ - Just checking to see if this helped, or if you're still running into issues?  Thanks!