Managing order of Transparent Proxies from MDM like JAMF

Question

Created Nov ’24

Replies 1

Boosts 9

Participants 2

There could be a case where-in multiple transparent proxies might exist in the system (for ex., Cisco AnyConnect, GlobalProtect, etc).

We want to know if there is a way to order transparent proxies so that the desired transparent proxy gets the request first. During our research, we found a resource which talks about ordering transparent proxies through MDM.

https://developer.apple.com/documentation/devicemanagement/vpn/transparentproxy

Using this reference, we tried to create a profile and push it through JAMF. Below is the profile that we created and pushed with JAMF.

Property List - 
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
    <key>TransparentProxy</key>
    <array>
        <dict>
            <key>ProviderBundleIdentifier</key>
            <string>com.paloaltonetworks.GlobalProtect.client.extension</string>
            <key>Order</key>
            <string>1</string>
        </dict>
        <dict>
            <key>ProviderBundleIdentifier</key>
            <string>com.cisco.anyconnect.macos.acsockext</string>
            <key>Order</key>
            <string>2</string>
        </dict>
        <dict>
         <key>ProviderBundleIdentifier</key>
         <string>com.mydomain.transparentproxy</string>
        <key>Order</key>
        <string>3</string>
    </dict>
    </array>

We are not sure if this is the right way to create the profile, though JAMF is not throwing any error while pushing this profile.

We see this profile on the local machine as "/Library/Managed Preferences/com.apple.networking.vpn-transparent-list.plist".

Is there a way to know if the profile took effect and the order of transparent proxies has changed.

Thanks in advance.

Boost

Answer 1

V-i-v-e-k OP

3w

@Matt Eaton @Quinn @DTS Engineering

Could you please respond to this post? In our testing we don't see the Order field have any effect whatsoever. i.e., the order in which the extensions receive traffic stays the same, irrespective of what Order we set on the MDM profile.

Could you please share a sample profile we could use here, that lists some sample extensions with the desired order (ie com.company.Extension1 supposed to receive traffic before com.company.Extension2)?

Thanks!

1