macOS

WARNING

This section contains advanced information for power users. Changing these settings incorrectly may break client functionality.

Ensure you are using a supported version of macOS.

Pre-setting defaults

You can set some defaults from the terminal:

To skip the Data usage user approval screen, enter:

defaults write com.appgate.sdp.service user_approval -bool YES

To set one or more default profiles after a fresh install of the Client, enter:

defaults write com.appgate.sdp.service default_profiles "appgate://profile1.com/foo;appgate://profile2.com/bar"

Each profile should be separated using a semicolon encapsulated in quotes.

To set the default attention mode, enter:

defaults write com.appgate.sdp attention_mode [ATTENTION_VALUE]

Where ATTENTION_VALUE is 0 to 2 (Low-Normal-High).

Client logs

Log files are in /users/<username>/.appgatesdp/log/.

Driver logs

Driver logs are in /var/log/appgate/driver.log. You can also view them in the Console app under var/log/appgate/driver.log.

Installation (as root)

Run the installer app in the AppGate ZTNA .dmg file.

Uninstallation (as root)

Run the uninstaller app in the AppGate ZTNA .dmg file.

For manual uninstallation, run:

sudo /Library/Application\ Support/AppGate/interactive-uninstall

Cleaning client settings

Delete following files, then reboot the computer:

~/Library/Preferences/com.appgate.sdp.helper.plist

~/Library/Preferences/com.appgate.sdp.plist

~/Library/Preferences/com.appgate.sdp.service.plist

Removing stored passwords and certificates

Passwords and certificates are stored in the Keychain. Quit the AppGate client, open the Keychain Access app, search for "appgate," and delete the relevant Appgate SDP Client entries.

DNS configuration

The AppGate ZTNA client supports running a custom DNS script to modify the network configuration on connect. When configured, the AppGate ZTNA DNS resolves AppGate ZTNA domains, and the system DNS resolves all other traffic. Use this configuration if your environment relies on legacy applications that resolve domains through /etc/resolv.conf.

The script runs when the client connects and resets the network configuration when the client disconnects.

To use a custom DNS script:

1. Create your script and save it to a location such as /etc/custom_dns_script.sh.

2. Create a new file that contains the following line:

dns_script=/etc/custom_dns_script.sh

3. Save that file as /etc/appgate.conf.

When the client connects, it calls the script with:

--servers <dns-server-ips> --domains <dns-domains>

When the client disconnects, it calls the script with:

--reset