Through the Cerulean AI platform, AgileBlue can monitor your Jamf Pro environment to provide a view of security threats across your Mac endpoints. The integration leverages the Jamf Pro API for data collection
Requirements
- Active Jamf Pro license (Business or Enterprise)
- NOTE: Jamf Now does not have access to the API
- OAuth2 Credentials
- HTTP(S) Port
- A port must be set for incoming connections (default is 9202) during policy configuration. This port must be accessible from the Jamf server
- Jamf Pro webhooks
- More information regarding Jamf Pro webhook setup can be found here
Setup Steps
- Create a Jamf Pro application by following the guide linked here
- The application must have the following permissions:
- Read Computer Inventory Collection
- Read Computers
- The application must have the following permissions:
- Gather your Jamf Pro API Credentials
- client_id (available in application settings)
- client_secret (available after application creation and cannot be regenerated if lost)
- Copy your Jamf Pro API Host
- The Jamf Pro API Host is the dashboard url for your Jamf Pro console
- Ex: https://samplesubdomainhere.jamfcloud.com/
- Create Jamf Pro Webhooks (guide)
- Webhook URL: ex. https://your-elastic-agent:9202/jamf-pro-events
- Please contact support@agileblue.com for Elastic Agent details
- Authentication Type: None or Header Authentication
- If using Header Authentication, an auth token name and secret value must be provided to AgileBlue
- Webhook URL: ex. https://your-elastic-agent:9202/jamf-pro-events
Submitting Sensitive Data
The final step is to submit previously collected sensitive details to AgileBlue. Once ready, please email support@agileblue.com and a specialist will send back an encrypted message. You will be able to respond to that message with the following values:
-
- client_id
- client_secret
- Jamf Pro API Host
- Auth Token Name (if using header authentication)
- Secret Value (if using header authentication)
Need Help?
AgileBlue is always here to support you and ensure you are 100% successful. If there are any issues with the installation or if you have any questions, please reach out to AgileBlue Support.
Email: support@agileblue.com
Phone: (216) 606-9400🚨