Install Skyhigh Client Proxy
You need to install the Skyhigh Client Proxy software on devices running Windows or macOS. The Client Proxy software installed on the devices facilitates SAML authentication. When the user is not authenticated, Client Proxy prompts the user to authenticate. It securely forwards the traffic to Skyhigh CASB. When forwarding the traffic, it encrypts and adds metadata along with the real-time device posture information.
Prerequisites
Download the Skyhigh Client Proxy software from the Content & Cloud Security Portal. The installation file is present in the package
Tools > SkyhighClientProxy_xxx
Client\Windows\Signed_Standalone directory
NOTE: In Client Proxy, configure the domain name of the IDP in the bypass proxy domain list.
Windows
- Download the Client Proxy package.
- Unzip and double-click
installscp
(batch file for 64-bit Windows platforms). - Accept the license agreement, then follow the instructions in the installation wizard.
- To verify installation, you can check for the presence of vNSP Probe Driver under Control Panel | Network and Internet | Network Connections | Ethernet Properties.
- Copy the exported SCPPolicy.opg to
C:\ProgramData\Skyhigh\SCP\Policy\Temp
folder. - Click Start | All Programs | Skyhigh, then click About Client Proxy to verify the Client Proxy status.
macOS
- Download the Client Proxy package.
- Unzip and double-click
ScpDistribution.pkg.
- Accept the license agreement, then follow the instructions in the installation wizard.
- Optionally, you can check the presence of extensions under System Preferences |TrellixProxyExtensions and System Preferences | TrellixSystemExtensions after completing the installation.
- Copy the policy file SCPPolicy.opg to the
/usr/local/McAfee/Scp/policy/
folder.