macOS Big Sur is the next major release of macOS, and this article answers some of the frequently asked questions related to Capture Client and SentinelOne Kextless agent support for macOS Big sur.
What is Big Sur? Debuted as macOS 10.16/11.x, Big Sur is the next major release of macOS, Apple Inc.'s operating system for Mac computers, and the successor to macOS Catalina.
Why is a routine MacOS Update an issue? Apple removed support for Kernel-Extensions (“kext”), also known as legacy System Extensions, in favor of newer System Extensions (“sysext”). This is a significant change for any application that uses it, including but not limited to security software. To date, the SonicWall Capture Client and SentinelOne agents use kext; agents using the newer sysext, also called “kextless”, are in development and will be made available via Capture Client 3.6.
When will a kextless Capture Client with SentinelOne for Big Sur be available? Capture Client 3.6 (including kextless capabilities) with SentinelOne is expected for general availability (GA) early in 2021.
Why are there timeline differences between Apple’s Big Sur GA and SonicWall’s support for it? SentinelOne will take six weeks from Apple’s Big Sur GA to confirm supportability of their client. SonicWall will then take an additional six weeks to ensure compatibility before releasing it to customers.
What should I do until Capture Client 3.6 is released for macOS? SonicWall highly recommends that macOS devices running Capture Client 3.1 should not be upgraded to Big Sur until the kextless agents are available as these devices won’t be protected.
What happen if a user upgrades their Mac device to Big Sur with Capture Client 3.1 on it? The SentinelOne engine will be disabled. In the Capture Client management console, in the Endpoints table, it will be reported as not being healthy.
Can I install Capture Client on a new macOS device running Big Sur? No, Capture Client cannot be installed on Mac device running Big Sur.
Will all the features, including Device Control, be supported in the new SentinelOne Agent? Most features will be supported from Day 1. However, Device Control will only be supported starting with SentinelOne Agent version 4.5, which is expected to be released in late 2020. Follow our macOS Compatibility Note for details.
Will the SonicWall Capture Client be available in kext-based and kextless versions? No, SonicWall will announce end-of-life (EOL) for the kext-based agents once the kextless agents are available.
Will the kextless Capture Client and SentinelOne agents be supported on macOS running on ARM cores? No, the kextless agents will only support x86-architecture.