Troubleshoot Falcon on macOS (Students)

Students Mac crowdstrike falcon

Overview

If you are have issues installing, configuring, or uninstalling CrowdStrike Falcon on your Mac, please review the information below.

Details

Downloading:

If you are unable to successfully download Falcon on your Mac, review the below suggestions:

Connect to the urwin wireless network before navigating to Box. While you will be restricted from accessing other websites until Falcon and ClearPass OnGuard are successfully installed, you should connect to the urwin network in order to download the required software.
Log in with your NetID and password on the UR Software Downloads Box page.
Ensure you download the correct product for your OS (verify you are in the CrowdStrike Falcon for macOS folder in Box).

Installing:

If you have successfully downloaded the Falcon installer but are having issues installing the software, check the steps below:

Confirm your version of macOS is compatible with Falcon and upgrade your Mac if needed. Currently, Falcon is supported on macOS 13 Ventura or newer.
Ensure you are an admin on your Mac, or have access to authenticate as an admin. Standard users will not be able to install Falcon and depending on the version of macOS, permission to approve system extensions.
Follow all the steps of the installer, specifically allowing the system extension. If the Falcon system extension is not allowed, the installer will fail. In the event that the installation fails, restart your Mac and re-run the installer, following the steps below:
1. Launch System Settings.
2. Click Privacy & Security and scroll to the bottom.
3. Click Allow beside CrowdStrike Falcon and enter your password when prompted.
The option to Allow the system extension may no longer be visible after a period of time due to security settings with macOS. If the option is no longer there, restart your Mac and check again or re-run the installer.
If you have allowed all permissions and ClearPass will still not detect Falcon when it runs a health scan, restart your computer.

Uninstalling:

You may need to uninstall Falcon in order to troubleshoot an issue, if you are purchasing a new Mac, or are graduating or leaving the University. In those cases, we strongly encourage you to uninstall Falcon. To uninstall the app, simply drag the Falcon app from your /Applications folder to the Trash, entering your password when prompted, then restart your Mac. You may need to accept the prompt to turn off the system extension. If you are still unable to uninstall the Falcon app, contact the Help Desk at (804) 287-6400.

Miscellaneous:

If your Mac is quarantined by ClearPass after upgrading to a new version of macOS, uninstall and reinstall ClearPass OnGuard
ClearPass will only run a health scan on your computer when connected to the urwin network but Falcon will continue to update and run. If you are off campus for an extended period of time, ClearPass will need to run a longer scan the first time you connect back to the urwin network. There's no need to reinstall any software, just allow the scan to complete.

Updating...