macOS Agent Troubleshooting

1. Navigate to the UI

   1. Then go to Settings>Protect Agent

   2. From the “Install” screen, you’ll see the “Install Download” buttons. These buttons have the latest release number on them. Note the release number for the macOS Agent here.

2. Now determine which versions is on the specified machine (two methods

Method 1:

1. Navigate to the “Manage Agents” section of the HPA Dashboard.

   1. From there, find your machine name, and scroll over to see it’s associated version.

Method 2:

1. On the local machine, right-click on the HYAS Protect icon in the menu bar and you’ll see the version number at the bottom of the window.

• If you Agent version is outdated, please follow the Uninstall directions listed above and install the latest version.

If you are currently using HPA version 2.2.13 or newer:

1. From the Manage Agents dashboard, select the machine you wish to update.

2. Next, select Actions

3. Click on Update

Please allow up to 5 minutes for the update to complete. The machine must be currently running. If not, the update will take place the next time the HPA is running. .

If you are currently using HPA version 2.2.12 or older:

1. Please manually uninstall the HPA and reinstall the latest version.

When connecting to the Internet via a hotel, coffee shop, or related location, often the store or location utilizes a “captive portal” that the device must connect to prior to obtaining full Internet access. In some cases, the device may not properly connect to the captive portal, meaning that the device may not properly authenticate to obtain access to the Internet.

The Solution:

First – the user should perform a restart of their device. A device reboot should resolve the issue; if it does not, please perform the steps below:

If a reboot does not resolve the issue, and the device still cannot connect to the captive portal, you need to stop the Protect service (please note the user will need admin privileges to perform these steps)

• To stop the HPA, follow the below recommended method and stop the service via Terminal.

• The device should now be able to connect to the captive portal and thus the Internet.  If the captive portal does not appear, consider disconnecting from the network and reconnect to prompt the captive portal to appear, or reboot the machine.

• When network access has been restored, restart the Protect service using the procedure referenced above.

If the above suggestions are ineffective and immediate access to the network is required, the agent may be disabled via the following procedure:

• Connect temporarily to another network such as personal cellular hotspot

  • Coordinate with IT to allow an admin to remotely access the machine

  • Admin runs a disable script provided by HYAS

  • When the agent has been disabled, disconnect from the hotspot or other network

  • Reconnect to the network with the captive portal (may require machine reboot)

Corporate networks, often referred to as a corporate or company Intranet, typically use local domains (DNS suffixes) for local resources. If a problem with the resolution of local domains occurs:

• Ensure all local domains associated with the organization are configured in the Local Domains tab in the HYAS Protect UI.

  • This can be found under Settings > Protect Agent

• If a local domain is not configured, then endpoints will not be able to resolve resources associated with that domain. 

• Configure any internal resolver IP in the HYAS Protect UI that is expecting an endpoint to query for DNS records. This should be completed prior to the agent installation to prevent possible resolution issues and negative user experience.

In some cases, organizations use of the same domain both on the local intranet and on the internet. This dual usage creates ambiguity in resolving the domain's IP address, as it may resolve to private IP addresses when connected to the intranet and to public IP addresses when outside the office.

The Solution:

In determining network location, the HYAS Protect Agent distinguishes between local and external networks. If it detects the local network, it routes DNS requests to local resolvers based on defined settings. Otherwise, it directs queries to HYAS Protect cloud resolvers. The HYAS Protect web portal facilitates configuring specific DNS queries and their expected outcomes. The agent then periodically runs these tests to differentiate internal from external requests. Note that versions of the agent before 2.2.1 lack Split Brain DNS functionality and may not function properly in such scenarios. Upgrade to version 2.2.1 or above for optimal performance. Find the latest agent version in the UI under Settings > Protect Agent > Install. Click here to learn more about configuring Split-Brain DNS