Possible to disable/block the SM Agent across organization?

somefox
New here

Possible to disable/block the SM Agent across organization?

Is it possible to NOT install Meraki Systems Manager Agent (macOS) across my entire organization? Can I disable or remove it? I see I can push the agent with the profile installed but my security team does not want this to be possible. I get all the features that I want from the profiles without the privacy concerning functions like remote screen share and remote terminal. 

 

 
2 Replies 2
PhilipDAth
Kind of a big deal
Kind of a big deal

Why not leave that feature (or other features you are concerned about) disabled?

https://documentation.meraki.com/SM/Other_Topics/Systems_Manager_Remote_Desktop#Using_Remote_Desktop 

BlakeRichardson
Kind of a big deal
Kind of a big deal

@somefox Yes just simply don't install it, if you have already installed it then you will need to uninstall it. 

 

It uses port 993 which is shared with IMAP so you simply can't block this port. 

If you found this post helpful, please give it Kudos. If my answer solves your problem, please click Accept as Solution so others can benefit from it.
Get notified when there are additional replies to this discussion.
Welcome to the Meraki Community!
To start contributing, simply sign in with your Cisco account. If you don't yet have a Cisco account, you can sign up.
Labels