Activate Safe Mode in the Gateway agent

If your administrator has set up Gateway for you and has configured the Gateway agent to use Safe Mode on your macOS or Windows device, the agent automatically enables Safe Mode protection for network traffic that does not use the Work Mode tunnel. If you use an unmanaged macOS device, you will be prompted once to allow the Gateway system extension before you can use Safe Mode. After Safe Mode is configured, you cannot disable it. If you try to manually stop the agent, the agent will automatically start in the background on your device. 
  • Install the Gateway agent. To download the agent, go to the BlackBerry Website and scroll down to the Download Gateway section.
  • Activate the agent using your directory or BlackBerry Online Account credentials. For more information about activating the agent, see the Gateway activation email that you received from your administrator. On macOS devices, when you are prompted, make sure that you select the "Allow Gateway to filter network content."
  1. On your macOS or Windows device, open the Gateway agent.
  2. If you are using an unmanaged macOS device and are prompted to allow the system extensions for Gateway. Perform the following actions:
    Note: If you do not allow the system extensions on your macOS device, the Gateway agent displays Work Mode Disabled - Safe Mode Inactive.
    1. On the SafeMode Activation prompt, click Open Security Preferences.
    2. Click Security & Privacy.
    3. Click Click the lock to make changes.
    4. In the System Preferences dialog box, enter the administrator password for your device. Click Unlock
When the connection is established, the "Work Mode Disabled - Safe Mode Active" status appears. If you enable Work Mode, the status displays "Work Mode Enabled - Safe Mode Inactive."
  • On macOS devices, if the connection is not established, click The Safe Mode - tunnel not established icon to view more information about an error. 
  • On macOS and Windows devices, if your organization or home and remote environments experience network issues, the agent displays The Safe Mode degraded icon and "Work Mode Disabled - Safe Mode Degraded". To resolve this status, try the following:
    • Organization environment: Check your wired or wireless network connection or contact your IT administrator for assistance.
    • Home and remote environments: Check your Internet connectivity or contact your ISP for assistance.
  • To view warnings about suspicious network activity, click the Warnings icon. From the Warnings screen, you can also choose to clear and mute warning notifications.
  • To view the policies that are assigned to the agent by your administrator, click the Policy Settings icon.
  • You can configure settings for the Gateway agent.