The Gateway agent protects users’ Windows 10, Windows 11, and macOS devices by allowing you to block connections to Internet destinations that you don’t want devices to reach, even when the device isn't connected to your network. Arctic Wolf maintains an ever-growing list of unsafe Internet destinations that it can block endpoints from connecting to. If your organization also wants to block users from visiting specific sites that don't meet your acceptable use standards, you can create policies to specify additional destinations that all users or specific users or groups cannot access.

The Gateway agent is installed on user's devices, allowing them to access network resources safely and protect their device from suspicious and potentially malicious network activity. When the Gateway agent is installed and Work Mode is enabled, Gateway establishes secure connections between the user’s device and your organization's network and the public Internet, analyzes your network activity, and applies network access policies that you manage. When you enable Safe Mode for macOS and Windows devices, Gateway extends the tenant ACL rules and endpoint protection for devices when Work Mode is not enabled to make sure devices are always protected for network traffic that does not use the tunnel.

When you deploy a new installation of the Gateway agent, users' devices must be restarted, and users must manually complete the installation process and enable Work Mode or activate Safe Mode. When you deploy an upgrade of the Gateway agent, users' devices must be restarted for the upgrade to complete. During the upgrade, the Gateway agent retains all of the configurations. No additional action is required by users.

When the Gateway agent installation is controlled by enterprise device management tools (for example, Microsoft System Center Configuration Manager (SCCM) or another deployment tool), you can include the customDomain parameters to minimize user interaction when the agent is activated. You can obtain the custom domain name from the "Custom Domain Name" field in Settings > Application. You can supply the parameters for Windows devices from the command line and for macOS devices using a managed app configuration or MCX app preferences. You can also direct users to manually download and install the Gateway agent to enable Work Mode or activate Safe Mode.

• For macOS devices, include this value to specify the custom domain name to be used when users activate Gateway agent 2.9 or later:
  CODECopy

  <dict> <key>customDomain</key> <string><Your_custom_domain_name></string> </dict>

  <dict>
    <key>customDomain</key>
    <string><Your_custom_domain_name></string>
  </dict>

• For Windows devices, include this command to specify the custom domain name to be used when users activate Gateway agent 2.9 or later:

  CylanceGATEWAY-<version>.exe /v"CUSTOM_DOMAIN=<your_custom_domain_name>"

  To specify the custom domain name for a silent installation, see Perform a silent installation and upgrade of the Gateway agent.