SonicWall Cloud Secure Edge App Installer

Automate installation of SonicWall Cloud Secure Edge App on end-user devices.

See SonicWall Cloud Secure Edge documentation for more details.

---

Install using Zero Touch Flow

In the SonicWall Cloud Secure Edge Command Center, navigate to Settings > App Deployment. Note down your org-specific app deployment parameters for use in the scripts below:

• Invite Code
• Deployment Key

The script will:

1. Create an mdm-config.json file that specifies app functionality
2. Download the latest SonicWall Cloud Secure Edge app version and install it (you can also optionally specify an exact app version)
3. Stage the app with the device certificate
4. Start the app as the logged-on user

MacOS

Launch a terminal and run:

sudo ./sonicwall-cse-macos.sh <INVITE_CODE> <DEPLOYMENT_KEY> <APP_VERSION (optional)>

Windows

Launch PowerShell as Administrator and run:

.\sonicwall-cse-windows.ps1 <INVITE_CODE> <DEPLOYMENT_KEY> <APP_VERSION (optional)>

Linux

Launch a terminal and run:

sudo ./sonicwall-cse-linux.sh <INVITE_CODE> <DEPLOYMENT_KEY> <APP_VERSION (optional)>

NOTE: The Linux script doesn't currently support MDM supplied user Information.

---

Upgrade Flow

You can also use the scripts to upgrade the version of the SonicWall Cloud Secure Edge app running on a device. Use the string "upgrade" for the Invite Code and Deployment Key parameters.

The script will:

1. Stop the app if it running
2. Download the latest SonicWall Cloud Secure Edge app version and install it (you can also optionally specify an exact app version)
3. Start the app as the logged-on user

MacOS

Launch a terminal and run:

sudo ./sonicwall-cse-macos.sh upgrade upgrade <APP_VERSION (optional)>

Windows

Launch PowerShell as Administrator and run:

.\sonicwall-cse-windows.ps1 upgrade upgrade <APP_VERSION (optional)>

Linux

Launch a terminal and run:

sudo ./sonicwall-cse-linux.sh upgrade <APP_VERSION (optional)>

---

Notes for usage with Device Managers

We have pre-configured the main script to be run via Device Managers (such as VMware Workspace ONE, Jamf Pro, Kandji, Microsoft Intune, etc.).

Jamf Pro

Use the sonicwall-cse-macos-jamf.sh script, following our Jamf Pro - Zero Touch Installation doc.

Kandji

Use the sonicwall-cse-macos-kandji.sh script, following our Kandji- Zero Touch Installation doc.

Microsoft Intune

Use the sonicwall-cse-windows-intune.ps1 script, following our Intune - Zero Touch Installation doc.

VMWare Workspace One UEM

Use our base scripts and customize as needed, following our Workspace ONE UEM - Device Identity & Enhanced TrustScoring doc. You need to set a few additional parameters in the mdm-config.json file so Banyan’s TrustScoring engine can correlate data from devices running the Banyan Desktop App with the data in Workspace ONE UEM:

• mdm_vendor_name should be set to Airwatch
• mdm_present should be true
• mdm_vendor_udid should be the DEVICE UDID