mpkg and the vpn.plist from a machine with the connection settings in composer, then I deliver the files to a temp directory and use the script to install (after) the package and connection settings: I've adapted the build workflow created by in this thread.

What I've found is that you need to run the uninstaller for the previous version first, then install the new one. Specifically the System Extensions and the Privacy settings. Sorry, I know this is a lot, but I want to make sure I'm not missing something, especially since I've never worked with these functions of configuration profiles before. I suspect this is fine, but I don't know. Of note, that program is in the PPPC as '.antivirus' instead of the filepath. However, I've noticed, specifically, Catalina doesn't add the one program to Full Disk Access and you end up needing to search for it. Will they work if they're installed before the app is?.I added them to this same config profile, and I think they're correct. System Extensions is the only other thing I'm worried about. I haven't tested this, but supposing it works I don't have any questions about it since I know it needs to go on first. I have a blank VPN being deployed in the same config profile using .vpn in the Custom SSL settings (someone else on here suggested this solves that issue if you deploy it first). Are they hidden because they're installed this way? Will it cause a problem if I deploy those before the policy for the install, when the filepaths and apps don't exist yet? It seems to be working this way currently, but I don't see those settings in the System Prefs Privacy panel.I used PPPC to grab those Full Disk Access settings from an install and make a config profile. Full Disk Access, requests for VPN connections, and request for System Extensions. Unfortunately though, FortiClient needs users to make tons of changes to System Prefs. I need to get curl to fail out of the script if the download fails, but I haven't looked into it yet so I'm sure I can find a way. I have a script that grabs the file from our server and installs it. I can post configs as necessary, but I suspect that they aren't needed for these questions as it's more about how these functions work. I still have some more testing to do but it seems to work on the one I tried, but maybe it was a fluke. I'm trying to deploy FortiClient 7.0.2, and I have some questions about order of operations and whether this is going to cause trouble on specific OS versions.

Fortinet client mac