Block Little Snitch

[paulaust]

I have recently had an issue in my environment where a few users have installed Little Snitch onto their machines and its blocking access needed to the machines. Has anyone out together a restricted software definition yet for Little Snitch? If so, what process are you blocking.

Thanks

[tnielsen]

Take away their admin rights.

[JayDuff]

If Little Snitch isn't showing in the Application inventory, you could write an extension attribute that searches the drive for Little Snitch. Next, create a Smart Computer Group for those devices. From there, you could do something as nice as email you when they enter the group, to something as draconian as creating a policy that deletes the binary on recurring check-in.

[roiegat]

I would use the restrict software method and have it look of the process. If found, kill it and delete it, and notify the user some nasty words to discourage them from doing it again. If I recall correctly restricted software policy works offline as well. So if Little Snitch is blocking JAMF Pro traffic, the policy should still kick in and remove the app.

That, and take their admin rights away.