CrowdStrike Falcon, Fix the MacOS Falcon app

If the CrowdStrike Falcon anti-virus application is not operational on an Apple computer, follow these steps to repair it. Note: all university-owned computers must check in to Falcon at least once every 45 days to be compliant with security policy.

If the Falcon app is open, quit it fully (Falcon menu -> Quit Falcon)

Download the "FalconSensorMacOS" file from this Box folder (login required). It is an installer for the latest version of the sensor. If you are using the Safari browser, and are prompted to allow the download, choose "Allow."

Download file from Box

Allow prompt for Safari

In your Downloads folder, locate the Falcon sensor package and open it. An installer window will launch, and you can choose "Continue" to move through the installation.

Installer in folder and install wizard

Provide your Mac password if/when you are prompted.

Once the installer completes - whether it says "Installation Failed" or not - open the Falcon app and look for any prompts to allow System Extensions. Follow those prompts and click through the Allow prompt in System Settings.

Sensor settings to allow

Once repaired, you should see two or three green lights in the Falcon sensor.

Two green lightsThree green lights

If there is still a red light indicating that "Sensor is not operational," please reach out to the Help Desk for assistance. helpdesk@business.illinois.edu or 217-244-0812.


Keywords:
anti-virus "crowd strike" Mac Apple broken operational "cloud connected" 
Doc ID:
157431
Owned by:
Allison P. in UI Gies College of Business
Created:
2025-12-15
Updated:
2025-12-15
Sites:
UI Gies College of Business