home

Mobile Endpoint Security

Lookout Product Documentation

Find answers about using and optimizing Lookout products.

Create Mobile Device Extension Attributes

Mobile Device extension attributes convey Lookout device, connection, and risk statuses to Jamf Pro which can apply appropriate policies and also pass threat events to a SIEM or other threat handling infrastructure. You create four extension attributes on Jamf Pro that will be used when creating the Lookout connector.

  1. Click Settings (gear).
  2. Click Device Management > Extension Attributes.
  3. Click + New in upper right.
  4. Enter the following:
    FieldValue
    Display NameA unique name of the extension attribute that conveys a device’s status. For example, device_activation_state.
    DescriptionFor example, "Lookout extension attribute for conveying device status.This is updated based on the current device status. Possible values are 'Activated', 'Deactivated', and "Threats Present'.
    Data TypeString
    Inventory DisplayChoose the appropriate category from the dropdown: General, Hardware, User and Location, Purchasing, Extension Attribute.
    Input TypeText Field
  5. Click Save.
  6. Click Device Management:


    The Device Management screen opens.

  7. Click Extension Attributes.
  8. Repeat steps 3 through 7 to add the following three extension attributes using these values:

    device_unreachable

    FieldValue
    Display NameA unique name of the extension attribute that conveys when a device is unreachable. For example, "device_unreachable".
    DescriptionFor example, "Lookout extension attribute for conveying when a device is unreachable.
    Data TypeString
    Inventory DisplayChoose the appropriate category from the dropdown: General, Hardware, User and Location, Purchasing, Extension Attribute.
    Input TypeText Field

    device_disconnected

    FieldValue
    Display NameA unique name of the extension attribute that conveys when a device is disconnected. For example, "device_disconnected".
    DescriptionFor example, "Lookout extension attribute for conveying when a device is disconnected.
    Data TypeString
    Inventory DisplayChoose the appropriate category from the dropdown: General, Hardware, User and Location, Purchasing, Extension Attribute.
    Input TypeText Field

    device_issue_level

    FieldValue
    Display NameA unique name of the extension attribute that conveys if one or more issues are present on the device. For example, "issue_state_level".
    DescriptionFor example, "Lookout extension attribute for conveying that one or more threats or issues have been detected on a device protected by Lookout.
    Data TypeString
    Inventory DisplayChoose the appropriate category from the dropdown: General, Hardware, User and Location, Purchasing, Extension Attribute.
    Input TypeText Field