home

Mobile Endpoint Security

Lookout Product Documentation

Find answers about using and optimizing Lookout products.

Create Mobile Device Extension Attributes

Mobile Device extension attributes convey Lookout device, connection, and risk statuses to Jamf Pro which can apply appropriate policies and also pass threat events to a SIEM or other threat handling infrastructure. You create four extension attributes on Jamf Pro that will be used when creating the Lookout connector.

  1. Click Settings (gear).
  2. Click Device Management > Extension Attributes.
  3. Click + New in upper right.
  4. Enter the following:
    Field Value
    Display Name A unique name of the extension attribute that conveys a device’s status. For example, device_activation_state.
    Description For example, "Lookout extension attribute for conveying device status.This is updated based on the current device status. Possible values are 'Activated', 'Deactivated', and "Threats Present'.
    Data Type String
    Inventory Display Choose the appropriate category from the dropdown: General, Hardware, User and Location, Purchasing, Extension Attribute.
    Input Type Text Field
  5. Click Save.
  6. Click Device Management:


    The Device Management screen opens.

  7. Click Extension Attributes.
  8. Repeat steps 3 through 7 to add the following three extension attributes using these values:

    device_unreachable

    Field Value
    Display Name A unique name of the extension attribute that conveys when a device is unreachable. For example, "device_unreachable".
    Description For example, "Lookout extension attribute for conveying when a device is unreachable.
    Data Type String
    Inventory Display Choose the appropriate category from the dropdown: General, Hardware, User and Location, Purchasing, Extension Attribute.
    Input Type Text Field

    device_disconnected

    Field Value
    Display Name A unique name of the extension attribute that conveys when a device is disconnected. For example, "device_disconnected".
    Description For example, "Lookout extension attribute for conveying when a device is disconnected.
    Data Type String
    Inventory Display Choose the appropriate category from the dropdown: General, Hardware, User and Location, Purchasing, Extension Attribute.
    Input Type Text Field

    device_issue_level

    Field Value
    Display Name A unique name of the extension attribute that conveys if one or more issues are present on the device. For example, "issue_state_level".
    Description For example, "Lookout extension attribute for conveying that one or more threats or issues have been detected on a device protected by Lookout.
    Data Type String
    Inventory Display Choose the appropriate category from the dropdown: General, Hardware, User and Location, Purchasing, Extension Attribute.
    Input Type Text Field