Skip to main content


WebTitan OTG 2 for Mac Guide

Welcome to the WebTitan OTG 2 for Mac Guide. OTG stands for on-the-go and it is an endpoint client that allows off-network roaming by users while continuing to apply their WebTitan Cloud policy.


WebTitan OTG 2 for Mac is compatible with WebTitan Cloud 4.16 or later. If you are using WebTitan Cloud 4.15 or earlier, you must use WebTitan OTG 1 for Mac. See WebTitan OTG 1 for Mac Guide.

Once installed by an administrator on a user's machine, WebTitan OTG 2 for Mac manages the user's network DNS settings, attaching additional metadata to every DNS request sent to WebTitan Cloud. This metadata is used to identify and authenticate the DNS requests allowing content filtering to continue to work regardless of the physical location of the user.

This guide describes a command-line installation for a single user machine install and also describes how to deploy to multiple users with Microsoft Intune. Each installation of OTG 2 creates the following in WebTitan Cloud:

  • a device in Settings > Devices that represents the client machine on which OTG 2 for Mac is installed, e.g. a user's laptop. A device is any entity that can be configured to send DNS requests to WebTitan Cloud for filtering per your policies.

  • a virtual location in Settings > Locations > Virtual. By default, the policy applied to this location is the policy that is applied to the user.

  • a user in the Users tab based on the macOS account username of the machine it is installed on.