Enable GlobalProtect System Extensions on macOS Endpoints Using Jamf Pro

In Jamf Pro, select
Computers
Configuration Profiles
New
.

Create a configuration profile to enable GlobalProtect system extensions.
Enter a
Display Name
for the configuration profile.

Select
System Extensions
Configure
.
(Optional) Enter a
Display Name
.
In
System Extension Types
, select
Allowed System Extensions
.
Enter the
Team Identifier
for the GlobalProtect app (
PXPZ95SK77
).
In the
ALLOWED SYSTEM EXTENSIONS
section,
Add
the Bundle Identifier for GlobalProtect system extensions (
com.paloaltonetworks.GlobalProtect.client.extension
) and
Save
the allowed system extension.
Save
the configuration profile.

Deploy the GlobalProtect app package and enable system extensions immediately after installation of the GlobalProtect app.
Create an settings file called
install_system_extensions.xml
with the following content:
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<array>
           <dict>
                  <key>attributeSetting</key>
                  <integer>1</integer>
                  <key>choiceAttribute</key>
                  <string>selected</string>
                  <key>choiceIdentifier</key>
                  <string>third</string>
           </dict>
           <dict>
                  <key>attributeSetting</key>
                  <integer>1</integer>
                  <key>choiceAttribute</key>
                  <string>selected</string>
                  <key>choiceIdentifier</key>
                  <string>com.paloaltonetworks.globalprotect.systemext.pkg</string>
            </dict>
</array>
</plist>
Deploy the GlobalProtect app package by running the following command:
sudo installer -pkg GlobalProtect.pkg -applyChoiceChangesXML install_system_extensions.xml -target /