Enable GlobalProtect System Extensions on macOS Endpoints Using Jamf Pro

1. In Jamf Pro, select ComputersConfiguration ProfilesNew.

2. Create a configuration profile to enable GlobalProtect system extensions.

   1. Enter a Display Name for the configuration profile.

   2. Select System ExtensionsConfigure.
   3. (Optional) Enter a Display Name.
   4. In System Extension Types, select Allowed System Extensions.
   5. Enter the Team Identifier for the GlobalProtect app (PXPZ95SK77).
   6. In the ALLOWED SYSTEM EXTENSIONS section, Add the Bundle Identifier for GlobalProtect system extensions (com.paloaltonetworks.GlobalProtect.client.extension) and Save the allowed system extension.
   7. Save the configuration profile.

3. Deploy the GlobalProtect app package and enable system extensions immediately after installation of the GlobalProtect app.

   1. Create an settings file called install_system_extensions.xml with the following content:

      <?xml version="1.0" encoding="UTF-8"?>
      <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
      <plist version="1.0">
      <array>
                 <dict>
                        <key>attributeSetting</key>
                        <integer>1</integer>
                        <key>choiceAttribute</key>
                        <string>selected</string>
                        <key>choiceIdentifier</key>
                        <string>third</string>
                 </dict>
                 <dict>
                        <key>attributeSetting</key>
                        <integer>1</integer>
                        <key>choiceAttribute</key>
                        <string>selected</string>
                        <key>choiceIdentifier</key>
                        <string>com.paloaltonetworks.globalprotect.systemext.pkg</string>
                  </dict>
      </array>
      </plist>

   2. Deploy the GlobalProtect app package by running the following command:

      sudo installer -pkg GlobalProtect.pkg -applyChoiceChangesXML install_system_extensions.xml -target /