Uninstall the GlobalProtect Mobile App Using Jamf Pro
Focus
Focus
GlobalProtect

Uninstall the GlobalProtect Mobile App Using Jamf Pro

Table of Contents

Uninstall the GlobalProtect Mobile App Using Jamf Pro

Learn how to uninstall the GlobalProtect app from macOS endpoints using Jamf Pro.
Where Can I Use This?
What Do I Need?
  • Prisma Access
  • PAN-OS
  • GlobalProtect Subscription
  • Prisma Access Mobile Users license (for use with Prisma Access)
  • GlobalProtect Gateway license (for use with PAN-OS)
  • GlobalProtect app for macOS 6.0.4 and later and 6.1 and later releases
  • Endpoints running macOS 11 (Big Sur), macOS 12 (Monterey), or macOS 13 (Ventura)
Starting with GlobalProtect app 6.0.4 and later and 6.1 releases, you can uninstall the app from macOS endpoints by configuring a policy that contains a script with the GlobalProtect app uninstall command. When the policy is triggered, the GlobaProtect app is uninstalled on macOS endpoints.
For macOS Monterey 12.2.1 endpoints, before you begin, remove system extensions using Jamf Pro. During the uninstallation, end users on macOS Monterey 12.2.1 endpoints are not prompted to remove the GlobalProtect system extension.
If you uninstall the GlobalProtect app from macOS Monterey endpoints using the GlobalProtect app PKG file, end users are prompted by a pop-up to enter the administrator username and password to remove the system extension.
For macOS endpoints earlier than macOS Monterey, regardless of whether the GlobalProtect app is uninstalled using a command or PKG file, end users ares still prompted by a pop-up to enter the administrator username and password to remove the system extension.
  1. In Jamf Pro, create a script to uninstall the GlobalProtect app from macOS endpoints.
    1. Select
      Settings
      Computer Management
      Scripts
      .
    2. Click
      New
      .
    3. Enter a
      Display Name
      for the script.
    4. Select
      Script
      and enter the following command in the editor:
      /Applications/GlobalProtect.app/Contents/Resources/uninstall_gp.sh
      The script will be run with superuser authority.
    5. Save
      the script.
  2. Create a Jamf policy for running the uninstall script.
    1. Select
      Computers
      Policies
      New
      .
    2. In the
      General
      payload, configure basic settings for the policy:
      • Enter a
        Display Name
        for the policy and
        Enable
        the policy.
      • (Optional) Select a
        Category
        .
      • Specify a
        Trigger
        that will run the policy.
      • Select an
        Execution Frequency
        , such as
        Once per computer
        and
        Automatically re-run the policy on failure
        .
    3. Configure the Scripts payload by selecting
      Scripts
      Configure
      .
      Add
      the script that you created in Step 1 and select the
      Priority
      for running the script.
    4. (Optional) If you created a Smart Group for your users, configure the scope of the policy to target that group.
      1. Select
        Scope
        and
        Add
        a deployment target.
      2. Click
        Computer Groups
        and
        Add
        the Smart Computer Group for your users.
      3. Click
        Done
        . The computers in the selected computer group will be targeted for uninstallation of the GlobalProtect app.
    5. Save
      the policy.
      The next time macOS endpoints check in with Jamf Pro and meet the trigger in the General payload, the policy will run and uninstall the GlobalProtect app from the endpoints.

Recommended For You