Enable System Extensions in the GlobalProtect App for macOS Endpoints
You can suppress prompts for network extensions configuration by enabling system
Starting with macOS 10.15.4, Apple has limited
the support of kernel extensions. The GlobalProtect app will use
system extensions instead of kernel extensions. Users must approve
system extensions before they can use them.
In addition to enabling system extensions, you can enable network extensions in the GlobalProtect
app to suppress the
Network Extensions Configuration
pop-up prompts that are used for the Split Tunnel and Enforce GlobalProtect
Connections for Network Access features. You can use a mobile device management
system (MDM) such as Jamf Pro to load the network extensions automatically
without receiving the pop-up prompts.
If you are not using Jamf Pro, use the following steps to configure a profile to approve the
system extension automatically using Workspace ONE. While this configuration has
been tested with Workspace ONE, you can use any Qualified MDM vendor to create
and implement this profile.