1. Home
    2. GlobalProtect
    3. GlobalProtect™ App User Guide
    4. GlobalProtect Agent for Mac
    5. Remove the GlobalProtect Enforcer Kernel Extension
    End-of-Life (EoL)

    Remove the GlobalProtect Enforcer Kernel Extension

    In some cases, when you uninstall the GlobalProtect Agent for Mac and install a new agent, connection issues may exist if the GlobalProtect enforcer kernel extension is not updated correctly. A kernel extension (or
    kext
     for short) is a plugin to the Mac Operating System that manages applications.
    If you cannot connect to GlobalProtect after you install a new agent, use the following procedure to locate and manually remove the GlobalProtect enforcer kernel extension, and then reinstall the GlobalProtect agent.
    1. Uninstall the GlobalProtect Agent for Mac.
    2. Determine if the GlobalProtect enforcer kernel extension exists.
      On the Mac endpoint, open the Terminal application in the Utilities folder and type the following command:
      kextstat | grep gplock
    3. If the extension exists, unload the enforcer.
      Type the following command to unload the enforcer:
      sudo kextunload -b com.paloaltonetworks.GlobalProtect.gplock
    4. Prevent the enforcer from reloading after a reboot.
      Type the following command to remove the enforcer from the Mac hard disk:
      sudo rm -r "/System/Library/Extensions/gplock*.kext"
    5. Install the GlobalProtect Agent for Mac.

    Recommended For You

    Recommended Videos

    Recommended videos not found.

    © 2022 Palo Alto Networks, Inc. All rights reserved.

    Techdocs Logo