Remove the GlobalProtect Enforcer Kernel Extension

When you uninstall the GlobalProtect app for Mac, and then install a new instance of the app, you may encounter connection issues if the GlobalProtect enforcer kernel extension is not updated correctly. A kernel extension (
kext
) is a plugin for the Mac operating system that manages applications. If you cannot connect to GlobalProtect after installing a new instance of the app, use the following procedures to locate and remove the GlobalProtect enforcer kernel extension.
  1. Determine if the GlobalProtect enforcer kernel extension exists on the endpoint.
    On the Mac endpoint, open the
    Terminal
    application under the
    Applications
    Utilities
    folder, and then enter the following command:
    kextstat | grep gplock
  2. If the extension exists, unload the enforcer.
    Enter the following command on the
    Terminal
    application to unload the enforcer:
    sudo kextunload -b com.paloaltonetworks.GlobalProtect.gplock
  3. Prevent the enforcer from reloading after a reboot.
    Enter the following command on the
    Terminal
    application to remove the enforcer from the Mac hard disk:
    sudo rm -r "/System/Library/Extensions/gplock*.kext"

Related Documentation