Remove the GlobalProtect Enforcer Kernel Extension

When you uninstall the GlobalProtect app for Mac, and then install a new instance of the app, you may encounter connection issues if the GlobalProtect enforcer kernel extension is not updated correctly. A kernel extension (kext) is a plugin for the Mac operating system that manages applications. If you cannot connect to GlobalProtect after installing a new instance of the app, use the following procedures to locate and remove the GlobalProtect enforcer kernel extension.
  1. Uninstall the GlobalProtect App for Mac.
  2. Determine if the GlobalProtect enforcer kernel extension exists on the endpoint.
    On the Mac endpoint, open the Terminal application under the ApplicationsUtilities folder, and then enter the following command:
    kextstat | grep gplock
  3. If the extension exists, unload the enforcer.
    Enter the following command on the Terminal application to unload the enforcer:
    sudo kextunload -b com.paloaltonetworks.GlobalProtect.gplock
  4. Prevent the enforcer from reloading after a reboot.
    Enter the following command on the Terminal application to remove the enforcer from the Mac hard disk:
    sudo rm -r "/System/Library/Extensions/gplock*.kext"
  5. Download and Install the GlobalProtect App for Mac.

Related Documentation