GlobalProtect
Remove the GlobalProtect Enforcer Kernel Extension
Table of Contents
Remove the GlobalProtect Enforcer Kernel Extension
When you uninstall the GlobalProtect app for
macOS, and then install a new instance of the app, you may encounter
connection issues if the GlobalProtect enforcer kernel extension
is not updated correctly. A kernel extension (kext)
is a plugin for the macOS operating system that manages applications.
If you cannot connect to GlobalProtect after installing a new instance
of the app, use the following procedures to locate and remove the
GlobalProtect enforcer kernel extension.
- Uninstall the GlobalProtect App for Mac.Determine if the GlobalProtect enforcer kernel extension exists on the endpoint.On the macOS endpoint, open the Terminal application under the folder, and then enter the following command:kextstat | grep gplockIf the extension exists, unload the enforcer.Enter the following command on the Terminal application to unload the enforcer:sudo kextunload -b com.paloaltonetworks.GlobalProtect.gplockPrevent the enforcer from reloading after a reboot.Enter the following command on the Terminal application to remove the enforcer from the macOS hard disk:sudo rm -r "/System/Library/Extensions/gplock*.kext"
