The GlobalProtect app on macOS supports two types of extensions—kernel (macOS device running macOS Catalina 10.15.3 or earlier) and system (macOS device running macOS Catalina 10.15.4 or later and GlobalProtect app 5.1.4 or later). If you have configured a split tunnel on the GlobalProtect gateway or enforce GlobalProtect connections for network access (see GlobalProtect App Customization), a notification message displays on the GlobalProtect app. The message prompts users to enable either the kernel extension or system extension in macOS that was blocked from loading when they access the GlobalProtect app that has these features enabled.

To allow GlobalProtect app users to automatically load either the kernel extension or system extension without receiving a notification, you can use a supported mobile device management system (MDM) such as Workspace ONE to create a policy for that extension.

Refer to the following sections for information on how to suppress notifications on the GlobalProtect app for macOS endpoints: