>
    Remove the GlobalProtect Enforcer Kernel Extension
    Focus
    Download PDF
    Focus
    1. Home
    2. GlobalProtect
    3. GlobalProtect App for macOS
    4. Remove the GlobalProtect Enforcer Kernel Extension
    Download PDF
    GlobalProtect

    Remove the GlobalProtect Enforcer Kernel Extension

    Table of Contents

    Remove the GlobalProtect Enforcer Kernel Extension

    When you uninstall the GlobalProtect app for macOS, and then install a new instance of the app, you may encounter connection issues if the GlobalProtect enforcer kernel extension is not updated correctly. A kernel extension (kext) is a plugin for the macOS operating system that manages applications. If you cannot connect to GlobalProtect after installing a new instance of the app, use the following procedures to locate and remove the GlobalProtect enforcer kernel extension.
    1. Uninstall the GlobalProtect App for Mac.
    2. Determine if the GlobalProtect enforcer kernel extension exists on the endpoint.
      On the macOS endpoint, open the Terminal application under the ApplicationsUtilities folder, and then enter the following command:
      kextstat | grep gplock
    3. If the extension exists, unload the enforcer.
      Enter the following command on the Terminal application to unload the enforcer:
      sudo kextunload -b com.paloaltonetworks.GlobalProtect.gplock
    4. Prevent the enforcer from reloading after a reboot.
      Enter the following command on the Terminal application to remove the enforcer from the macOS hard disk:
      sudo rm -r "/System/Library/Extensions/gplock*.kext"
    5. Download and Install the GlobalProtect App for Mac.

    © 2024 Palo Alto Networks, Inc. All rights reserved.