Remove the GlobalProtect Enforcer Kernel Extension
Focus
Focus
GlobalProtect

Remove the GlobalProtect Enforcer Kernel Extension

Table of Contents

Remove the GlobalProtect Enforcer Kernel Extension

When you uninstall the GlobalProtect app for macOS, and then install a new instance of the app, you may encounter connection issues if the GlobalProtect enforcer kernel extension is not updated correctly. A kernel extension (kext) is a plugin for the macOS operating system that manages applications. If you cannot connect to GlobalProtect after installing a new instance of the app, use the following procedures to locate and remove the GlobalProtect enforcer kernel extension.
  1. Determine if the GlobalProtect enforcer kernel extension exists on the endpoint.
    On the macOS endpoint, open the Terminal application under the ApplicationsUtilities folder, and then enter the following command:
    kextstat | grep gplock
  2. If the extension exists, unload the enforcer.
    Enter the following command on the Terminal application to unload the enforcer:
    sudo kextunload -b com.paloaltonetworks.GlobalProtect.gplock
  3. Prevent the enforcer from reloading after a reboot.
    Enter the following command on the Terminal application to remove the enforcer from the macOS hard disk:
    sudo rm -r "/System/Library/Extensions/gplock*.kext"