topic Re: Automatic deployment of GlobalProtect for Mac via Intune in GlobalProtect Discussions

Automatic deployment of GlobalProtect for Mac via Intune

kinits — Fri, 02 Apr 2021 20:30:07 GMT

My Company uses Intune for Mac management, and we are trying to automate as many app deployments as we can. Right now, I am hung up on GlobalProtect. I have already created a line-of-business app using the .pkg provided by Paloalto for GlobalProtect. The issue I am running into however, is the fact that the installer has multiple options; 1. Install 2. Uninstall 3. Add Extensions.

The Intune deployment doesn't know what to do about it, so it runs all 3. So it installs, then uninstalls. Is there any way to get just the installer portion? Also, are there installer arguments to pre-populate the vpn server info, like you can do with the windows installer?

Re: Automatic deployment of GlobalProtect for Mac via Intune

F.Khan071518 — Fri, 05 Nov 2021 11:53:24 GMT

Did you find any solution for this?

Re: Automatic deployment of GlobalProtect for Mac via Intune

frederic.peter — Fri, 06 May 2022 13:49:45 GMT

Hi @all,
I have exactly the same problem.
Please provide your solution 😉

Re: Automatic deployment of GlobalProtect for Mac via Intune

BPry — Fri, 06 May 2022 14:28:14 GMT

I actually haven't run into this issue when ran through a script outside of the application staying in Pending and not actively showing as properly installed. I've viewed that as an annoyance, but it doesn't really effect anything the way the script is running.

#!/bin/sh plistBuddy='/usr/libexec/PlistBuddy' GPplistFile='/Library/Preferences/com.paloaltonetworks.GlobalProtect.settings.plist' DownloadLocation = 'https://YourPortal/global-protect/getmsi.esp?version=none&platform=mac' if [ -f ${GPplistFile} ] then echo "Plist already exists..." else echo "Creating Plist" ${plistBuddy} -c "print : 'Palo Alto Networks':'GlobalProtect':'PanSetup':'Portal'" ${GPplistFile} ${plistBuddy} -c "add :'Palo Alto Networks' dict" ${GPplistFile} ${plistBuddy} -c "add :'Palo Alto Networks':'GlobalProtect' dict" ${GPplistFile} ${plistBuddy} -c "add :'Palo Alto Networks':'GlobalProtect':'PanSetup' dict" ${GPplistFile} ${plistBuddy} -c "add :'Palo Alto Networks':'GlobalProtect':'PanSetup':'Portal' string 'YourPortal'" ${GPplistFile} ${plistBuddy} -c "add :'Palo Alto Networks':'GlobalProtect':'PanSetup':'Prelogon' integer 0" ${GPplistFile} fi if [ -d "/Applications/GlobalProtect.app" ] then echo "Already installed..." exit 0 else echo "Preparing..." curl -L ${DownloadLocation} > "/tmp/GlobalProtect.pkg" echo "Installing..." sudo installer -pkg "/tmp/GlobalProtect.pkg" -target / echo "Cleaning..." rm "/tmp/GlobalProtect.pkg" exit 0 fi

Re: Automatic deployment of GlobalProtect for Mac via Intune

michaeljlee3 — Mon, 25 Jul 2022 22:59:31 GMT

Has anyone had any luck with this? I am in the exact same situation, I see the app install and popup momentarily and then it uninstalls and disappears. Any help would be great, trying to get GP pushed out to Mac devices asap.

Re: Automatic deployment of GlobalProtect for Mac via Intune

koskihen — Thu, 27 Oct 2022 11:45:56 GMT

This happens in our organization as well. In general, would be really nice if Paloalto could put some more resources to software delivery issues, especially on Intune and Jamf.

Re: Automatic deployment of GlobalProtect for Mac via Intune

SimonPoon — Wed, 25 Jan 2023 16:48:46 GMT

I am very surprise this issue hasn't been resolved by Palo Alto.

Re: Automatic deployment of GlobalProtect for Mac via Intune

David.Aultz — Sat, 22 Jul 2023 04:59:30 GMT

You will need to sign the package with a Developer Installer Certificate before you can deploy with a MDM. Apple is hard up about this and it is not clear at first. Only the owner of your Apple Development Enterprise can generate that Certificate as well.

Re: Automatic deployment of GlobalProtect for Mac via Intune

rnzfr3 — Tue, 28 Nov 2023 14:13:57 GMT

Do we have any solutions for this?

Re: Automatic deployment of GlobalProtect for Mac via Intune

rnzfr3 — Tue, 28 Nov 2023 14:14:22 GMT

Does this have solutions already?

Re: Automatic deployment of GlobalProtect for Mac via Intune

jfernandez1 — Tue, 21 May 2024 22:08:54 GMT

Hello folks!

Unfortunately, Intune + MacOS is not supported with GlobalProtect, here are the supported MDMs: https://docs.paloaltonetworks.com/globalprotect/10-1/globalprotect-admin/mobile-endpoint-management/supported-mdm-vendors

Mark answer as solution if that solves your doubt

Re: Automatic deployment of GlobalProtect for Mac via Intune

B.Ose617428 — Thu, 10 Jul 2025 14:28:25 GMT

FYI in the meanwhile they added some support (Intune and JAMF)
https://docs.paloaltonetworks.com/globalprotect/10-1/globalprotect-admin/mobile-endpoint-management/supported-mdm-vendors
But atm I am still stuck on how to add PANGP to the System Keychain.