topic Re: MACOS Sonoma, GlobalProtect not able to connect to the port 4767 in GlobalProtect Discussions

MACOS Sonoma, GlobalProtect not able to connect to the port 4767

cosmo2023 — Fri, 15 Dec 2023 11:01:36 GMT

Hi Guys,

Three weeks ago I upgraded my intel MAC to the Sonoma Version, and unfortunately my GlobalProtect does not work anymore. The PANGS service is not able to set up the port 4767 anymore and the logs shows:

P2503-T34311 12/15/2023 10:29:11:158 Debug( 57): fd still open before connect
P2503-T34311 12/15/2023 10:29:11:158 Error( 80): CPanSocket::Connect - Failed to connect to server at port:4767
P2503-T34311 12/15/2023 10:29:11:158 Error( 241): Cannot connect to service, error: 61
P2503-T259 12/15/2023 10:29:11:158 Debug(1854): showConnectButton:1
P2503-T41219 12/15/2023 10:29:11:622 Info ( 237): InitConnection ...
P2503-T41219 12/15/2023 10:29:11:622 Debug( 57): fd still open before connect
P2503-T41219 12/15/2023 10:29:11:622 Error( 80): CPanSocket::Connect - Failed to connect to server at port:4767
P2503-T41219 12/15/2023 10:29:11:622 Error( 241): Cannot connect to service, error: 61

1.- I installed versions 6.0.8 till the last released already, but the status is the same.

2.- The permissions for allowing 3rd Party applications were allowed too.

3.- Booting the PC in recovery mode and issuing the command spctl kext-consent add PXPZ95SK77. With Sonoma should not be necessary anymore, but I made it too.

4.- Different flavors of launch command with the pangps.plist Daemons and Agents already done too.

5.- FW is totally deactivated.

Simply and basically the App is not able to start the port:

$netstat -an | find "4767"
$find: 4767: No such file or directory

I will appreciate any help

Kind regards

Cosmo

Re: MACOS Sonoma, GlobalProtect not able to connect to the port 4767

AndyPalacios — Tue, 19 Mar 2024 19:52:50 GMT

We have the same issue. Were you able to resolve your issue?

Re: MACOS Sonoma, GlobalProtect not able to connect to the port 4767

Alejandro_Hernandez — Tue, 19 Mar 2024 23:00:18 GMT

The version 6.0.8 has this bug, and the version is not preferred release

The recommendation is install version 6.1.4 or 6.2.2

You will try with a newest version

Re: MACOS Sonoma, GlobalProtect not able to connect to the port 4767

SebastianStrauch — Sun, 28 Apr 2024 14:06:06 GMT

Hello together.

Any Updates on this?

Seems that Sonoma and GP is a no go at the moment (since many months)...

Re: MACOS Sonoma, GlobalProtect not able to connect to the port 4767

kiwi — Mon, 29 Apr 2024 10:01:05 GMT

Hi @SebastianStrauch ,

GPC-18964 is fixed in GP version 6.2.2 and 6.1.4:

https://docs.paloaltonetworks.com/globalprotect/6-2/globalprotect-app-release-notes/globalprotect-addressed-issues

https://docs.paloaltonetworks.com/globalprotect/6-1/globalprotect-app-release-notes/globalprotect-addressed-issues

On the 6.0.x version the target fix is on GP 6.0.9

Kind regards,

-Kim.

Re: MACOS Sonoma, GlobalProtect not able to connect to the port 4767

EwoudHolvoet — Tue, 30 Apr 2024 12:46:52 GMT

I've tried using 6.2.2 but that's not helping either. Any other suggestions?

Re: MACOS Sonoma, GlobalProtect not able to connect to the port 4767

SebastianStrauch — Fri, 03 May 2024 17:29:59 GMT

@kiwi
Actually, this was not my problem - and I've tried to use 6.1.3 & 6.1.4 as well.

I ended up deleting the file "/Library/Preferences/com.apple.networkextension.plist" in Recovery Mode after uninstalling all GP related stuff on the machine. Afterwards I installed the GlobalProtect app with out the system extension and for now it is working fine.

BUT the VPN-profile pop-up did just appear once (after the first install) and now it's gone forever, even the setting under "Settings - Network - VPN" is gone and there is no VPN visible within the OS.

What I experienced is that even after an uninstall of GP there remain several artifacts in the system and I could probably not get rid of them completely.

Is there a cleaner like for the XDR agent?

Best regards

Sebastian