topic Re: Global Protect on Mac OS 14.5 in GlobalProtect Discussions

Global Protect on Mac OS 14.5

Malkhaldi — Sun, 30 Jun 2024 17:35:15 GMT

Hello,

I downloaded GlobalProtect app on my Macbook with Mac OS 14.5, but after allowing access from privacy and security, the application doesn't work.

When I click on it to open the application, nothing happens. I don't have it on my menu bar either.

I don't know what to do. Any guidance will be much appreciated

Re: Global Protect on Mac OS 14.5

kiwi — Mon, 01 Jul 2024 12:24:31 GMT

Hi @Malkhaldi ,

Which version have you downloaded exactly ?

I'm running 6.2.3-270 on Sonoma 14.5 without issue.

Make sure you at least try a compatible version:

https://docs.paloaltonetworks.com/compatibility-matrix/globalprotect/where-can-i-install-the-globalprotect-app

Kind regards,

-Kim.

Re: Global Protect on Mac OS 14.5

Veloman — Mon, 15 Jul 2024 16:39:57 GMT

Some of our Mac users on v14.5 are also having issues. We have tried both GP v6.2.3-270 and v6.3.0.

Some of the errors in the GP logs that stands out:
- NESMDNSProxySession[Primary Tunnel:GlobalProtectDn:2CDF6CAC-D835-44E0-9730-650CD2F5E09D:(null)] in state NESMVPNSessionStateStarting: plugin NEDNSProxyPlugin(com.paloaltonetworks.GlobalProtect.client[inactive]) started with PID 0 error Error Domain=NEAgentErrorDomain Code=2 "(null)"
- com.paloaltonetworks.GlobalProtect.client[945]: Tearing down XPC connection due to setup error: Error Domain=NEAgentErrorDomain Code=2 "(null)"
- NEAgentSession: failed to create the delegate
- [NESMVPNSession unsetDefaultDropAll]: VPN setting IP Drop-All to 0 (Non-Persistent)

Re: Global Protect on Mac OS 14.5

JayGolf — Mon, 15 Jul 2024 18:30:12 GMT

Hi @Veloman ,

Can you uninstall GP and reinstall the application while making sure access has been allowed for GP through privacy and security? It looks like you're running into setup failures.

Re: Global Protect on Mac OS 14.5

Veloman — Tue, 16 Jul 2024 17:43:52 GMT

- Tried uninstalling and reinstalling GP many times the last week (10+ on each). Following this guide.
https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA14u000000HCbFCAW
- Today we also tried v6.2.4 and got no further.

I dont have the Macbooks in front of me (3 users in our corp) but we have also ensured that these steps are taken.

Ensure GlobalProtect has the necessary permissions:

Full Disk Access
Network Extensions
System Extensions

We can also see that there are some System Profiles with globalprotect in the name that we are not able to remove.

Re: Global Protect on Mac OS 14.5

Veloman — Wed, 31 Jul 2024 11:29:33 GMT

The problem in our case was triggered by a yearly automatic renewal of machine/system and user certificates via Intune from our PKI (Using SAML in Azure).

If we downgraded to GP v6.2.2 the certificates would renew as they should and GP got connected. We could then upgrade to v6.2.4 without issues.