topic Global Protect Problems on a Mac in General Topics

Global Protect Problems on a Mac

dehrmann — Thu, 22 Jan 2015 19:20:23 GMT

Running Global Protect version 2.1.0-50 on a Macbook Pro with OS X and Yosemite. Connecting to a PA-500 running PANOS 4.1.8.

When I finish using my Mac for the day, I put it in Sleep mode so that it starts up again instantly. But if the VPN through Global Protect is active at the time and I forget to Disconnect, it gets locked up and there's no way to reset it. Selecting the "Disconnect" option doesn't work anymore. There's also no option to remove it from memory.

Also, if I use the OS X Activity Monitor to force Global Protect out of memory, that doesn't fix the problem. It immediately reloads (because there is some other linked process running) then it tries continuously to reconnect but never succeeds. And I can't work out what the other linked process is to force it to quit as well. The only thing that works is a reboot, which is a serious PITA.

One more thing: after rebooting, I always get a warning message that there is an OLDER version of Global Protect and it will download and install automatically. Why would I want an older version??? How do I stop this message?

Dan

Re: Global Protect Problems on a Mac

oklier — Thu, 22 Jan 2015 23:20:38 GMT

May want to open a case on the sleep/hibernate issue. As for the message about the older version, the client checks to see which version is active on the firewall, so if its an older version it will always prompt you to download it. So i would say just make the one you are using active.

Re: Global Protect Problems on a Mac

Tsutherl — Fri, 24 Apr 2015 07:37:59 GMT

Hi both,

Did either of you get anywhere on this? I am experiencing the same problem with GlobalProtect on Yosemite devices.

Regards

Terry

Re: Global Protect Problems on a Mac

BenjAudy.MTL — Sat, 25 Apr 2015 02:20:55 GMT

If you are referring to the sleep mode issue, you can restart the PanGPS service with the following command in a terminal window, as a temporary workaround:

launchctl kickstart -k gui/`id -u`/com.paloaltonetworks.gp.pangps

You can also simply enter your user id if you already know it:

launchctl kickstart -k gui/501/com.paloaltonetworks.gp.pangps

Regards,

Benjamin