We discovered a issue with new Mac machines pre-installed with MacOS Sierra 10.13.3 or higher and GlobalProtect 4.1. If you already have GlobalProtect 4.1 installed prior to upgrading to MacOS Sierra everything works fine. If you install GlobalProtect 4.1 after upgrading or on a new Mac with Sierra already installed it doesn't work.
This is the solution we came up with to fix the problem.
The solution was to check the Security & Privacy settings after starting the GP software. The GP software will try to connect to the server, but the internal port / listening service will be unavailable until it is granted access. So when the GP software is trying to connect, open up the Security & Privacy settings, and on the general tab suddenly the message appeared that “Palo Alto Networks” is blocked. After pressing the Allow button, the login screen appeared and you are able to login successfully with the credentials.
Be aware this message isn’t showing up when the Security & Privacy settings screen is already open before starting the GP client.
Normally you will get a pop-up regarding software that needs access. However that message is being ignored. For the GP Client that pop-up won’t show up again when trying to connect even when deinstalling and re-installing again.
Click Accept as Solution to acknowledge that the answer to your question has been provided.
The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!
These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the Live Community as a whole!
The Live Community thanks you for your participation!