GlobalProtect VPN Client Mac OSX Secure Input

[itdaveramsey]

I've got a user that uses keyboard maestro (an application) to run macros for software development. The issue is that keyboard maestro requires secure input (Mac OSX feature) to be disabled to be able to run. GlobalProtect since it starts as a service enforces secure input (the Mac osx feature) to be enabled. I've looked through the app config within the firewall and didn't find anything. 

Has anyone run across a way to disable secure input with global protect still running and able to still connect to vpn??

I found the terminal string to terminate the GlobalProtect, but that doesn't help if the user needs to use keyboard maestro (the Mac application) while on VPN.

[vathreya]

HI,

I don't completely understand your question. Could you please provide some background?

Regards,

Varun

[itdaveramsey]

@vathreya I re-read my post and realized it wasn't to clear. I have modified it in hopes that someone can help.

[samforester]

I've submitted a ticket regarding this issue, but presenting in another app: it's case number 01437127 and has a pretty detailed explanation of what I believe to be the root cause.

[itdaveramsey]

fantastic. definitely keep me updated.

[samforester]

Until a solution is presented, here's a list of resources I found while researching this issue:

https://wiki.keyboardmaestro.com/assistance/Secure_Input_Problem

https://smilesoftware.com/textexpander/secureinput

https://www.alfredapp.com/help/troubleshooting/snippets/#secure-input

https://developer.apple.com/library/archive/technotes/tn2150/_index.html

https://discussions.agilebits.com/discussion/106498/secure-input-is-enabled

https://security.stackexchange.com/questions/47749/how-secure-is-secure-keyboard-entry-in-mac-os-xs-...

The easiest work-arounds are:

1. Reboot your computer
2. Quit the application locking Secure Entry
   1. Launch Activity Monitor > search for "GlobalProtect" > click the "stop" button OR Launch Terminal > run the command `killall GlobalProtect`

For GlobalProtect specifically, I've had some luck with signing out (GlobalProtect > Settings > General > Sign Out), and then signing back in, but I also performed quite a few other resets that may have influenced the fix. I'll try to remember to post back after my ticket is handled.

[JermaineBethune]

Did you ever get this issue resolved?

[jdelio]

Just to let everyone know that I have written a Discussion of the Week blog about this topic here:

https://live.paloaltonetworks.com/t5/blogs/dotw-globalprotect-vpn-client-mac-osx-secure-input/ba-p/3...

Please be sure to check it out.

regards,

Joe