Global Protect Not working MacOs Ventura

cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Announcements
Please sign in to see details of an important advisory in our Customer Advisories area.

Global Protect Not working MacOs Ventura

L1 Bithead

I use Macbook Pro 14 Inc M1 Pro with MacOS Ventura (13).

Running PAN OS 10.2.3 and Global Protect

But my global protect not working with this issue

 

P1772-T26627 11/01/2022 07:47:44:451 Error( 80): CPanSocket::Connect - Failed to connect to server at port:4767
P1772-T26627 11/01/2022 07:47:44:451 Error( 241): Cannot connect to service, error: 61
P1772-T26627 11/01/2022 07:47:44:451 Dump (1424): CPanCommand::Send - InitConnection failed again. return without sent.
P1772-T26627 11/01/2022 07:47:44:451 Dump (1339): Send command failed
P1772-T26627 11/01/2022 07:47:44:956 Debug(1329): Special command, expects no return msg: <request><type>setdebug</type><debuglevel>6</debuglevel></request>
P1772-T26627 11/01/2022 07:47:44:956 Dump (1422): CPanCommand::Send - not connected, and reintialized connection to service.
P1772-T26627 11/01/2022 07:47:44:956 Info ( 237): InitConnection ...
P1772-T26627 11/01/2022 07:47:44:956 Debug( 57): fd still open before connect
P1772-T26627 11/01/2022 07:47:44:958 Error( 80): CPanSocket::Connect - Failed to connect to server at port:4767
P1772-T26627 11/01/2022 07:47:44:958 Error( 241): Cannot connect to service, error: 61
P1772-T26627 11/01/2022 07:47:44:958 Dump (1424): CPanCommand::Send - InitConnection failed again. return without sent.
P1772-T26627 11/01/2022 07:47:44:958 Dump (1339): Send command failed

 

please help me.

1 accepted solution

Accepted Solutions

L3 Networker

What is your GlobalProtect version?

Officially, macOS 13 (Ventura) is supported with GP 5.2.12 or later.

https://docs.paloaltonetworks.com/compatibility-matrix/globalprotect/where-can-i-install-the-globalp...

 

Hope this helps,

--
"The Simplicity is the ultimate sophistication." - Leonardo da Vinci.

View solution in original post

9 REPLIES 9

L2 Linker

Generally those logs means there is an error with the service listening for the connection (on your workstation). On the MAC if you do the following from the terminal do you see this reply?

netstat -an | grep 4767

tcp4 0 0 127.0.0.1.4767 *.* LISTEN

 

L3 Networker

What is your GlobalProtect version?

Officially, macOS 13 (Ventura) is supported with GP 5.2.12 or later.

https://docs.paloaltonetworks.com/compatibility-matrix/globalprotect/where-can-i-install-the-globalp...

 

Hope this helps,

--
"The Simplicity is the ultimate sophistication." - Leonardo da Vinci.

58 / 5,000

 

Translation results

 
 
I am using globalprotect version 6.1 and pan os 10.2.3

sh-3.2# netstat -an | grep 4767
sh-3.2#

 

no information listening port

 

and I try add rule on pf.cof like this

pass out inet proto tcp from any to any port 4767 no state

 

but global-protect client still not working

 

L3 Networker

@RuslanConk,
I'm not sure whether you resolved the issue or not. If you still have the problem.

 

1. Check the Security & Privacy on the System Preferences.

Enable the kernel extension for GP under System Preferences > Security & Privacy > General by clicking the Allow button. The user then needs to restart after clicking Allow to start the service.

2. Run a command on the Recovery mode.
If the issue persists afterward, the Mac would need to be booted into Recovery mode and then run the following command from the Terminal:

 spctl kext-consent add PXPZ95SK77

 

PXPZ95SK77 is the unique identifier for Palo Alto Networks

 

Reboot the Mac and reinstall the GP client.

 

Hope this helps,

 

 

 

 

--
"The Simplicity is the ultimate sophistication." - Leonardo da Vinci.

L0 Member

How to enable the extension on MacOs Venture - the description above does not apply to latest version of MacOs

L0 Member

I am having a similar problem as once I installed Cortex XDR the new OS Ventura did not give me the option to Allow VPN config like back on Monterey.  The privacy section is different and I never saw an option for VPN config.

Hi, 

I have the same issue. Ventura 13.5 (same on earlier Ventura versions). M1. Client Version is 6.2.0-89.

  1. reinstalled the client multiple times (alowed extension in System / preferences)
  2. lowered security profile in recovery console
  3. executed  spctl kext-consent add PXPZ95SK77 in recovery console

Still the kexts are not loaded

System Extensions:

    [Running] GlobalProtectExtension - version 6.2.0-89 (Palo Alto Networks - 2023-07-27)
        Application: /Applications/GlobalProtect.app - version 6.2.0-89 (Palo Alto Networks - 2023-07-27)

        Description: System Extensions for GlobalProtect Split Tunnel and Enforcer

 

Kernel Extensions:

    /Applications/GlobalProtect.app

        [Not Loaded] gplock.kext - com.paloaltonetworks.GlobalProtect.gplock (Palo Alto Networks, 6.2.0 - SDK 10.10)

        [Not Loaded] gpsplit.kext - com.paloaltonetworks.GlobalProtect.gpsplit (Palo Alto Networks, 6.2.0 - SDK 10.10)

        [Not Loaded] pangpd.kext - com.paloaltonetworks.kext.pangpd (Palo Alto Networks, 6.2.0 - SDK 10.10)

 

Any idea? 

version 6.0.0-38

  • 1 accepted solution
  • 33013 Views
  • 9 replies
  • 2 Likes
Like what you see?

Show your appreciation!

Click Like if a post is helpful to you or if you just want to show your support.

Click Accept as Solution to acknowledge that the answer to your question has been provided.

The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!

These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!

The LIVEcommunity thanks you for your participation!