Global Protect on Mac OS 14.5

[Malkhaldi]

Hello,

I downloaded GlobalProtect app on my Macbook with Mac OS 14.5, but after allowing access from privacy and security, the application doesn't work.

When I click on it to open the application, nothing happens. I don't have it on my menu bar either.

I don't know what to do. Any guidance will be much appreciated  

[kiwi]

Hi @Malkhaldi ,

Which version have you downloaded exactly ?

I'm running 6.2.3-270 on Sonoma 14.5 without issue.

Make sure you at least try a compatible version:

https://docs.paloaltonetworks.com/compatibility-matrix/globalprotect/where-can-i-install-the-globalp...

Kind regards,

-Kim.

[Veloman]

Some of our Mac users on v14.5 are also having issues. We have tried both GP v6.2.3-270 and v6.3.0.

Some of the errors in the GP logs that stands out:
- NESMDNSProxySession[Primary Tunnel:GlobalProtectDn:2CDF6CAC-D835-44E0-9730-650CD2F5E09D:(null)] in state NESMVPNSessionStateStarting: plugin NEDNSProxyPlugin(com.paloaltonetworks.GlobalProtect.client[inactive]) started with PID 0 error Error Domain=NEAgentErrorDomain Code=2 "(null)"
- com.paloaltonetworks.GlobalProtect.client[945]: Tearing down XPC connection due to setup error: Error Domain=NEAgentErrorDomain Code=2 "(null)"
- NEAgentSession: failed to create the delegate
- [NESMVPNSession unsetDefaultDropAll]: VPN setting IP Drop-All to 0 (Non-Persistent)

[JayGolf]

Hi @Veloman ,

Can you uninstall GP and reinstall the application while making sure access has been allowed for GP through privacy and security? It looks like you're running into setup failures. 

[Veloman]

- Tried uninstalling and reinstalling GP many times the last week (10+ on each).  Following this guide.
https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA14u000000HCbFCAW
- Today we also tried v6.2.4 and got no further.

I dont have the Macbooks in front of me (3 users in our corp) but we have also ensured that these steps are taken.

Ensure GlobalProtect has the necessary permissions:

• Full Disk Access
• Network Extensions
• System Extensions

We can also see that there are some System Profiles with globalprotect in the name that we are not able to remove.

[Veloman]

The problem in our case was triggered by a yearly automatic renewal of machine/system and user certificates via Intune from our PKI (Using SAML in Azure).

If we downgraded to GP v6.2.2 the certificates would renew as they should and GP got connected. We could then upgrade to v6.2.4 without issues.