MACOS Sonoma, GlobalProtect not able to connect to the port 4767

[cosmo2023]

Hi Guys,

Three weeks ago I upgraded my intel MAC to the Sonoma Version,  and unfortunately my GlobalProtect does not work anymore. The PANGS service is not able to set up the port 4767 anymore and the logs shows:

P2503-T34311 12/15/2023 10:29:11:158 Debug( 57): fd still open before connect
P2503-T34311 12/15/2023 10:29:11:158 Error( 80): CPanSocket::Connect - Failed to connect to server at port:4767
P2503-T34311 12/15/2023 10:29:11:158 Error( 241): Cannot connect to service, error: 61
P2503-T259 12/15/2023 10:29:11:158 Debug(1854): showConnectButton:1
P2503-T41219 12/15/2023 10:29:11:622 Info ( 237): InitConnection ...
P2503-T41219 12/15/2023 10:29:11:622 Debug( 57): fd still open before connect
P2503-T41219 12/15/2023 10:29:11:622 Error( 80): CPanSocket::Connect - Failed to connect to server at port:4767
P2503-T41219 12/15/2023 10:29:11:622 Error( 241): Cannot connect to service, error: 61

1.- I installed versions 6.0.8 till the last released already, but the status is the same.

2.- The permissions for allowing 3rd Party applications were allowed too.

3.- Booting the PC in recovery mode and issuing the command  spctl kext-consent add PXPZ95SK77. With Sonoma should not be necessary anymore, but I made it too.

4.- Different flavors of launch command with the pangps.plist  Daemons and Agents already done too.

5.- FW is totally deactivated.

Simply and basically the App is not able to start the port:

$netstat -an | find "4767"
$find: 4767: No such file or directory 

I will appreciate any help

Kind regards

Cosmo

[AndyPalacios]

We have the same issue. Were you able to resolve your issue?

[Alejandro_Hernandez]

The version 6.0.8 has this bug, and the version is not preferred release

The recommendation is install version 6.1.4 or 6.2.2

You will try with a newest version

[SebastianStrauch]

Hello together.

Any Updates on this?

Seems that Sonoma and GP is a no go at the moment (since many months)...

[kiwi]

Hi @SebastianStrauch ,

GPC-18964 is fixed in GP version 6.2.2 and 6.1.4:

https://docs.paloaltonetworks.com/globalprotect/6-2/globalprotect-app-release-notes/globalprotect-ad...

https://docs.paloaltonetworks.com/globalprotect/6-1/globalprotect-app-release-notes/globalprotect-ad...

On the 6.0.x version the target fix is on GP 6.0.9

Kind regards,

-Kim.

[EwoudHolvoet]

I've tried using 6.2.2 but that's not helping either. Any other suggestions?

[SebastianStrauch]

@kiwi 
Actually, this was not my problem - and I've tried to use 6.1.3 & 6.1.4 as well.

I ended up deleting the file "/Library/Preferences/com.apple.networkextension.plist" in Recovery Mode after uninstalling all GP related stuff on the machine. Afterwards I installed the GlobalProtect app with out the system extension and for now it is working fine.

BUT the VPN-profile pop-up did just appear once (after the first install) and now it's gone forever, even the setting under "Settings - Network - VPN" is gone and there is no VPN visible within the OS.

What I experienced is that even after an uninstall of GP there remain several artifacts in the system and I could probably not get rid of them completely.

Is there a cleaner like for the XDR agent?

Best regards

Sebastian