About AnalysisMan

@RuslanConk, I'm not sure whether you resolved the issue or not. If you still have the problem.   1. Check the Security & Privacy on the System Preferences. Enable the kernel extension for GP under   System Preferences > Security & Privacy > General   by clicking the   Allow   button. The user then needs to   restart   after clicking Allow to start the service. 2. Run a command on the Recovery mode. If the issue persists afterward, the Mac would need to be booted into Recovery mode and then run the following command from the Terminal:   spctl kext-consent add PXPZ95SK77   PXPZ95SK77   is the unique identifier for Palo Alto Networks   Reboot the Mac and reinstall the GP client.   Hope this helps,         ... View more

Hi @JackTrainor,   Did you set the GP App Configurations - Use Default Browser for SAML Authentication, to Yes? If you set this option to No, then you can minimize the dependency on web browsers since this setting uses the GP-embedded browser.   Hope this helps,   ... View more

Hi @Marinamoru2    I don't know about Pointsharp, but here is the feature list that you required for the GlobalProtect license. https://docs.paloaltonetworks.com/globalprotect/10-1/globalprotect-admin/globalprotect-overview/about-globalprotect-licenses   Hope this helps, ... View more

The issue is related to the Azure SAML authentication. It was okay if the GP authenticated with the on-prem LDAP.   # Solution 1. Update the fixed KBs to the client systems. 1. Microsoft KB5020435 fixed the issue on Windows 10. 2. Microsoft KB5020387 fixed the issue on Win11 21H2 3. Microsoft KB5018496 fixed the issue on Win11 22H2   # Solution 2. Remove the installed KB5018410 If you want to fix the problem immediately, you can just remove this KB from the impacted system. However, the proper solution would be Solution 1 which is the bug fixes.   # Solution 3. Change the GP app configurations 'Use Default Browser for SAML Authentication' is set to No (by default). If you change this option to Yes, you should be able to connect to the VPN. However, this change brings a browser pop-up window, and the user needs a few more clicks.   Hope this helps!   ... View more