Skip to main content
Solved

GlobalProtect System Extensions

  • October 14, 2022
  • 4 replies
  • 112 views

Forum|alt.badge.img+6

Hi all,

I am trying to install GlobalProtect on our Macs via Jamf Pro. I have GP installed with no issues and have the policy to set to configure the default portal. This all works great; however, the problem is, during the installation, GlobalProtect is not installing 'GlobalProtect System extensions' (see linked picture). Without this, I don't have a working VPN connection. I tried a few things I found on https://docs.paloaltonetworks.com/, but nothing works. It works fine if I manually install GlobalProtect and check this box. If I deploy the package with Jamf Pro, the box doesn't get checked, and the VPN doesn't work. 

Any ideas?

Best answer by sdagley

@SKizale GP should install its extension automatically when a connection is opened. You can trigger the extension install after installing GP by running the following commands:

/bin/mkdir -p "/Library/Application Support/PaloAltoNetworks/GlobalProtect" /usr/bin/touch "/Library/Application Support/PaloAltoNetworks/GlobalProtect/install_system_extensions.now"

4 replies

sdagley
Forum|alt.badge.img+25
  • Jamf Heroes
  • 3567 replies
  • Answer
  • October 14, 2022

@SKizale GP should install its extension automatically when a connection is opened. You can trigger the extension install after installing GP by running the following commands:

/bin/mkdir -p "/Library/Application Support/PaloAltoNetworks/GlobalProtect" /usr/bin/touch "/Library/Application Support/PaloAltoNetworks/GlobalProtect/install_system_extensions.now"

Forum|alt.badge.img+6
  • Author
  • Contributor
  • 11 replies
  • October 14, 2022

@SKizale GP should install its extension automatically when a connection is opened. You can trigger the extension install after installing GP by running the following commands:

/bin/mkdir -p "/Library/Application Support/PaloAltoNetworks/GlobalProtect" /usr/bin/touch "/Library/Application Support/PaloAltoNetworks/GlobalProtect/install_system_extensions.now"

@sdagley, that did the trick. I ran those commands and tested the connection, but it still didn't work. So, without doing anything else, I rebooted and tried again, and it worked perfectly! I'll have to make up something that runs these post-install and reboots the machine. Thanks a bunch for your help. This had me stumped for a few days. 


Forum|alt.badge.img+2
  • New Contributor
  • 4 replies
  • October 21, 2022

Could you let me know how you set the portal to configure? Configuration profile with updated plist runs successfully but changes do not take affect.


Forum|alt.badge.img+6
  • Author
  • Contributor
  • 11 replies
  • October 21, 2022

Could you let me know how you set the portal to configure? Configuration profile with updated plist runs successfully but changes do not take affect.


@jennaferharris, did you reboot afterward? Mine did not work until I rebooted the machines.