Allow System Extension for MacOSX Catalina 10.15.4 or later

Allow System Extension for MacOSX Catalina 10.15.4 or later

13646
Created On 06/13/20 03:32 AM - Last Modified 06/15/20 20:59 PM


Symptom


New MacOSx Catalina 10.15.4 or later does not use kernel extension(com.paloaltonetworks.kext.pangpd), instead will use any of the available utun interfaces provided by macOS as the virtual adapter.

Once the user connects they will see the following prompt, to allow the System Extension. 

User-added image



Environment


  • MacOSX 10.15 Catalina
  • GlobalProtect Client 5.1.4 or above


Cause


  • After upgrade to the latest GlobalProtect Client 5.1.4. you will be prompted with a pop "System Extension Blocked".


Resolution


  1. To Allow the System Extension, click "Open Security Preferences"
User-added image
  1. Then click the Lock at the bottom to make changes, it will prompt the user to authenticate
 
User
  1. Then click allow next to "System software from application "GlobalProtect" was blocked from loading" and close the windows. 
  2. If you're managing MacOS via MDM, you can also add the following Team ID (PXPZ95SK77) and Extension (com.paloaltonetworks.GlobalProtect.client.extension) to whitelist, if these are pre-approved on the MDM, user will not see the System Extension Blocked pop-up. 


Additional Information


Admin Guide Page 23

Actions
  • Print
  • Copy Link

    https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g0000008UR7CAM&refURL=http%3A%2F%2Fknowledgebase.paloaltonetworks.com%2FKCSArticleDetail

Choose Language