Dealing with PaloAltoNetworks GlobalProtect VPN

pan_globalprotect_notes.md

Prevent Automatic daemon launching:

Modify the launchd agent for GlobalProtect:

sudo nvim /Library/LaunchAgents/com.paloaltonetworks.gp.pangpa.plist

• Modify RunAtLoad and KeepAlive to <false/>

sudo nvim /Library/LaunchAgents/com.paloaltonetworks.gp.pangps.plist

• Modify RunAtLoad to <false/>
• Modify KeepAlive to <false/>

launchctl and other Operations

Starting PAN GlobalProtect

launchctl start com.paloaltonetworks.gp.pangps
launchctl start com.paloaltonetworks.gp.pangpa

Stoping PAN GlobalProtect

# Gracefully
launchctl stop com.paloaltonetworks.gp.pangpa
launchctl stop com.paloaltonetworks.gp.pangps
launchctl stop com.paloaltonetworks.gp.pangps #you need to kill PanGPS twice, it respawns the first time

# Forcefully
sudo killall GlobalProtect && sudo killall PanGPS

List the processes

launchctl list | grep palo

ps auxwww | egrep "GlobalProtect|PanGPS"

Resources:

• https://richddean.com/post/147155656349/stopautostartglobalprotectvpn

Found that /Library/LaunchAgents/com.paloaltonetworks.gp.pangps.plist had a dict key for KeepAlive:

    <key>KeepAlive</key>
    <dict>
        <key>SuccessfulExit</key>
        <true/>
    </dict>