How To Remove GlobalProtect On Mac: A Complete Uninstallation Guide For MacOS

To completely remove GlobalProtect from a Mac, you must execute the official built-in uninstaller script or manually purge the application binaries alongside its associated LaunchDaemons, LaunchAgents, and system extensions. Successfully executing this process requires local administrator privileges or the removal of associated Mobile Device Management configuration profiles to prevent the automatic reinstallation of persistent background services.

Pre-Uninstallation Requirements and System Access Checklist

Before attempting to remove Palo Alto Networks GlobalProtect from your macOS environment, you must determine how the software was originally provisioned. Because GlobalProtect acts as an enterprise-grade Virtual Private Network client and endpoint security agent, it embeds itself deeply within the macOS system architecture. If the application was deployed by an organization's Information Technology department via a Mobile Device Management system such as Jamf Pro, Kandji, or Microsoft Intune, simply dragging the application icon to the Trash will fail.

You must secure local administrator credentials and, in some cases, an uninstallation passcode provided by your IT security administrator. To guarantee a clean uninstallation without causing network disruption or leaving orphaned system processes that continuously try to run in the background, verify the following prerequisites.

• Administrative Access: Local administrative username and password credentials are required to modify system-level launch agents and run terminal scripts.
• Original Installation Package (Optional but Recommended): Access to the original GlobalProtect.pkg installer bundle, which contains the official uninstallation script.
• System Permissions: Full Disk Access permission granted to the Terminal application if manual file deletion via command line is required.
• Estimated Duration: 10 to 15 minutes of hands-on configuration.
• Cost/Budget: Free (utilizing native macOS system utilities and terminal applications).

Step-by-Step GlobalProtect Uninstallation and Leftover Removal Workflow

Step 1: Disconnect and Terminate Active GlobalProtect Processes

Prior to removing any binaries or configuration files, you must stop the active GlobalProtect agent from running on your Mac. Because the agent is designed to maintain a persistent connection, standard window-closing procedures will not terminate the underlying background services.

1. Locate the GlobalProtect globe icon in the macOS menu bar at the top-right corner of your screen.
2. Click the icon, select the gear settings icon, and choose Disconnect. If your organization enforces an "Always-On" VPN policy, this option may be grayed out; in this case, proceed directly to using administrative override tools.
3. Open the Activity Monitor application by navigating to Applications, selecting Utilities, and double-clicking Activity Monitor.
4. In the search box in the top-right corner of Activity Monitor, type GlobalProtect.
5. Identify all active processes, which commonly include GlobalProtect, GlobalProtect Service, and GPServer.
6. Click on each process, click the Stop button (represented by an X inside an octagon at the top left of the window), and select Force Quit.

Warning: Failing to force-quit these active processes will cause macOS to lock the application binaries, preventing the uninstaller or terminal commands from successfully deleting the software files.

Step 2: Execute the Native GlobalProtect Uninstaller Script

Palo Alto Networks packages a dedicated uninstallation script inside every installation bundle. Using this official script is the most reliable method to clean the system, as it programmatically unloads the system extensions and kernel modules.

1. Open Finder and navigate to the root Applications directory.
2. Double-click the GlobalProtect application folder. If you see an application named Uninstall GlobalProtect, double-click it to launch the wizard.
3. If the uninstaller application is missing from your Applications folder, you will need to locate the original GlobalProtect.pkg file used to install the software.
4. Double-click the GlobalProtect.pkg file to open the installation wizard.
5. On the Introduction screen, click Continue.
6. When you reach the Installation Type screen, select the checkbox next to Uninstall GlobalProtect and uncheck all other options.
7. Click Continue, then click Install (or Uninstall) to initiate the removal sequence.
8. When prompted by macOS, enter your system administrator username and password to authorize the removal of system-level files.

Pro-Tip: If your IT department has set an uninstall password, a dialog box will appear asking for this password. You cannot bypass this step without contacting your organization's IT helpdesk or utilizing an MDM command to push an uninstallation profile to your machine.

Step 3: Run the Command-Line Uninstallation Script via Terminal

If the graphical user interface uninstaller fails to launch or hangs indefinitely, you can trigger the uninstallation script directly through the macOS Terminal. This method bypasses interface errors and provides real-time progress logging.

1. Open the Terminal application by navigating to Applications, selecting Utilities, and double-clicking Terminal.
2. To ensure you have the necessary privileges, execute the uninstallation script as the root user. Type the following command exactly as shown, and then press Enter:sudo /Applications/GlobalProtect.app/Contents/Resources/uninstall_gp.sh
3. The Terminal will prompt you for your macOS user account password. Type your password and press Enter. Note that no characters or asterisks will display on the screen as you type; this is a standard security behavior in macOS.
4. The script will execute, unloading the launch daemons, deleting system extensions, and removing the primary application files. Once complete, you will see a new prompt line in the Terminal.

Step 4: Manually Purge Lingering System Configurations and Plist Files

Even after running the official uninstaller, macOS often retains cached configuration files, user preferences, and launch instructions in hidden system directories. These orphaned files can conflict with other VPN clients or generate system log errors as macOS repeatedly tries to load non-existent services.

1. In Finder, press Command + Shift + G to open the Go to Folder dialog box.
2. To remove global launch configurations, copy and paste the following path into the box and press Enter:/Library/LaunchAgents
3. Scan this folder for any files containing the name paloaltonetworks, such as com.paloaltonetworks.gp.pane.plist or com.paloaltonetworks.gp.userportal.plist. Drag these files to the Trash.
4. Open the Go to Folder dialog box again, and navigate to the system LaunchDaemons directory:/Library/LaunchDaemons
5. Locate com.paloaltonetworks.gp.daemon.plist, right-click it, and select Move to Trash.
6. Navigate to the global application support folder:/Library/Application Support
7. Find the folder named PaloAltoNetworks. Right-click the folder and choose Move to Trash.
8. Navigate to your user-specific Library folder by entering:~/Library/Application Support
9. Locate and delete any folder named PaloAltoNetworks or GlobalProtect located within this user directory.
10. Finally, check your user preferences folder by navigating to:~/Library/Preferences
11. Locate any files matching com.paloaltonetworks.GlobalProtect.plist and move them to the Trash.

Step 5: Clean Up macOS System Network Configurations

GlobalProtect installs virtual network interfaces to route your internet traffic securely. To ensure your native macOS network settings are restored to their default configurations:

1. Click the Apple menu in the top-left corner of your screen and select System Settings (or System Preferences on older macOS versions).
2. Click on Network in the left-hand sidebar.
3. Review the list of active network connections. If you see an entry labeled GlobalProtect or Palo Alto Networks, click on it.
4. Click the details button or the minus icon at the bottom of the list to remove the virtual network interface completely.
5. Empty your Trash by right-clicking the Trash icon in your Dock and choosing Empty Trash.
6. Restart your Mac to clear all system caches and finalize the removal of the network extensions.

GlobalProtect Directory Architecture and Uninstallation Artifacts

The following matrix outlines the complete directory paths, file descriptions, and required actions necessary to achieve a flawless, 100% clean removal of GlobalProtect from macOS.

Resolving MDM Locks and Common Uninstallation Blockers

Scenario 1: The uninstall script fails with a "Permission Denied" error

• Root Cause: This issue occurs if the Terminal application lacks the system authorization required to modify root folders, or if you failed to prefix the script command with administrative execution permissions.
• Actionable Fix: Ensure you use the prefix "sudo " before executing the uninstallation script. If the error persists, open System Settings, navigate to Privacy & Security, click Full Disk Access, and toggle the switch next to Terminal to the ON position. Restart Terminal and try the command again.

Scenario 2: GlobalProtect automatically reinstalls or reappears after a restart

• Root Cause: The Mac is enrolled in an enterprise Mobile Device Management (MDM) platform. The MDM server detects that the mandatory GlobalProtect application has been deleted and automatically pushes a new installer package to the computer.
• Actionable Fix: Open System Settings and select Profiles or Profiles & Device Management. Look for an MDM enrollment profile or a configuration profile targeting GlobalProtect. You must highlight this profile and click the minus icon to remove it. Note that if your organization has locked the MDM enrollment, you must contact your system administrator to exclude your machine's serial number from the GlobalProtect deployment scope.

Scenario 3: Loss of internet connection after deleting the application

• Root Cause: The GlobalProtect uninstallation process was interrupted before it could restore the default macOS routing tables and DNS configurations, leaving the system looking for a non-existent virtual tunnel interface.
• Actionable Fix: Open System Settings, navigate to Network, select your active connection (Wi-Fi or Ethernet), and click Details. Click on the DNS tab, remove any legacy DNS servers associated with your corporate network, and add public DNS servers such as 8.8.8.8 or 1.1.1.1. If the problem persists, open Terminal and run the command "sudo route -n flush" to reset the system routing tables, then restart your Mac.

Scenario 4: "GlobalProtect.app is open" warning prevents manual deletion

• Root Cause: The background service daemon is automatically restarting the main application every time you attempt to quit it.
• Actionable Fix: You must unload the launch daemon before deleting the app. Run the following command in Terminal to stop and unload the service:sudo launchctl unload /Library/LaunchDaemons/com.paloaltonetworks.gp.daemon.plistOnce unloaded, you can drag the application from your Applications folder directly to the Trash without encountering any file-in-use errors.

Frequently Asked Questions

Can I remove GlobalProtect from my Mac by dragging it to the Trash?

No, dragging the application icon to the Trash only deletes the graphical interface binary. The underlying background services, launch daemons, system extensions, and custom network interfaces remain active, which will cause continuous system-log errors and degrade network performance.

Why does the GlobalProtect uninstaller ask for a password?

The uninstaller requires your macOS administrative password to authorize the removal of system-level launch configurations and security files located in protected directories. If it asks for an application-specific uninstall passcode, this indicates your company's IT department has locked the software; you will need to request this passcode from your system administrator.

How do I check if GlobalProtect is completely gone from my Mac?

Open Terminal and run the command "ps aux | grep GlobalProtect". If the only output is the grep command itself, no active processes are running. You should also check that the PaloAltoNetworks folders are completely absent from both the global and user-specific Application Support directories.

Does removing GlobalProtect delete my saved VPN connections and corporate configurations?

Yes, running the uninstaller or manually deleting the associated plist files and the PaloAltoNetworks folder in Application Support clears all stored configurations, portal addresses, connection logs, and security certificates from your Mac.

Optimize Your Mac's Post-Uninstallation Performance

For users managing multiple enterprise applications or looking to maintain peak performance on macOS, keeping system directories clean is essential. If you frequently install and remove developer tools, VPN clients, or remote-access applications, consider deploying a dedicated system management console or consulting with local IT infrastructure professionals to ensure clean application life cycles.