GlobalProtect-连接失败日志分析
macOS 10.15.3和macOS 10.15.4(beta)测试,连接失败。
分析GlobalProtect的运行日志,看到这个信息:
报错信息:“KEXT pangpd.kext requires user approval”
但是在对应系统安全界面,并没有用户确认的地方。
= = = 运行日志获取= = =
1.在GlobalProtect的主菜单
选择“设定”子菜单:
2.疑难排解
选择弹出框中分页:“疑难排解”:
3.收集日志
在上面的界面,点击按钮:“收集日志“,开始收集运行日志。
4.得到运行日志
日志文件名:GlobalProtectLogs.tgz
5.解压缩找到日志文件
unzip, and open the file :
[debug_drv.log]
报错信息:“KEXT pangpd.kext requires user approval”
6.内核插件加载失败
上面的信息提示,内核插件安装后,需要用户approval,
但我在macOS的系统安全界面,看不到对应的”允许“提示。
反复卸载和安装多次也没有。
= = = 安装日志分析 = = =
[PanGPInstall.log]:
Kext rejected due to system policy:
Diagnostics for /Applications/GlobalProtect.app/Contents/Resources/pangpd.kext:
Mon Feb 3 12:59:50 CST 2020 Removing launchd jobs
Mon Feb 3 12:59:50 CST 2020 com.paloaltonetworks.gp.pangpa
Mon Feb 3 12:59:50 CST 2020 com.paloaltonetworks.gp.pangps
Mon Feb 3 12:59:50 CST 2020 com.paloaltonetworks.gp.pangpsd
Mon Feb 3 12:59:50 CST 2020 goodmao com.paloaltonetworks.gp.pangpa
Mon Feb 3 12:59:51 CST 2020 goodmao com.paloaltonetworks.gp.pangps
Mon Feb 3 12:59:51 CST 2020 goodmao com.paloaltonetworks.gp.pangpsd
ifconfig: interface gpd0 does not exist
(kernel) Kext com.paloaltonetworks.kext.pangpd not found for unload request.
Failed to unload com.paloaltonetworks.kext.pangpd - (libkern/kext) not found.
(kernel) Kext com.paloaltonetworks.GlobalProtect.gplock not found for unload request.
Failed to unload com.paloaltonetworks.GlobalProtect.gplock - (libkern/kext) not found.
No such key
No such key
Mon Feb 3 12:59:51 CST 2020 install daemon plist
Mon Feb 3 12:59:51 CST 2020 install agent plist
No matching processes were found
Mon Feb 3 12:59:51 CST 2020 Load gps and gpa
Mon Feb 3 12:59:51 CST 2020 Removing old GlobalProtect
Mon Feb 3 12:59:51 CST 2020 GlobalProtect installation finished.