How to Remove GlobalProtect VPN From a Mac Completely

Eric DawsonByEric Dawson Computers & Software

You can remove GlobalProtect from a Mac completely by using the official installer’s built-in uninstall option, running a single Terminal command, or removing the files by hand through the app’s package contents, then emptying the Trash and restarting. Dragging the GlobalProtect icon to the Trash on its own will not finish the job, because the app keeps background processes, system extensions, and sometimes kernel components running after that. Palo Alto Networks, the company behind GlobalProtect, builds an uninstall path into its own installer, and IT departments generally treat that route as the safest one. A Terminal script does the same work faster for anyone comfortable with the command line, and third-party cleanup tools exist for people who want a simpler click-through process.

How to Remove Global Protect on Mac Using the Official Installer

The official installer removes GlobalProtect completely once you choose its uninstall option instead of reinstalling, and it stays the method Palo Alto Networks and most IT departments recommend first.

  1. Get the installer. Download the GlobalProtect package from your organization’s VPN portal, the same place you first got the app.
  2. Run it twice. Launch the installer file once to unpack it, then launch it again to reach the setup screens.
  3. Choose uninstall. On the Installation Type screen, select Uninstall GlobalProtect rather than the install option.
  4. Authenticate. Enter your Mac administrator username and password when macOS asks, since removing system components needs root access.
  5. Empty the Trash. Let the uninstaller finish, then empty the Trash so no leftover files remain.

Beyond that, the GlobalProtect installer package provides an uninstall option during installation. Palo Alto Networks describes this route as safe and officially supported, which matters if your Mac connects to a corporate network with strict endpoint rules.

How to Remove GlobalProtect with the Terminal Command

Terminal removes GlobalProtect in one step by running the uninstall script Palo Alto Networks packages inside the app itself, at sudo /Applications/GlobalProtect.app/Contents/Resources/uninstall_gp.sh.

  1. Open Terminal. Find it in Applications, inside the Utilities folder, or search for it with Spotlight.
  2. Run the script. Type or paste sudo /Applications/GlobalProtect.app/Contents/Resources/uninstall_gp.sh and press Return.
  3. Enter your password. macOS asks for your administrator password, and nothing appears on screen as you type it, which is normal Terminal behavior rather than a glitch.
  4. Restart your Mac. A restart clears out any process the script stopped but did not fully unload.

Northwestern University’s IT department and the University of Texas at Dallas both point staff toward this script when the graphical installer is not on hand, and both note that a restart afterward clears out any remaining background service. The script also skips the two-launch installer quirk, which is why some IT teams treat it as the quicker option for anyone who already works in Terminal.

How to Remove GlobalProtect Manually Through Package Contents

Manual removal through the app’s package contents works as a last resort when neither the installer nor Terminal access is available, though it only clears part of GlobalProtect from the Mac.

  1. Open package contents. Right-click GlobalProtect in Applications and choose Show Package Contents.
  2. Find the executable. Navigate to Contents, then MacOS, where the GlobalProtect executable sits.
  3. Move it to the Trash. Drag that executable file to the Trash first.
  4. Force quit the process. Open Activity Monitor, select the GlobalProtect process, and force quit it.
  5. Remove the app. Move the main GlobalProtect application to the Trash and empty it.

What This Method Leaves Behind

This route leaves the system extension, and on older Macs the kernel extension, still installed, because only the graphical installer and the Terminal script know how to remove those components cleanly. It also takes longer than either official method, since Activity Monitor and Finder each need a manual pass, and any leftover background service can still block the app folder from being deleted on the first try.

University of Windsor’s own writeup frames this as a fallback for a machine where the installer will not launch, not as a preferred first step, and recommends switching to Terminal once the network allows it.

Which Uninstall Method Should You Choose

Choose the official installer when you want full removal with vendor support, the Terminal command when you want speed and already trust the command line, and a third-party uninstaller only when neither of those is an option.

Method Ease of Use Removes All Components Needs Admin Password Official Support
Official installer Medium Yes Yes Yes, Palo Alto Networks
Terminal command Hard Yes Yes Yes, Palo Alto Networks
Manual package contents Hard Partial Yes No, a user workaround
Third-party uninstaller app Easy Yes No No, not vendor endorsed

MacPaw and Nektony, two Mac utility companies, both point to CleanMyMac and similar apps as a simpler alternative, though neither the official method’s author, Palo Alto Networks, nor the university IT departments that document it endorse a third-party path. Their appeal is speed rather than authority, and that trade-off is the whole decision in one line.

GlobalProtect Version and macOS Uninstall Matrix

GlobalProtect 6.0 or later follows Palo Alto Networks’ documented macOS removal procedure. Version 5.1.4 has a Catalina-specific system-extension behavior that belongs in the removal decision.

GlobalProtect version macOS coverage or condition Documented uninstall behavior
5.1.4 macOS Catalina 10.15.4 or later If system extensions were enabled during installation, the removal flow includes the Catalina system-extension confirmation described above.
6.0 macOS endpoints Use sudo /Applications/GlobalProtect.app/Contents/Resources/uninstall_gp.sh. The 6.0 documentation is dated November 7, 2025.
6.2 macOS endpoints Use the same uninstall method, including system-extension removal when applicable. This is the newer supplied documentation branch.

Choose the documented command-based procedure when the app is version 6.0 or later. Palo Alto Networks specifies that this version threshold applies to its documented macOS uninstall process.

Administrator privileges are required for either documented removal route. When macOS requests credentials, enter the User Name and Password for an administrator account to continue.

Why Dragging GlobalProtect to the Trash Does Not Work

Dragging GlobalProtect straight to the Trash fails because the app is running, and macOS blocks the move with the message “The item ‘GlobalProtect’ can’t be moved to the Trash because it is open.”

Quitting the visible app window is not enough either, because GlobalProtect keeps background processes, a system extension, and, on older installations, a kernel extension active behind the scenes, and any one of those can hold the file in place. GlobalProtect-related files can remain after the app is removed, so dragging it to the Trash alone can leave remnants behind.

Do You Need Administrator Access to Remove GlobalProtect

Yes, administrator access is required every time you remove GlobalProtect, no matter which method you pick, because the uninstall touches system files that a standard account cannot change.

Root privileges apply to the official installer, the Terminal script, and even the manual package contents route, since force quitting a protected process and deleting its system extension both need that same level of access. Palo Alto Networks’ documentation, along with the Northwestern and University of Texas at Dallas guides, all list an administrator password as a required step rather than an optional one, and skipping that prompt is usually why a removal attempt stalls partway through.

Employees on a managed corporate Mac sometimes find that their account lacks local admin rights, which blocks every method described here, including the CleanMyMac-style shortcuts. In that case, the removal has to go through the IT department directly, since no workaround restores permissions the account was never given, and asking first saves a wasted round of downloads and restarts.

How to Force Quit GlobalProtect Before Uninstalling

Force quitting GlobalProtect first clears the Trash block, and the fastest way is the keyboard shortcut Command+Option+Esc, which opens the Force Quit Applications window so you can select GlobalProtect and click Force Quit.

  1. Open Activity Monitor. Go to Applications, then Utilities, then Activity Monitor.
  2. Find the process. Locate GlobalProtect in the process list, using the search field if the list is long.
  3. Quit it. Select the process, then click Quit or Force Quit at the bottom of the window.

If GlobalProtect Says It Cannot Be Found

An error claiming GlobalProtect cannot be found, even though it still blocks removal, means the process is stuck in a state Activity Monitor cannot clear, and the fix is to skip the graphical tools and run the Terminal uninstall script instead. That script ends the process and removes the files in the same pass, so it works even when Force Quit reports nothing to close.

Do System Extensions and Kernel Components Need Separate Removal

System extensions and kernel components do not usually need separate removal, since the installer and the Terminal script both clear them as part of the uninstall, but the process will prompt you if any were enabled during setup.

As of September 2026, GlobalProtect switches from kernel extensions to system extensions at version 5.1.4, once a Mac runs macOS Catalina 10.15.4 or later, according to Palo Alto Networks’ own documentation. Older or legacy installations may still carry a kernel extension, and the same documentation says the uninstall process removes it automatically rather than asking you to do so by hand.

Exact build numbers for when each macOS version made that switch are not specified, nor are removal differences on Big Sur, Monterey, Ventura, or Sonoma beyond the Catalina threshold. The safest approach on any current Mac is still the official installer or the Terminal script rather than a manual guess about which extension type is present.

What Happens After You Uninstall GlobalProtect

VPN access to your organization’s network ends the moment GlobalProtect is gone, and the endpoint stops being covered by whatever security policies the app enforced, so plan the removal for a time when you do not need the connection.

Do You Need to Back up Configuration Files First

Backing up configuration files before you uninstall is worth doing if you expect to reinstall GlobalProtect later, since Nektony recommends saving them in case your IT department asks you to restore a specific setup. A copy of the portal address and any custom settings takes a few minutes and saves a call to the help desk later.

Will You Need New VPN Credentials to Reinstall

New VPN credentials are sometimes required after a full removal, because some organizations treat an uninstall as a reason to reissue access, so contact your IT department before you assume your old login will still work. Reissued credentials are a policy choice made by each organization, not a technical requirement of GlobalProtect itself.

Frequently Asked Questions

Will My Password Show on Screen During the Terminal Method?

No characters appear while you type your password in Terminal, and that blank field is normal behavior for the sudo command, not a sign that anything is broken. Type the full password and press Return even though nothing seems to happen on screen.

Is It Safe to Use CleanMyMac to Remove GlobalProtect?

CleanMyMac and similar tools remove GlobalProtect’s files without a Palo Alto Networks endorsement, and MacPaw and Nektony both market them as an easier alternative. The official installer and the Terminal script remain the only vendor-tested routes, so a third-party app is a convenience trade rather than a safer choice.

Does Uninstalling GlobalProtect Leave Behind Log Files?

Log and preference files can remain after the official uninstaller finishes, according to Nektony, even though Palo Alto Networks presents its own process as complete. That disagreement matters most to anyone concerned about lingering data on the Mac rather than about whether the VPN connection itself still works.

Can I Remove GlobalProtect on an Apple Silicon Mac the Same Way?

Use the installer or Terminal method with an administrator account. Follow the same steps and watch for the same admin password prompt either way, and treat any Apple Silicon-specific warning you see elsewhere with caution until you can confirm it against Palo Alto Networks’ own documentation.

What Happens if I Reinstall GlobalProtect Later?

Reinstalling GlobalProtect after a clean removal works the same way it did the first time, though you may need a fresh VPN profile or updated credentials from your IT department if your old ones were retired during the uninstall. Keeping a backup of your original configuration file makes that second setup faster.

Most home and work Macs only need the official installer or the Terminal script to remove GlobalProtect for good, with the manual package contents route kept in reserve for the rare case where neither tool is available. Whichever method you pick, finish with an empty Trash and a restart so nothing half-removed keeps running in the background, and confirm with your IT department beforehand if the Mac belongs to an organization rather than to you personally.

References

Sources read in September 2026.

Eric Dawson

I'm Eric Dawson, and I write The Money Watch from north Columbus, Ohio. Most of what I cover comes from my own life: renting, a 2014 Honda Fit, parking, computers, food and the bills behind all of it. I spent four years in an apartment-property office and eleven on a distributor's operations desk, reading leases and invoices. Where you need real information, I research the maker's or agency's own page and independent sources and report what they publish. I don't give tax, investment, legal or medical advice.