VPN Client and Extension Issue

Im not sure if you're doing the development here on the product or if you are setting up the MDM environment and testing out the installation of the product? However, regarding this error:

When I try to connect to the VPN gateway, in the VPN client logs I see: "Error (604): failed to send ipc data: system ext not connected."

Console log when streaming the console logs from taskgated-helper: com.paloaltonetworks.GlobalProtect.client: Unsatisfied entitlements: com.apple.security.application-groups Disallowing: com.paloaltonetworks.GlobalProtect.client

A couple of things could be happening here:

1. There could be a configuration issue here possibly with how the Network System Extension is setup and that's what this log is describing that the Security Group for com.paloaltonetworks.GlobalProtect.client is not setup correctly. Now, this is something that is your control and you can test out if you are the Developer.

2. If you are not the Developer of this product and you are just testing out the MDM environment then there may be a Notarization problem taking place. Did you Notarize your App before testing this out with MDM? If not, you'll want to check that our here.

3. Lastly, I always like to ask about this in these situations; if you are the Developer of this app, are you installing the Network System Extension with an actual UI container app? If you are not and you are installing this through MDM that has a daemon install the Network System Extension then that could cause issue too. If you are installing via MDM make sure that you install the container app and the container app walks the user through installing the Network System Extension. That way the System Extension is in a good state for activation and uninstallation. I have seen issues when a Network System Extension is uninstalled or updated due to it being installed from a Daemon.