To use the Palo Alto GlobalProtect VPN on a Mac, you need to allow the VPN to install a kernel extention (kext).