Known or Addressed
PAN-OS
Bug ID
Description (Database last updated 24-04-2024)
Known
5.1
GPC-11165
When users run the GlobalProtect app for Android, the app reports a
Required Client Certificate not found
error for the first time and failed when users switched between portals configured with different client certificate profiles. The client certificate authentication is successful when users attempt to connect to the app again.
Known
5.1
GPC-10839
Safari cannot be added to the application-based split tunnel rule on macOS endpoints.
Known
5.1
GPC-10603
When the split tunnel settings based on the destination domains are configured on the GlobalProtect gateway and either Chrome or the Edge browser is used to navigate to these domains on macOS endpoints running macOS Catalina 10.15.4 or later, the
connection reset
errors appear for a few seconds before the website launches.
Known
5.1
GPC-10356
When the split tunnel settings are configured to exclude application traffic such as Microsoft Teams and Skype, some excluded traffic are still forwarded through the tunnel.
Known
5.1
GPC-9415
For the GUI version of the GlobalProtect app for Linux, SAML authentication with Microsoft Azure does not work on Ubuntu 1804 or greater versions.
Known
5.1
GPC-9353
When you upgrade Red Hat® Enterprise Linux 7 to Red Hat® Enterprise Linux 8, the operating system displays errors for missing GlobalProtect packages (qt5-qtwebkit) during the upgrade.
Known
5.1
GPC-9092
On Chromebooks with the GlobalProtect app for Android, after refreshing the configuration or disabling and re-enabling the app, GlobalProtect reports a
portal not found
error.
Workaround
: Refresh the configuration again to trigger the connection.
Known
5.1
GPC-9043
On iOS devices where you enable the user to save user credentials after supplying a trusted fingerprint, when you refresh the connection, the GlobalProtect app displays an
Authentication Failed
error.
Known
5.1
GPC-7017
When users run the GlobalProtect app for Android on their Chromebooks, the app cannot connect to GlobalProtect gateways based on the source IP address of the user because it runs within the Android container on Chrome OS. The Android container uses a network bridge to connect the app to the network, so it is assigned a different IP address from the source IP address of the Chromebook user.
Workaround
: Ensure that gateway selection for the Android operating system is not based on the source IP address of the user by leaving both the
Region
and
IP Address
fields empty in the config selection criteria for your client settings configuration (
Network
GlobalProtect
Gateways
<gateway-config>
Agent
Client Settings
<client-settings-config>
Config Selection Criteria
).
Known
5.1
GPC-6878
When users run the GlobalProtect app for Android on their Chromebooks, the app cannot connect to GlobalProtect portals using IPv6 because it runs within the Android container in Chrome OS, which does not currently support IPv6.
Workaround
: Set the
IP Address Type
for your GlobalProtect portal to
IPv4 Only
(
Network
GlobalProtect
Portals
<<portal-config>
General
).
Known
5.1
GPC-6792
The GlobalProtect app does not support portal hostnames with non-English characters.
Known
5.1
GPC-6456
When users establish a GlobalProtect connection for the first time on iPads running iOS 11.1, and they
Don’t Allow
GlobalProtect to send them notifications, the
Settings -> GlobalProtect
link on subsequent notification permission reminders does not open.
Workaround
: Upgrade your iPad to iOS 11.3 or a later version.
If you remain on iOS 11.1, you can enable GlobalProtect to send you notifications by going to the GlobalProtect notification settings on your iPad (
Settings
Notifications
GlobalProtect
) and then selecting
Allow Notifications
.
Known
5.1
GPC-4856
On macOS endpoints, the GlobalProtect app can’t detect the following
Anti-Malware
information for the HIP Match log details of the Gatekeeper security feature (
Monitor
Logs
HIP Match
<hip-match-log>
):
  • Engine Version
  • Definition Version
  • Date
  • Last Scanned
Known
5.1
PAN-109759
The firewall does not generate a notification for the GlobalProtect app when the firewall denies an unencrypted TLS session due to an authentication policy match.
Known
5.2
DEM-2048
When performing a new installation of GlobalProtect 5.2.10 or later on an M1 MacBook device that does not have Rosetta 2 installed, the Autonomous DEM agent does not get installed even though the message that GlobalProtect displays indicates that the agent installed successfully.
Workaround:
Manually install Rosetta 2 on the M1 MacBook device and then refresh the GlobalProtect connection to enable GlobalProtect to re-initiate the install of the Autonomous DEM agent.
Known
5.2
DEM-183
When you install GlobalProtect app 5.2.6 on macOS devices and the portal is configured to install the Autonomous DEM (ADEM) endpoint agent for the first time, the pop-up prompt appears, prompting end users for administrative privileges to modify system settings.
Workaround
: Select
OK
so that the pop-up prompt does not appear again.
Known
5.2
GPC-14532
GlobalProtect users on Windows devices are unable to log in to the device using the User Principal Name (UPN)- for example,
username@domain
- when the GlobalProtect credential provider is selected and the device is offline.
Known
5.2
GPC-14528
On macOS endpoints, the HIP check incorrectly identifies the Symantec Endpoint Protection as version 99.0.1.0000 instead of version 14.3RU2, causing the device to fail the HIP check .
Known
5.2
GPC-14428
After upgrading the GlobalProtect app for macOS, system extensions may not be automatically enabled at times, preventing access to applications (for example, excluding Zoom traffic from the GlobalProtect tunnel). An Apple Feedback case (FB974069) has been filed to track this limitation with the Apple system/network extension SDK.
Workaround:
To re-enable the system extensions after upgrading the GlobalProtect app for macOS, reboot the system.
Known
5.2
GPC-14375
The GlobalProtect app is unable to detect Jamf version 10.32.2 in the HIP check , causing the endpoints to fail the check.
Known
5.2
GPC-14334
When the GlobalProtect app was installed on Linux devices, the users were unable to logon to the app due to authentication failure in the gateway pre-login stage.
Known
5.2
GPC-14104
In a Split DNS configuration, if you have configured the GlobalProtect app
Split-Tunnel Option
to send
Both Network Traffic and DNS
in the dynamic app configuration on the portal, after upgrading to GlobalProtect app version 5.2.8 there is an issue where DNS queries are being sent out on both the virtual adapter and the physical adapter.
Known
5.2
GPC-13870
On ARM-based MacBooks running macOS M1, after upgrading to agent version 5.2.8 the GlobalProtect app was unable to detect HIP information for
Anti-Malware
,
Disk Backup
,
Disk Encryption
,
Firewall
, and
Patch Management
.
Known
5.2
GPC-13855
On macOS endpoints the GlobalProtect app is unable to detect Jamf version 10.31.0 in the HIP check , causing the endpoints to fail the HIP check.
Known
5.2
GPC-13009
When you upgrade GlobalProtect app 5.2.5 to GlobalProtect app 5.2.5-c84, the error message
Unable to install because a newer version of this product is already installed
displays on the app.
Workaround
: When upgrading from GlobalProtect app 5.2.5 to GlobalProtect app 5.2.5-c84, use either the transparent software upgrade or prompt users when a new version is activated. If you are using the Windows Installer (Msiexec), you must unintall GlobalProtect app 5.2.5 and install GlobalProtect app 5.2.5-c84.
Known
5.2
GPC-12107
On macOS endpoints running macOS Big Sur, the
Host Profile
displayed the
OS
in the HIP report as Mac OS X 10.16 instead of 11.0.1.
Known
5.2
GPC-11730
The default system browser for SAML authentication does not work on 32-bit versions of Window devices.
Known
5.2
GPC-11479
The GlobalProtect app took more than two minutes to establish a connection when users installed the app for the first time on macOS endpoints running macOS Catalina 10.15.4 or later.
Workaround:
The administrator must select the
GlobalProtect System Extensions
check box during the installation.
Known
5.2
GPC-11347
After GlobalProtect was installed on a Windows device and a connection was established, high CPU usage (around 30 percent) was detected for the system process.
Known
5.2
GPC-11316
The GlobalProtect filter driver on Windows hangs in
STOP_PENDING
state when users switched between the portals enabled and disabled for Enforce GlobalProtect Connections with FQDN Exclusions .
Workaround
: Users must restart the GlobalProtect service by logging out of the system, logging in to the system, or rebooting the system.
Known
5.2
GPC-10995
When Firefox is used as the default system browser , the
Open GlobalProtect System
dialog does not appear and the GlobalProtect app fails to launch when clicking
Click here to launch GlobalProtect
on Firefox. The app continues to stay in the connecting state.
Workaround
: Launch the app and refresh the connection. Firefox opens a new tab when authentication is completed and GlobalProtect is connected.
Known
5.2
GPC-10839
Safari cannot be added to the application-based split tunnel rule on macOS endpoints.
Known
5.2
GPC-10557
Users cannot install the GlobalProtect app on Linux devices with Ubuntu 20.04 LTS.
Workaround
: Install the GlobalProtect app on Linux devices using the
dpkg
utility of the Debian package along with the
apt-get
utility.
To install the GlobalPtotect app CLI, use
$ sudo dpkg -i <gp-app-pkg>
. For example:
$ sudo dpkg -i GlobalProtect_deb-5.3.3.0-3.deb
.
Known
5.2
GPC-10603
When the split tunnel settings based on the destination domains are configured on the GlobalProtect gateway and either Chrome or the Edge browser is used to navigate to these domains on macOS endpoints running macOS Catalina 10.15.4 or later, the
connection reset
errors appear for a few seconds before the website launches.
Known
5.2
GPC-10613
When you change the
Use Default Browser for SAML Authentication
option from
Yes
to
No
and then end users sign out of the GlobalProtect app, the app opens a new tab on the default system browser instead of the embedded browser.
Workaround
: Users must refresh the connection, disable or enable the GlobalProtect app, or disconnect the app to open the embedded browser for SAML authentication and connect to GlobalProtect.
Known
5.2
GPC-6792
The GlobalProtect app does not support portal names with non-English characters.
Known
5.2
GPC-4856
On macOS endpoints, the GlobalProtect app can’t detect the following
Anti-Malware
information for the HIP match log details of the Gatekeeper security feature (
Monitor
Logs
HIP Match
<hip-match-log>
):
  • Engine Version
  • Definition Version
  • Date
  • Last Scanned
Known
5.2
PAN-109759
The firewall does not generate a notification for the GlobalProtect app when the firewall denies an unencrypted TLS session due to an authentication policy match.
Known
5.3
PAN-176407
When you install the CLI version of the GlobalProtect app 5.3.1 on Ubuntu Linux devices, the warning message
Warning: gpa.service changed on disk. Run ‘systemctl --user daemon-reload’ to reload units.
displays on the terminal.
Known
5.3
GPC-14334
When the GlobalProtect app was installed on Linux devices, the users were unable to logon to the app due to authentication failure in the gateway pre-login stage.
Known
5.3
GPC-13410
When end users use the GUI version of the GlobalProtect app on Red Hat Enterprise Linux 8.4 Linux devices and they launch the app, sign in, and try to lock or sign out from the RHEL 8 client system, the GlobalProtect system tray icon is missing from the taskbar.
Workarounds
:
  • Lock the screen and unlock with password.
  • Logout and login again.
  • Restart the device.
  • Power cycle to reboot the system.
Known
5.3
GPC-13400
On Red Hat Enterprise Linux 8.4 Linux devices, when the extended display is set as the left monitor, the GlobalProtect system tray icon and the GUI version of the GlobalProtect app are not displayed on the same monitor.
Known
5.3
GPC-13396
If you did not add or modify the pre-deployment settings correctly to the pre-deployment configuration file (
pangps.xml
) for the Linux devices, you might have issues to unistall the GlobalProtect app.
Known
5.3
GPC-13391
When you uninstall the GlobalProtect app 5.2.5 and install 5.3.0 on Linux devices, the version of the GlobalProtect is not displayed correctly on the
About GlobalProtect
window.
Workaround
: End users must reboot and log out of their device.
Known
5.3
GPC-13390
When you attempt to establish a connection with the portal on Linux devices, the portal is down or unreachable. The GlobalProtect app continues to stay in connecting state.
Known
5.3
GPC-13327
After end users can successfully authenticate with the Identity Provider (IdP) on Linux devices using Chrome or any Chromium-based browser, the callback window sometimes does not automatically appear.
Known
5.3
GPC-10557
Users cannot install the GlobalProtect app on Linux devices with Ubuntu 20.04 LTS.
Workaround
: Install the GlobalProtect app on Linux devices using the
dpkg
utility of the Debian package along with the
apt-get
utility.
To install the GlobalPtotect app CLI, use
$ sudo dpkg -i <gp-app-pkg>
. For example:
$ sudo dpkg -i GlobalProtect_deb-5.3.3.0-3.deb
.
Known
6.0
GPC-18964
The GlobalProtect tunnel disconnects after 10 minutes on app versions 6.0.8 and 6.2.1, when SAML authentication is used and the GlobalProtect app is running on macOS devices.
Known
6.0
GPC-18467
In 6.0.8, when SAML authenticates a user that is not in the allow list, authentication fails. However, the SAML assertion is still used for subsequent authentication.
Known
6.0
GPC-17226
After upgrade to GlobalProtect app version 6.0.5, macOS Ventura users are unable to refresh the connection when connected to an external gateway because the refresh menu disappears when the user hovers over it.
Known
6.0
GPC-17099
Fixed in GlobalProtect app 6.0.5-c35 and GlobalProtect app 6.0.7
When the GlobalProtect app for Windows is upgraded to GlobalProtect app version 6.0.5, devices with Driver Verifier enabled and configured to monitor the PAN virtual adapter driver (pangpd.sys) display the
DRIVER_VERIFIER_DETECTED_VIOLATION
Blue Screen error.
Known
6.0
GPC-15088
When the GlobalProtect app is installed on Android devices, the GlobalProtect notification is persistent and continues to stay on the screen even when the app is closed. This issue is not applicable for Android devices with Android 13 and later version.
Fixed the issue where the GlobalProtect notification displayed on the screen was unresponsive and this is listed under the Addressed Issues section.
Known
6.0
GPC-14820
If you change the setting for
Connect with SSL Only
in the portal configuration , when the user views the Preferences in the GlobalProtect app, the Connect with SSL setting retains the previous setting.
Known
6.0
GPC-14819
The first time end users connect using the GlobalProtect 6.0 app they may see an authentication failed message if their SSO credentials are different from the credentials they used to log in to their computer.
Known
6.0
GPC-14705
On macOS endpoints, when connected to an internal gateway the endpoint may not send a HIP report or receive HIP notifications, and the HIP reports are not available on the Host Information Profile tab in the app.
Known
6.0
GPC-14640
In pre-logon deployments , the GlobalProtect enforcer remains enabled even after disabling GlobalProtect.
Known
6.0
GPC-14578
After connecting to GlobalProtect using Connect Before Logon (CBL) with SAML authentication, the GlobalProtect app keeps opening and closing after the user logs in.
Known
6.0
GPC-14453
In some cases, TCP Option lookup for IP fragmented TCP packets can cause the endpoint to lose access to internal resources.
Known
6.0
GPC-14329
macOS devices are able to bypass the GlobalProtect tunnel using the physical adapter even when
No direct access to local network
is enabled .
Known
6.0
GPC-14063
In cases where the GlobalProtect gateway does not push a DNS suffix to the endpoint, the endpoint incorrectly pushes the DNS suffix from the physical adapter to the virtual adapter.
Known
6.0
GPC-13998
When connected to GlobalProtect with
Resolve All FQDNs Using DNS Servers Assigned by the Tunnel (Windows Only)
set to
Yes
in the App Configurations area of the GlobalProtect portal configuration, performance is slow in the Windows Active Directory Users and Computers console.
Workaround:
Set
Resolve All FQDNs Using DNS Servers Assigned by the Tunnel (Windows Only)
to
No
.
Known
6.0
GPC-13970
DNS queries for excluded domains are sent out on both the GlobalProtect app virtual adapter and the device's physical adapter when the
Split-Tunnel Option
is set to
Both Network Traffic and DNS
in the App Configurations area of the GlobalProtect portal configuration.
Known
6.0
GPC-13774
In some cases the GlobalProtect tunnel cannot send traffic after the system wakes up from sleep mode.
Known
6.0
GPC-13757
In a configuration where the
Welcome Page
is set to
None
and
Have User Accept Terms Of Use before Creating Tunnel
is set to
Yes
, the endpoint gets stuck in the connecting state.
Workaround:
Enable the Welcome Page or set
Have User Accept Terms Of Use before Creating Tunnel
to
No
.
Known
6.0
GPC-13575
When the user is prompted to select a certificate to use to connect to GlobalProtect, if the user instead clicks Cancel without selecting a client certificate the app shows the
no network connectivity
error message.
Known
6.0
GPC-13106
If the end user sets a preferred gateway in the GlobalProtect app and the administrator later disables the manual gateway option in the portal configuration, the app will still display the option to set a gateway as preferred after the end user refreshes the connection even though manual gateway selection is no longer an available option.
Known
6.0
GPC-16597
The GlobalProtect app stops working when the app is upgraded from version 5.2.8 to 6.0.3.
Known
6.0
GPC-10557
Users cannot install the GlobalProtect app on Linux devices with Ubuntu 20.04 LTS.
Workaround
: Install the GlobalProtect app on Linux devices using the
dpkg
utility of the Debian package along with the
apt-get
utility.
To install the GlobalPtotect app CLI, use
$ sudo dpkg -i <gp-app-pkg>
. For example:
$ sudo dpkg -i GlobalProtect_deb-5.3.3.0-3.deb
.
Known
6.1
GPC-19499
On Linux endpoints, the Firefox browser stops working when you try to connect the GlobalProtect app with the SAML default browser.
Known
6.1
GPC-17099
When the GlobalProtect app for Windows is upgraded to version 6.1.1, devices with Driver Verifier enabled and configured to monitor the PAN virtual adapter driver (pangpd.sys) display the DRIVER_VERIFIER_DETECTED_VIOLATION Blue Screen error.
Known
6.1
GPC-15969
On Windows endpoints, the GlobalProtect app sometimes fails to send the Diagnostic report when the end user uses the option to Report an Issue . The Troubleshooting logs are sent successfully.
Known
6.1
GPC-16570
When using the embedded browser for SAML authentication with the GlobalProtect app for Linux while installed on operating systems using OpenSSL 3 as the system version and using a portal or gateway running PAN-OS 10.2 or earlier versions, authentication does not work as expected.
Workaround:
Use the default system browser for SAML authentication.
Known
6.2
GPC-19339
When the GlobalProtect app is upgraded from version 6.1.4-c1 to 6.2.0-c4 on Linux devices, the GlobalProtect web interface displays the upgraded version only after a system reboot.
Known
6.2
GPC-19180
When the GlobalProtect app is installed on Linux devices and the app is upgraded or downgraded, the GlobalProtect web interface and the command-line interface display the new version only after a system reboot.
Known
6.2
The GlobalProtect tunnel disconnects after 10 minutes on app versions 6.0.8 and 6.2.1, when SAML authentication is used and the GlobalProtect app is running on macOS devices.
Known
6.2
GPC-18025
In 6.2.1, after a refresh connection, the HIP patch exclusion isn't visible on the GlobalProtect UI. However, the HIP patch exclusion logs are visible on the
Pangphip.log
file.
Known
6.2
GPC-17820
Firefox is not supported for proxied traffic in Tunnel and Proxy mode or proxy mode .
Known
6.2
GPC-17816
After entering CIE SAML authentication credentials to refresh an expired explicit proxy token or cookie when connected in Tunnel and Proxy mode or proxy mode , the GlobalProtect app gets stuck while retrieving the portal configuration.
Workaround:
Refresh the GlobalProtect connection or disconnect and reconnect the GlobalProtect app.
Known
6.2
GPC-17727
When the GlobalProtect app is connected in Tunnel and Proxy mode or proxy mode , SSH traffic cannot be sent over the proxy.
Known
6.2
GPC-17513
When GlobalProtect is configured in Tunnel and Proxy mode or proxy mode , if the admin-defined PAC file has an HTTP URL, the GlobalProtect app will not download the PAC content.
Known
6.2
GPC-17447
When the GlobalProtect app is configured in Tunnel and Proxy mode , SSL VPN establishment over the proxy doesn't work.
Known
6.2
GPC-17663
In Tunnel and Proxy mode , the GlobalProtect agent tunnel does not work seamlessly when the GlobalProtect app and the third-party VPN are configured to use overlapping IP subnets.
Workaround:
Use GlobalProtect in proxy mode for better compatibility with third-party VPNs.
Known
6.2
GPC-17555
In Tunnel and Proxy mode , the GlobalProtect agent tunnel on macOS does not coexist well with Cisco Anyconnect VPN due to an IP forwarding table issue.
Workaround:
Use GlobalProtect in proxy mode for better compatibility with third-party VPNs.
Known
6.2
GPC-17854
The GlobalProtect app does not prompt the users to extend the login lifetime user session when the device woke up from sleep or hibernation mode.
Addressed
5.1.11
GPC-15068
A fix was made to address an OpenSSL infinite loop vulnerability in GlobalProtect app software ( CVE-2022-0778 ).
Addressed
5.1.9
GPC-12603
Fixed an issue where users were able to successfully use SAML to authenticate and establish a connection to Prisma Access but failed to connect to a manually selected Prisma Access gateway.
Addressed
5.1.8
GPC-12353
Fixed an issue where, when the GlobalProtect app was installed on macOS devices running Big Sur, the app was unable to establish a connection when the Netskope Client was installed on the system.
Addressed
5.1.8
GPC-12266
Fixed an issue where, when the GlobalProtect app was installed on Windows devices, the app was disconnected from the tunnel and performed a network discovery after waking up from Modern Standby mode.
Addressed
5.1.8
GPC-12243
Fixed an issue where, when the gateway was manually selected for the first time instead of the Best Available gateway, any subsequent connections to the Best Available gateway allowed end users to connect to the manually selected gateway rather than the Best Available gateway.
Addressed
5.1.8
GPC-12202
Fixed an issue where the
Custom Password Expiration Message (LDAP Authentication Only)
notification displayed grammatical errors when the system language was German.
Addressed
5.1.8
GPC-12174
Fixed an issue where, when the GlobalProtect app was installed on macOS devices running macOS 10.15 or 11.0, the GlobalProtect HIP check did not detect the CrowdStrike Falcon application, which caused the device to fail the HIP check.
Addressed
5.1.8
GPC-12105
Fixed an issue where, when the GlobalProtect app was installed on macOS devices and split tunnel was configured based on the application, some traffic did not follow the split tunnel configuration on applications such as Microsoft Teams.
Addressed
5.1.8
GPC-12104
Fixed an issue where the GlobalProtect client on the end user’s endpoint did not connect to the Best Available gateway after the endpoint woke up from sleep mode. This issue occurred when SAML authentication was used and in the auto-scaled gateway scenario. With this fix, the GlobalProtect client can also connect to the Best Available gateway in the auto-scaled gateway scenario.
Addressed
5.1.8
GPC-12050
Fixed an issue where the GlobalProtect HIP check did not correctly detect the
Last Full Scan Time
information for the Windows Defender on Windows endpoints, which caused the endpoints to fail the HIP check.
Addressed
5.1.8
GPC-12043
Fixed an issue where, when the GlobalProtect app was installed on Windows devices and used a smart card for client certificate authentication, the number of prompts used between the portals were different.
Addressed
5.1.8
GPC-12004
Fixed an issue where the GlobalProtect HIP check incorrectly detected the
Anti-Malware
information for the
Definition Version
for Cisco Advanced Malware Protection (AMP).
Addressed
5.1.8
GPC-11995
Fixed an issue where the GlobalProtect HIP check incorrectly detected the
Anti-Malware
information for the
Definition Version
for Sophos Endpoint Protection version 10.0.0.
Addressed
5.1.8
GPC-11932
Fixed an issue where the GlobalProtect HIP check incorrectly detected the
Anti-Malware
information for the
Last Full Scan Time
for the McAfee Total Protection Antivirus software application.
Addressed
5.1.8
GPC-11911
Fixed an issue where, when the GlobalProtect app was installed on Windows devices, the
Custom Password Expiration Message (LDAP Authentication Only)
notification is blank after you changed the message setting.
Addressed
5.1.8
GPC-11876
Fixed an issue where, when the GlobalProtect app was installed on Windows devices, the command string for
pre-vpn-connect
or
post-vpn-connect
contained arguments with one or more whitespace characters, which caused the built-in GlobalProtect app upgrade to fail.
Addressed
5.1.8
GPC-11875
Fixed an issue where, when the GlobalProtect app was installed on macOS devices running macOS Catalina 10.15.7, the GlobalProtect HIP check did not detect the
Anti-Malware
information for the
Last Full Scan Time
for the McAfee Total Protection Antivirus software application version 4.9.2, which caused the device to fail the HIP check.
Addressed
5.1.8
GPC-11865
Fixed an issue where the
GlobalProtect Update
pop-up dialog displayed grammatical errors.
Addressed
5.1.8
GPC-11819
Fixed an issue where the GlobalProtect app could not properly exclude multicast routes specified in the exclude list.
Addressed
5.1.8
GPC-11784
Fixed an issue where the GlobalProtect app was configured with
Pre-logon then On-demand
mode and if the network was changed or the network connection was lost during pre-logon tunnel mode, the pre-logon tunnel was not able to reconnect to the app after the machine was connected to the network.
Addressed
5.1.8
GPC-11749
Fixed an issue where, when the GlobalProtect app was installed on Linux devices, DNS resolution failed when the app was connected on Ubuntu 20.04.
Addressed
5.1.8
GPC-11686
Fixed an issue where the HIP report did not contain the correct
Last Full Scan Time
information for the AVG Internet Security software.
Addressed
5.1.8
GPC-11648
Fixed an issue where, when the GlobalProtect app was installed on macOS devices, the GlobalProtect HIP check did not detect the
Patch-Management
software for the JAMF Pro software application, which caused the device to fail the HIP check.
Addressed
5.1.8
GPC-11606
Fixed an issue where, when the GlobalProtect app was installed on Windows devices, the GlobalProtect HIP check did not detect the Avast Antivirus software version 20.x. After upgrading from Antivirus software version 18.x, the GlobalProtect HIP check did detect the Avast Antivirus software version 20.x.
Addressed
5.1.8
GPC-11460
Fixed an issue where, when the GlobalProtect app was installed on Windows devices, the GlobalProtect HIP check did not detect the
Anti-Malware
information for the
Last Full Scan Time
for the McAfee Total Protection Antivirus software.
Addressed
5.1.8
GPC-11367
Fixed an issue where the GlobalProtect HIP check incorrectly detected the
Anti-Malware
information for the
Definition Version
for Cybereason.
Addressed
5.1.7
GPC-11868
Fixed a rare issue where the PanGPS log file was not rotated and it caused the PanGPS.log file to consume a large amount of disk space.
Addressed
5.1.7
GPC-11797
Fixed an issue where, when the GlobalProtect app was installed on macOS Big Sur devices and split tunnel was configured based on the application, the app was unable to connect to applications such as Zoom.
Addressed
5.1.7
GPC-11781
Fixed an issue where, when the GlobalProtect app was installed on Windows devices, the app was disconnected from the tunnel after the
Pre-logon Tunnel Rename Timeout
expired even when users successfully authenticated to the gateway through either SAML authentication or RADIUS for two-factor authentication.
Addressed
5.1.7
GPC-11723
Fixed an issue where, after you installed the GlobalProtect app on macOS devices using the client upgrade prompt, a kernel panic occurred on the macOS device.
Addressed
5.1.7
GPC-11706
Fixed an issue where, when the GlobalProtect app was installed on Windows devices, the GlobalProtect tunnel could not send traffic after the system woke up from sleep mode.
Addressed
5.1.7
GPC-11683
Fixed an issue where, when the GlobalProtect app was installed on macOS devices, the GlobalProtect virtual interface was locally unreachable.
Addressed
5.1.7
GPC-11660
Fixed an issue on the GlobalProtect agent when the response from the gateway pre-login included the error status and an empty message, but the GlobalProtect client was not expected to receive the response from the pre-login with the error status and an empty message. With this fix, the GlobalProtect client is configured to handle the error status and the empty message response from the gateway pre-login when the minimum version is set to TLSv1.2 in the SSL/TLS service profile.
Addressed
5.1.7
GPC-11656
Fixed an issue where, after you upgraded the GlobalProtect app to release 5.2.1 or release 5.2.2 on macOS devices using the client upgrade prompt, a kernel panic occurred on the macOS device.
Addressed
5.1.7
GPC-11649
Fixed an issue where the GlobalProtect HIP check did not detect Symantec Endpoint Protection 14.3 real-time protection, which caused the device to fail the HIP check.
Addressed
5.1.7
GPC-11644
Fixed an issue where the HIP report did not contain the correct
Last Full Scan Time
information for the AVG Internet Security software.
Addressed
5.1.7
GPC-11638
Fixed an issue where, when the GlobalProtect app was installed on Windows 10 devices and network connectivity was enabled in Modern Standby, the tunnel failed to be restored after waking up from sleep mode.
Addressed
5.1.7
GPC-11637
Fixed an issue where, when the GlobalProtect app was installed on Linux devices, the GUI version of GlobalProtect sometimes was unresponsive (for example, when the GNOME Shell was replaced).
Addressed
5.1.7
GPC-11616
Fixed an issue where, when the GlobalProtect app was installed on macOS devices, the GlobalProtect HIP check did not detect
Anti-Malware
information for Sophos Endpoint Protection version 10.0.0.
Addressed
5.1.7
GPC-11612
Fixed an issue where, when the GlobalProtect app was installed on Windows devices, the speed limit of the GlobalProtect adapter was set to a maximum of 100Mbps, With this fix, the speed limit of the GlobalProtect adapter is now set to a maximum of 2Gbps.
Addressed
5.1.7
GPC-11594
Fixed an issue where, when the GlobalProtect app was installed on Linux devices, the GUI version of GlobalProtect hangs when multiple terminals were launched (in a multi-user target) or when one terminal had to be launched for the GUI version to launch.
Addressed
5.1.7
GPC-11569
Fixed an issue on Windows endpoints where, if the GlobalProtect app is configured with the Pre-logon (Always On) Connect Method with the
Pre-logon Tunnel Rename Timeout
value set to
-1
(or any other value) and users disable the app and reboot their endpoint, the pre-logon tunnel is up after they login. After the system reboots, the app is disabled but the virtual interface is enabled. With this fix, the app and the virtual interface are disabled after a system reboot.
Addressed
5.1.7
GPC-11525
Fixed an issue where the GlobalProtect app failed to connect to the portal or gateway in the Prisma Access network through the proxy.
Addressed
5.1.7
GPC-11489
Fixed an issue where the GlobalProtect HIP check did not detect
Patch Management
information for the Microsoft Intune management extension software.
Addressed
5.1.7
GPC-11478
Fixed an issue where, when the GlobalProtect app was installed on macOS devices and the
No direct access to local network
option was enabled on the gateway, the access route to the default gateway was not properly masked.
Addressed
5.1.7
GPC-11461
Fixed an issue where, after you upgraded and installed the GlobalProtect app, the app was unable to connect to the gateway due to the
Failed to get default route entry
error message.
Addressed
5.1.7
GPC-11448
Fixed an issue where the GlobalProtect app was unable to establish a connection to the gateway because the fully qualified domain name (FQDN) specified for the gateway mapped to a different IP address during network discovery and pre-login. With this fix, the app performed a network discovery again and connected to the
Best Available
gateway.
Addressed
5.1.7
GPC-11395
Fixed an issue where, when the GlobalProtect app was installed on macOS devices running macOS Catalina 10.15.4, the GlobalProtect HIP check did not detect Symantec Endpoint Protection 14.3 real-time protection, which caused the device to fail the HIP check.
Addressed
5.1.7
GPC-11393
Fixed an issue where, when the GlobalProtect app was installed on Windows devices, the app performed a second network discovery after gateway authentication was successful. This issue resulted in two authentication prompts (for example, the SAML authentication type) right after waking up from sleep mode.
Addressed
5.1.7
GPC-11370
Fixed an issue where the GlobalProtect app selected the geographically distant gateway instead of the gateway with the faster response time. With this fix, the
Best Available
gateway is now determined by the assigned weight of the gateway.
Addressed
5.1.7
GPC-11349
Fixed an issue where the GlobalProtect HIP check incorrectly detected the
Anti-Malware
information for the
Engine Version
,
Definition Version
, and
Date
for the CrowdStrike Falcon application.
Addressed
5.1.7
GPC-11346
Fixed an issue where portal authentication failed due to the authentication failure during the
GlobalProtect App Config Refresh
configuration, which caused users to be locked out of the RSA device.
Addressed
5.1.7
GPC-11218
Fixed an issue where the GlobalProtect HIP check did not detect Symantec Endpoint Protection 14.3 real-time protection, which caused the device to fail the HIP check.
Addressed
5.1.7
GPC-11173
Fixed an issue where the GlobalProtect app was configured with
On-Demand
mode and continued to stay in connecting state even when manually switching to a different gateway failed. With this fix, the app will now display an error message when switching to a different gateway failed.
Addressed
5.1.7
GPC-10954
Fixed an issue in GlobalProtect for macOS endpoints where installing or upgrading the package using a MDM system such as JAMF Pro resulted in a GlobalProtect app initialization failure.
Addressed
5.1.7
GPC-10934
Fixed an issue where the original DNS suffixes were removed from the client machine and only the DNS suffixes from the gateway were applied.
Addressed
5.1.7
GPC-10831
Fixed an issue where, when the GlobalProtect app was installed on Windows devices, the GlobalProtect service modified the DNS suffix system list even when the gateway pushed an empty DNS suffix list.
Addressed
5.1.7
GPC-9912
Fixed an issue where, when the GlobalProtect app was installed on Windows devices and the pre-logon connect method was configured, client certificate authentication failed when the machine certificate either did not contain a Common Name (CN) or
Extended Key Usage OID
value. This issue resulted in pre-logon tunnel failure.
Addressed
5.1.6
GPC-11538
Fixed an issue where, when the GlobalProtect app was installed on macOS devices running macOS Catalina, the GlobalProtect service restarted after a system reboot or when users logged out and logged in to the endpoint.
Addressed
5.1.6
GPC-11527
Fixed an issue where, when the GlobalProtect app was installed on Windows endpoints and split tunnel was configured based on the application, handle leaks were observed by the GlobalProtect service.
Addressed
5.1.6
GPC-11466
Fixed an issue on Windows 10 endpoints where the Active Directory Users and Computers (ADUC) application experienced high latency when users established a GlobalProtect connection.
Addressed
5.1.6
GPC-11452
Fixed an issue where when the GlobalProtect app was enabled to
Collect HIP Data
in the GlobalProtect portal agent configuration, the GlobalProtect HIP process activated the subprocess (PanGpHipMp.exe) even when the
Patch Management
category was excluded.
Addressed
5.1.6
GPC-11402
Fixed an issue where, when the GlobalProtect app was installed on Windows endpoints, the app was disconnected from the VPN tunnel after the pre-logon tunnel grace period expired even when users logged in to the endpoint and the pre-logon tunnel was successfully renamed. This issue occurred when two-factor authentication (2FA) was used.
Addressed
5.1.6
GPC-11392
Fixed an issue where when the GlobalProtect app was installed on macOS devices, the network extensions were not loaded successfully after a system reboot.
Addressed
5.1.6
GPC-11365
Fixed an issue where, when the GlobalProtect app was installed on Linux, the GlobalProtect client hangs after the session timed out.
Addressed
5.1.6
GPC-11269
Fixed an issue where, when the GlobalProtect app was installed on macOS devices running macOS Catalina, the app was unable to establish a pre-logon tunnel.
Addressed
5.1.6
GPC-11268
Fixed an issue where, when the GlobalProtect app was installed on Windows endpoints, the pan_gp_event.log file displayed the date in a different format when compared to the GlobalProtect agent and GlobalProtect service logs.
Addressed
5.1.6
GPC-11257
Fixed an issue where the GlobalProtect app failed to connect to the portal or gateway in the Prisma Access network when the client machine was connected only to the IPv6 network.
Addressed
5.1.6
GPC-11233
Fixed an issue where the GlobalProtect app failed to connect to the portal when the client machine was behind the proxy and the DNS server was not able to resolve the fully qualified domain name (FQDN) of the portal.
Addressed
5.1.6
GPC-11183
Fixed an issue where the GlobalProtect HIP check did not detect real-time protection for Traps version 4.2.2.
Addressed
5.1.6
GPC-11175
Fixed an issue where the GlobalProtect driver caused the Blue Screen of Death errors on Windows endpoints when the third-party antivirus software was installed on the system.
Addressed
5.1.6
GPC-11134
Fixed an issue where the GlobalProtect app did not prevent users from dismissing the welcome page even when the
Allow User to Dismiss Welcome Page
option was set to
No
.
Addressed
5.1.6
GPC-11090
Fixed an issue where, when the GlobalProtect app was installed on Linux, users were not able to authenticate through SAML authentication when Microsoft Azure was used as the identity provider (ldP).
Addressed
5.1.6
GPC-11074
Fixed an issue where, when the GlobalProtect app was installed on Windows endpoints, the HIP report did not contain
Anti-Malware
information for the CrowdStrike Falcon application.
Addressed
5.1.6
GPC-10681
Fixed an issue where the GlobalProtect HIP check did not detect the status as “enabled” in the
Firewall
setting for the F-Secure Client Security software.
Addressed
5.1.6
GPC-11050
Fixed an issue where the GlobalProtect app tried to establish a connection without a user initiated connection even when the connect method was set to
Pre-logon then On-demand
.
Addressed
5.1.6
GPC-11038
Fixed an issue where, when the GlobalProtect app was installed on Linux, the domain name of the Linux device was not displayed in the
Domain
field of the HIP report.
Addressed
5.1.6
GPC-11037
Fixed an issue where, when the GlobalProtect app was installed on macOS endpoints and running the Blackberry Workspaces app, the GlobalProtect app stopped running.
Addressed
5.1.6
GPC-10980
Fixed an issue where the GlobalProtect app sometimes displayed the notifications in the system tray even when the
Show System Tray Notifications
option was set to
No
.
Addressed
5.1.6
GPC-10963
Fixed an issue where split tunnel rules based on destination domain was applied to Windows and macOS endpoints even with an invalid GlobalProtect license.
Addressed
5.1.6
GPC-10960
Fixed an issue where, when the GlobalProtect app was installed on Windows 10 endpoints and when users initiated the pre-logon connection, the
GlobalProtect Connect
button did not display in the Windows logon screen.
Addressed
5.1.6
GPC-10899
Fixed an issue where the GlobalProtect app was not able to establish a tunnel because the third-party software delayed enabling the virtual adapter used by GlobalProtect.
Addressed
5.1.6
GPC-10454
Fixed an issue where, when the GlobalProtect app was installed on macOS endpoints, the HIP report included
Disk Backup
information that contained invalid characters in the
version
attribute for the MEGAsync application.
Addressed
5.1.6
GPC-9982
Fixed an issue, when the GlobalProtect app was installed on macOS endpoints running macOS Catalina 10.15 or later and HIP checks were enabled, the macOS endpoint displayed additional pop-ups to the user when GlobalProtect requested to access your Desktop, Documents, and Downloads folders.
Addressed
5.1.5
GPC-11148
Fixed an issue where, when the GlobalProtect app was installed on Android endpoints, client certificate authentication failed even when a valid client certificate was present.
Addressed
5.1.5
GPC-11101
Fixed an issue where, when the GlobalProtect app was installed on macOS devices running macOS Catalina 10.15.4 or later and split tunnel was configured based on the application, file handle leaks were detected after a few weeks of usage.
Addressed
5.1.5
GPC-11062
Fixed an issue where, when the GlobalProtect app was installed on Linux, connection to the portal went through the proxy server even when the portal address was included in the no proxy list.
Addressed
5.1.5
GPC-11049
Fixed a rare issue where the PanGPS log file was not rotated and it caused the PanGPS.log file to consume a large amount of disk space.
Addressed
5.1.5
GPC-11003
Fixed an issue where, when the
No direct access to local network
option was enabled for split tunnel traffic on macOS Catalina 10.15.4 endpoints, some local network traffic leaked through the physical interface.
Addressed
5.1.5
GPC-10969
Fixed an issue where, when the HIP report incorrectly displayed the
Real-Time Protection
status of the
Heimdal Thor Agent Anti-Malware
as
no
instead of
yes
.
Addressed
5.1.5
GPC-10955
Fixed an issue where the HIP report incorrectly displayed the
Real-Time Protection
status of the ESET Antivirus as
no
instead of
yes
.
Addressed
5.1.5
GPC-10952
Fixed an issue where the GlobalProtect app was not able to authenticate to the internal gateway even when the FQDN specified in the
DHCP Option 43 Code
and associated IP address were resolved correctly.
Addressed
5.1.5
GPC-10933
Fixed an issue where the GlobapProtect app included a default route with a metric that was less than the system default route when split tunnel based on the destination domain was configured as inclusions. This issue caused traffic to leak through the tunnel.
Addressed
5.1.5
GPC-10921
Fixed an issue where, when the GlobalProtect app was installed on Windows and connected to the gateway that had split tunnel configured based on the domain and application, traffic sent through the tunnel stopped for a few minutes even when GlobalProtect was still connected.
Addressed
5.1.5
GPC-10919
Fixed an issue where, when data was not exchanged between the GlobalProtect service and GlobalProtect agent for more than 2 hours because the TCP connection was not validated and blocked. This issue caused GlobalProtect to fail.
Addressed
5.1.5
GPC-10890
Fixed an issue where the
Kaspersky Endpoint Security Virus Definition Date
in the GlobalProtect HIP report did not match the actual date of the definition in the antivirus software.
Addressed
5.1.5
GPC-10886
Fixed an issue where the GlobalProtect app failed to retrieve the client configuration that was defined in the portal using the configuration selection criteria when the Common Name (CN) of the certificate contained special characters.
Addressed
5.1.5
GPC-10879
Fixed an issue where, when the GlobalProtect app was installed on macOS devices running macOS Catalina 10.15.4, the app was unable to connect to the gateway after a reboot of the GlobalProtect client.
Addressed
5.1.5
GPC-10864
Fixed an issue where the GlobalProtect app in pre-logon mode tried to connect to the portal every five seconds when the pre-logon cookie authentication expired. With this fix, the app does not retry the connection to the portal until after 30 minutes.
Addressed
5.1.5
GPC-10820
Fixed an issue where the GlobalProtect client failed to refresh the portal configuration after 1 hour even though the
refresh-config-interval
value was set to 1 hour. This issue occurred when the user tunnel was established after pre-logon with the
Pre-Logon-Tunnel-Rename-Timeout
value was set to 0.
Addressed
5.1.5
GPC-10763
Fixed an issue where, when the GlobalProtect app was installed on Windows, the app did not connect to the preferred gateway after a system reboot.
Addressed
5.1.5
GPC-10752
Fixed an issue where, when the GlobalProtect app was installed on Windows, the app retained the tunnel after switching Windows users even when the
GlobalProtect Tunnel Preservation on User Logout
value was set to 0.
Addressed
5.1.5
GPC-10497
Fixed an issue where the GlobalProtect HIP check did not correctly detect real-time protection and the Windows Defender version on Windows endpoints, which caused the endpoints to fail the HIP check.
Addressed
5.1.5
GPC-10422
Fixed an issue where the GlobalProtect HIP check did not detect real-time protection for Traps version 6.1.x and 7.0.x.
Addressed
5.1.5
GPC-9594
Fixed an issue where, when the gateway was configured to include split tunnel traffic based on the destination domain, some packets still leaked through the physical adapter.
Addressed
5.1.4
GPC-10843
Fixed an issue where, when the GlobalProtect app was installed on iOS endpoints, the app did not automatically reconnect to the external gateway when users moved from the internal network to the external network.
Addressed
5.1.4
GPC-10818
Fixed an issue where, when the GlobalProtect app was installed on macOS devices, the HIP process restarted multiple times.
Addressed
5.1.4
GPC-10785
Fixed an issue where the
Only with User Fingerprint
option was enabled on the GlobalProtect client even though this option was not configured on the portal.
Addressed
5.1.4
GPC-10745
Fixed an issue where authentication to the GlobalProtect gateway failed as the challenge response for multi-factor authentication was sent to the portal and not to the gateway. This issue occurred when the pre-logon tunnel was not renamed to the user tunnel and the user tried to authenticate to the gateway. With this fix, GlobalProtect authentication is now successful.
Addressed
5.1.4
GPC-10736
Fixed an issue where the GlobalProtect client on macOS endpoints did not select the client certificate when the certificate did not have the client authentication enabled for the
Extended Key Usage
.
Addressed
5.1.4
GPC-10682
Fixed an issue where, when the GlobalProtect app was installed on Linux,
domain.com
was sent in the HIP profile instead of the correct domain.
Addressed
5.1.4
GPC-10679
Fixed an issue where, when the GlobalProtect app was installed on macOS, the GlobalProtect client tried to connect to the portal after the installation when the
On-Demand
connect method was defined in the property list (plist).
Addressed
5.1.4
GPC-10665
Fixed an issue where, when the GlobalProtect app was installed on Windows using Security Assertion Markup Language (SAML) authentication and the
Allow user to Sign Out from GlobalProtect App
option was set to
Yes
, the username and
Sign Out
button were not displayed on the app even when the
Save User Credentials
option was set to
No
.
Addressed
5.1.4
GPC-10649
Fixed an issue where, when the GlobalProtect app was installed on Linux, GlobalProtect failed to send an XML compliant HIP report to the firewall.
Addressed
5.1.4
GPC-10619
Fixed an issue where the
GlobalProtect Refresh Connection
window displayed the wrong French characters when the system language was French.
Addressed
5.1.4
GPC-10591
Fixed an issue where, when the GlobalProtect app was installed on Windows, the app failed to download the software from the portal when the proxy auto-configuration files were used.
Addressed
5.1.4
GPC-10590
Fixed an issue where, when the GlobalProtect app was installed on Windows UWP, the app failed to connect to the portal or gateway when multi-factor authentication (MFA) was used.
Addressed
5.1.4
GPC-10580
Fixed an issue where the GlobalProtect client failed to authenticate to the Prisma Access gateway when multi-factor authentication was used.
Addressed
5.1.4
GPC-10575
Fixed an issue where, when the GlobalProtect app was installed on macOS devices running macOS Catalina 10.15.4, the app restarted multiple times and was not able to connect to the gateway.
Addressed
5.1.4
GPC-10566
Fixed an issue where, when the GlobalProtect app was installed on Windows, the
Pre-logon then On-demand
connect method did not work properly. When you set the
Pre-logon Tunnel Rename Timeout
value to 0, GlobalProtect established a user tunnel after users logged in to the endpoint instead of remaining disconnected (On-Demand mode).
Addressed
5.1.4
GPC-10565
Fixed an issue where, when the GlobalProtect app was installed on Linux, the app did not send the complete HIP report due to many missing patch management entries and caused parsing issues on the gateway.
Addressed
5.1.4
GPC-10553
Fixed an issue where, when the GlobalProtect app was installed on Windows in On-Demand mode, the app was disconnected from the tunnel, and the HIP report was not sent to the gateway even when the gateway was selected manually after the device reboot.
Addressed
5.1.4
GPC-10542
Fixed an issue where users were prompted to enter their credentials on the GlobalProtect app 5.0.9 every time their macOS device running macOS Catalina 10.15.3 reboots.
Addressed
5.1.4
GPC-10477
Fixed an issue where the GlobalProtect HIP check did not detect real-time protection for Traps version 7.0.1 on Windows 10 endpoints, which caused the endpoints to fail the HIP check.
Addressed
5.1.4
GPC-10469
Fixed an issue on Windows endpoints where, if the GlobalProtect app is configured with the
Pre-logon (Always On) Connect Method
and users disable the app and reboot their endpoint, the pre-logon tunnel is up after they login.
Addressed
5.1.4
GPC-10338
Fixed an issue where, after you upgraded the GlobalProtect app from 5.0.x release to 5.1.1 release on Windows endpoints, the username displayed Chinese characters instead of English characters.
Addressed
5.1.4
GPC-10295
Fixed an issue where, when a split tunnel based on the destination domain was configured on macOS Catalina 10.15.4 endpoints, all Safari-based traffic and all Mac App Store-based traffic that were defined in the split tunnel configuration were dropped. The same issue also occurred when you configured a split tunnel based on the applications downloaded from the Mac App Store. All traffic that was created for the configured applications were dropped. With this fix, traffic defined in the split tunnel configuration will not be dropped using Safari.
Addressed
5.1.4
GPC-10241
Fixed an issue where the grace period decreased and GlobalProtect is disconnected even after gateway authentication was successful for the switch to the new user.
Addressed
5.1.4
GPC-10200
Fixed an issue where, when the GlobalProtect app was installed on Android devices, the app failed to reconnect and continued to stay in connecting state. Users had to close and launch the app to establish the connection.
Addressed
5.1.4
GPC-9992
Fixed an issue where the GlobalProtect HIP process (PanGpHip) on Windows endpoints caused high CPU usage on the endpoint even when users remain idle.
Addressed
5.1.3
GPC-10574
Fixed an issue where, when the GlobalProtect app was installed on Windows with a different language other than English (for example, Spanish), the GlobalProtect agent was continuously restarted.
Addressed
5.1.3
GPC-10535
Fixed an issue where, after you upgraded the GlobalProtect app from 5.0.x release to 5.1.1 release on a macOS device, users were prompted to re-enter their password even when the saved password was set to
Yes
. With this fix, users will not be prompted to re-enter their password after the upgrade. For GlobalProtect to access user credentials from the login keychain, the following Keychain Pop-Up message will appear:
GlobalProtect wants to use your confidential information stored in "GlobalProtect" in your keychain.
Users are prompted to enter their password and then select
Always Allow
so that the Keychain Pop-Up prompt does not appear again.
Addressed
5.1.3
GPC-10468
Fixed an issue where, when the GlobalProtect app was installed on Windows, two OpenSSL DLL files in 64-bit were not signed by a Palo Alto Networks certificate. This issue caused a problem for some endpoint protection applications.
Addressed
5.1.3
GPC-10403
Fixed an issue where the GlobalProtect app for macOS was disabled and the
Disable Timeout (min)
value expired, GlobalProtect could reconnect and user credentials were not preserved.
Addressed
5.1.3
GPC-10395
Fixed an issue where the GlobalProtect app for macOS version 5.1.1 could not be properly installed because the GlobalProtect service failed to launch.
Addressed
5.1.3
GPC-10380
Fixed an issue where the GlobalProtect app on macOS displayed the following error message when all the gateways were configured as
Manual Only
priority:
Could not connect to Gateway, Contact your IT administrator
With this fix, the app now displays the following message:
Please select a gateway to connect manually
Addressed
5.1.3
GPC-10341
Fixed an issue on Windows endpoints where, after the endpoint woke up from sleep mode, the GlobalProtect app was disconnected and then attempted to reconnect to the portal or gateway.
Addressed
5.1.3
GPC-10311
Fixed an issue where, when the GlobalProtect app was installed on macOS and Windows, cookie authentication was successful even when the wrong password was used and GlobalProtect was still connected after users sign out of the app. With this fix, authentication cookies are now deleted from the system when users sign out of the app.
Addressed
5.1.3
GPC-10288
Fixed an issue where, when GlobalProtect was installed using the Windows Installer (Msiexec) with on-demand as the connect method, GlobalProtect automatically tried to connect to the portal.
Addressed
5.1.3
GPC-10261
Fixed an issue where the GlobalProtect app displayed the customized
Captive Portal Detection Message
in the wrong format when a different language was used other than English.
Addressed
5.1.3
GPC-10227
Fixed a connectivity issue where, when the GlobalProtect app was installed for macOS Catalina, the GlobalProtect connection was periodically lost.
Addressed
5.1.3
GPC-10228
Fixed an issue where the GlobalProtect app detected the presence of a captive portal even though it was not present.
Addressed
5.1.3
GPC-10118
Fixed a periodic issue where the GlobalProtect tunnel failed to be restored after waking up from sleep mode. This issue occurred when on-demand was used as the connect method.
Addressed
5.1.3
GPC-10024
Fixed an issue where, after upgrading to GlobalProtect 5.0.6, the GlobalProtect HIP check did not detect that Symantec Endpoint Protection 14.2 real-time protection was enabled, which caused the device to fail the HIP check.
Addressed
5.1.3
GPC-10190
Fixed an issue where the GlobalProtect app on macOS failed to find the correct certificate for authentication to the gateway, when the object identifier (OID) was specified in the plist.
With this fix, when you provide the Key Usage OID in the plist, the GlobalProtect app uses the correct certificate.
Addressed
5.1.3
GPC-9913
Fixed an issue where the portal configuration selection criteria failed when the certificate was signed with the version 2 template.
Addressed
5.1.3
GPC-9779
Fixed an issue that caused the GlobalProtect app to install a default route with the same metric as the system default route, when split-tunneling based on access route and destination domain was enabled. This issue caused some excluded traffic to go through the tunnel.
Addressed
5.1.3
GPC-9730
Fixed an issue where GlobalProtect failed to connect to the external gateway when the proxy was not reachable outside of the corporate network until the GlobalProtect service or the desktop was restarted.
Addressed
5.1.3
GPC-9500
Fixed an issue in GlobalProtect for macOS endpoints where installing or upgrading the package using a Mobile Device Management (MDM) solution such as JAMF Pro resulted in a GlobalProtect app initialization failure.
Addressed
5.1.3
GPC-10334
Fixed an issue with the GlobalProtect app on iOS that occurred when two VPN profiles (one device-level VPN profile and one per-app VPN profile) were pushed from the mobile device management (MDM) server. This issue occurred when users initiated the per-App VPN connection using one iOS app that was on the allow list. The GlobalProtect app displayed the status as “Disconnected” and the app did not respond to
TAP TO CONNECT
. This prevented users from disconnecting from the per-App tunnel and establishing a device-level VPN tunnel.
Addressed
5.1.3
GPC-10303
Fixed an issue where, when GlobalProtect was installed on iOS endpoints, the GlobalProtect app displayed the
Can’t end Background Task
error message from the GlobalProtect agent logs. This issue occurred periodically when
TAP TO CONNECT
was used to establish the GlobalProtect connection from the home screen.
Addressed
5.1.3
GPC-10229
Fixed an issue where, when GlobalProtect was installed on iOS endpoints, the GlobalProtect app failed to perform a successful network discovery when there was a region mismatch between the portal and the gateway.
Addressed
5.1.3
GPC-9135
Fixed an issue where, when GlobalProtect was installed on iOS devices, the GlobalProtect app did not display a specific notification message when the GlobalProtect session has timed out.
Addressed
5.1.2
GPC-10444
Fixed an issue where, when the GlobalProtect Android app was installed on Chromebooks, the GlobalProtect app failed to connect to the tunnel because GlobalProtect was not running.
Addressed
5.1.2
GPC-10370
Fixed an issue where, when the GlobalProtect app was installed on Android endpoints, the app hangs and the VPN connection failed to be restored. This issue occurred when users switch from an external network to an internal network after the
Automatic Restoration of VPN Connection Timeout
option was set to
Yes
.
Addressed
5.1.2
GPC-10362
Fixed an issue where client certificate authentication was failing on Android 10 devices even when the certificate was manually selected.
Addressed
5.1.2
GPC-10348
Fixed an issue where, when the GlobalProtect app was upgraded to 5.1.1 on an Android device, the client could no longer connect to the gateway with the custom port configuration.
Addressed
5.1.2
GPC-9135
Fixed an issue where, when GlobalProtect was installed on Android devices, the GlobalProtect app did not display a specific notification message when the GlobalProtect session has timed out.
Addressed
5.1.2
GPC-10011
Fixed a graphical user interface issue with the GlobalProtect app that occurred when the device-level VPN profile and the per-app VPN profile were pushed from the mobile device management (MDM) server. This issue occurred when users initiated the VPN connection from the iOS VPN settings (
Settings
General
VPN
), and the GlobalProtect app automatically transitioned to “Connected”. After a VPN connection was established and the app was launched, the graphical user interface still displayed “Disconnected” even though the VPN connection was actually running in the background.
Addressed
5.1.2
GPC-10173
Fixed an issue where, when GlobalProtect was installed for iOS and Security Assertion Markup Language (SAML) was used to authenticate mobile users, the GlobalProtect app did not send information about the mobile device such as the operating system and the browser User-Agent string.
Addressed
5.1.1
GPC-10006
Fixed an issue where the GlobalProtect app was upgraded to 5.1.0 on an iOS device. This issue occurred because the GlobalProtect was restarted during portal or gateway authentication.
Addressed
5.1.1
GPC-10239
Fixed an issue where, when GlobalProtect was installed for Android 10, the GlobalProtect app was not able to use the client certificate for authentication. This issue occurred when the client certificate was created with an algorithm other than RSA.
Addressed
5.1.1
GPC-10260
Fixed an issue where, when GlobalProtect was installed for Windows UWP, the GlobalProtect app crashed when traffic was sent through the IPSec tunnel.
Addressed
5.1.1
GPC-10174
Fixed an issue where, when GlobalProtect was installed for Android and Security Assertion Markup Language (SAML) was used to authenticate mobile users, the GlobalProtect app did not send the complete information about the mobile device such as the User-Agent string for the web browser. With this fix, the GlobalProtect app can now send the device information while performing SAML authentication.
Addressed
5.1.1
GPC-10162
Fixed an issue where, when GlobalProtect was installed for macOS, the GlobalProtect client used the expired certificate instead of the new certificate for portal authentication. This issue occurred when both expired and new certificates were installed for macOS. With this fix, the GlobalProtect client will no longer use the expired certificate for authentication.
Addressed
5.1.1
GPC-10140
Fixed an issue where, when GlobalProtect was installed on CentOS, the GlobalProtect portal or gateway authentication prompt did not display the customized authentication messages that were configured in the portal configuration. With this fix, the customized authentication messages are now displayed correctly.
Addressed
5.1.1
GPC-10136
Fixed a connectivity issue where GlobalProtect failed to reconnect to the network. This issue occurred when different portal configurations were pushed from a mobile device management (MDM) system one at a time.
Addressed
5.1.1
GPC-10110
Fixed an issue where the GlobalProtect client was not enabled automatically after a reboot even when the duration timer has expired. This issue occurred when the GlobalProtect client was disabled and your system was rebooted. With this fix, the GlobalProtect client will now be enabled automatically even after a reboot.
Addressed
5.1.1
GPC-10108
Fixed an issue where GlobalProtect crashed on macOS devices when the Automatic Proxy Configuration was enabled.
Addressed
5.1.1
GPC-10100
Fixed an issue where, when the GlobalProtect Android app was installed on Chromebooks with
On-Demand
mode, the GlobalProtect app failed to connect to the tunnel after the device was in “sleep” mode.
Addressed
5.1.1
GPC-10037
Fixed an issue where the IPSec connection failed on a dual stack environment. This issue occurred when the IPv6 preferred option was set to
No
.
Addressed
5.1.1
GPC-10023
Fixed an issue where, when the GlobalProtect Android app was installed on Chromebooks with
Always On
mode and managed using the Google Admin console, the device did not reconnect after a reboot.
Addressed
5.1.1
GPC-9959
Fixed an issue where macOS users could not connect to the GlobalProtect gateway during manual gateway selection. This issue occurred because the portal and gateway were configured to authenticate users through Security Assertion Markup Language (SAML) authentication with the On-Demand connect method. With this fix, users can now connect to the manual gateway upon the first attempt.
Addressed
5.1.1
GPC-9855
Fixed an issue where the GlobalProtect App for macOS did overwrite the local DNS search domains with the tunnel DNS search domains. This occurred when the “Append Local Search Domains to Tunnel DNS Suffixes (macOS Only)” app setting was set to “No” in the portal agent configuration. With this fix, the tunnel DNS search domains are now appended with the local DNS search domains when the “Append Local Search Domains to Tunnel DNS Suffixes (macOS Only)” app setting is set to “Yes” in the portal agent configuration.
Addressed
5.1.1
GPC-9463
Fixed an issue where Ubuntu 19.04 did not display the GlobalProtect system tray icon or the app could not be launched by clicking the system tray icon.
Addressed
5.1.1
GPC-8743
Fixed an issue where the GlobalProtect app was frequently generating the pop-up dialog to request that you change your password even when the password was not set to expire.
Addressed
5.1.0
GPC-10099
Fixed an issue where GlobalProtect app for Android could not be properly connected with two-factor authentication due to a change in the default value for the
TCP Receive Timeout (sec)
option. With this fix, the default is now 30 seconds.
Addressed
5.2.13
GPC-16878
Fixed an issue where the GlobalProtect HIP check incorrectly detected Definition Version for Cortex XDR, which caused the device to fail the HIP check.
Addressed
5.2.13
GPC-16713
Fixed an issue where
Connect Before Logon
would unexpectedly fall back to username and password authentication after a failed SAML authentication attempt to the gateway.
Addressed
5.2.13
GPC-16601
Fixed an issue where connect before logon would get stuck at
Connecting
if on an internal network with internal gateways.
Addressed
5.2.13
GPC-16495
Fixed an issue where, when the GlobalProtect app was installed on devices running macOS, the GlobalProtect cookie stopped working when CIS Benchmark 5.1.1 (Center for Internet Security) was applied for mac OS 12 Monterey to safeguard internet services.
Addressed
5.2.13
GPC-16449
Fixed an issue where, when the GlobalProtect app was installed on devices running macOS with split tunnel based on domain, the split tunnel did not work as expected after the system woke up from sleep mode.
Addressed
5.2.13
GPC-16346
Fixed an issue where, when the GlobalProtect app was installed on Windows devices, the GlobalProtect HIP check took longer than expected to collect the HIP information and also displayed HIP pop-up error messages for antivirus software, which caused the device to fail the HIP check.
Addressed
5.2.13
GPC-16289
Fixed an issue where, when the GlobalProtect app was configured with split tunnel to exclude traffic, users could not access the excluded Airtel 4G PPP dongle application since the Airtel PPP default traffic route was removed.
Addressed
5.2.13
GPC-16144
Fixed an issue where the GlobalProtect app failed to detect Cisco Secure Endpoint anti-malware software installed on the device.
Addressed
5.2.13
GPC-16135
Fixed an issue where the GlobalProtect app connection failed when Windows 10 21H2 users tried to switch to another Windows user account on the device.
Addressed
5.2.13
GPC-16119
Fixed an issue where the GlobalProtect app was installed on devices running macOS, the GlobalProtect HIP check failed to detect the Real time protection status for Symantec Endpoint Protection.
Addressed
5.2.13
GPC-16056
Fixed an issue where GlobalProtect HIP check did not detect the name of the Trellix Agent correctly which caused the device to fail the HIP check.
Addressed
5.2.13
GPC-16055
Fixed an issue where, when the GlobalProtect app was installed on devices running macOS, the app did not display 'Authentication Failed' when the user entered an incorrect RSA SecureID.
Addressed
5.2.13
GPC-16029
Fixed an issue where, when the GlobalProtect app was installed on devices running macOS, users were prompted for certificate selection even when the
Extended Key Usage OID for Client Certificate
was configured in the App Configurations area of the GlobalProtect portal configuration.
Addressed
5.2.13
GPC-15972
Fixed an issue where the GlobalProtect HIP check did not detect the Real-Time Protection status correctly for the CrowdStrike Falcon application, which caused the device to fail the HIP check.
Addressed
5.2.13
GPC-15933
Fixed an issue where, when the GlobalProtect app was installed and connected on devices, the HIP check process was delayed and the tunnel was disconnected after 2 hours.
Addressed
5.2.13
GPC-15923
Fixed an issue where the GlobalProtect app did not detect real-time protection status for Sophos Endpoint Protection, which caused the device to fail the HIP check.
Addressed
5.2.13
GPC-15812
Fixed an issue where the split tunnel feature did not work as expected on devices running macOS Monterey 12.X and Chrome Browser 104.0.5112.79
Addressed
5.2.13
GPC-15699
Fixed an issue where the GlobalProtect HIP check did not detect the McAfee antivirus software, causing the device to fail the HIP check.
Addressed
5.2.13
GPC-15686
Fixed an issue where, when the GlobalProtect app was installed on devices running macOS, and when the user executed the command to disable the app, a new line break was added after the timestamp value in the command which caused parsing issues and created incorrect GlobalProtect log messages.
Addressed
5.2.13
GPC-15663
Fixed an issue where when the GlobalProtect app was deployed for pre-logon and when users tried to change their Windows password, users were prompted to enter only a new password. The app did not prompt users to enter their old password while changing the password.
Addressed
5.2.13
GPC-15658
Fixed an issue where the GlobalProtect app was connected to a different gateway and not the preferred gateway when the device woke up from sleep mode. The users had to select the preferred gateway manually to connect to the GlobalProtect app.
Addressed
5.2.13
GPC-15636
Fixed an issue where the GlobalProtect HIP check failed to detect the Real time protection status for Sophos Endpoint Protection.
Addressed
5.2.13
GPC-15631
Fixed an issue where, when the GlobalProtect app was installed on devices running macOS and the app did not start right away after a system reboot.
Addressed
5.2.13
GPC-15592
Fixed an issue where the GlobalProtect HIP check failed to detect the Definition Version for Sophos Endpoint Protection, which caused the device to fail the HIP check.
Addressed
5.2.13
GPC-15553
Fixed an issue where the GlobalProtect app got disconnected after 3 hours.
Addressed
5.2.13
GPC-15548
Fixed an issue where users were unable to connect to the GlobalProtect app when users restarted the device from the hibernation mode.
Addressed
5.2.13
GPC-15537
Fixed an issue where the GlobalProtect HIP check did not detect the correct Anti-Malware information for the Last Full Scan Time for Sophos Endpoint Protection, which caused the device to fail the HIP check.
Addressed
5.2.13
GPC-15485
Fixed an issue where the GlobalProtect HIP check did not detect the Real-Time Protection status for the FireEye Endpoint Agent, which caused the device to fail the HIP check.
Addressed
5.2.13
GPC-15439
Fixed an issue where the GlobalProtect app was installed on iOS devices and the GlobalProtect app failed to collect HIP data and the Host Information tab on the device failed to display information.
For the app to display the HIP information, user must update or remove expired certificates from the system.
Addressed
5.2.13
GPC-15424
Fixed an issue where, when the GlobalProtect app was installed on Windows devices and when the user tried to start the GlobalProtect app using Windows Start menu, the Windows Installer (Msiexec) did not work as expected due to which the app was getting reinstalled on the device.
Addressed
5.2.13
GPC-15338
Fixed an issue where, when the GlobalProtect app was installed on devices running macOS and when the GlobalProtect gateway was configured to exclude routes, the excluded routes were removed from the original routing table when users disconnected the app.
Addressed
5.2.13
GPC-15315
Fixed an issue where the GlobalProtect HIP check detected incorrect Anti-Malware information for Definition Date for Sophos Endpoint Protection.
Addressed
5.2.13
GPC-15260
Fixed an issue where, when the GlobalProtect app was installed on devices running macOS and GlobalProtect enforcer was configured with allowed FQDNs, users were still able to access the internet and other public domains.
Addressed
5.2.13
GPC-15255
Fixed an issue where the GlobalProtect HIP check detected the device as Windows firewall enabled even though the firewall was disabled on the device.
Addressed
5.2.13
GPC-15219
Fixed an issue where, when the GlobalProtect app was installed on Windows devices and split tunnel was configured to exclude application traffic for Zoom, excluded Zoom traffic was still forwarded through the tunnel.
Addressed
5.2.13
GPC-15205
Fixed an issue where the HIP check process stopped running and the tunnel was disconnected after 3 hours.
Addressed
5.2.13
GPC-15200
Fixed an issue where the GlobalProtect app did not save the username after Kerberos SSO authentication following which the app could not use the GlobalProtect cached portal configuration. Users had to manually add the username to the Windows registry.
Addressed
5.2.13
GPC-15149
Fixed an issue where the GlobalProtect app got disconnected due to an incorrect HIP check after the system woke up from sleep mode or when the system was restarted.
Addressed
5.2.13
GPC-15144
Fixed an issue where, when the GlobalProtect app was installed on Windows 11, version 22 H2 devices, the HIP information for patch management was not collected and the Patch Management section of the Host Profile tab failed to display the HIP details.
Addressed
5.2.13
GPC-15072
Fixed an issue where the GlobalProtect HIP check did not detect the Anti-Malware information for Sophos Endpoint Protection and Microsoft Monitoring Agent, which caused the device to fail the HIP check.
Addressed
5.2.13
GPC-15056
Fixed an issue where the users were not prompted for Multi-Factor Authentication (MFA) even after entering their credentials using IdP (Identity Providers).
Addressed
5.2.13
GPC-14973
Fixed an issue where the GlobalProtect app stopped working abruptly.
Addressed
5.2.13
GPC-14770
Fixed an issue where the HIP check process stopped running and the tunnel was disconnected after 3 hours.
Addressed
5.2.13
GPC-14725
Fixed an intermittent issue where the users were unable to connect to the GlobalProtect app, when the app used cached portal configuration.
Addressed
5.2.13
GPC-14672
Fixed an issue where, when the GlobalProtect app was installed on macOS devices and No direct access to local network option was enabled with access routes excluded from the GlobalProtect VPN tunnel, the excluded traffic was not sent through the physical adapter on the endpoint. Following this, users were unable to access the local physical network devices such as printers.
Addressed
5.2.13
GPC-14609
Fixed an issue where the HIP check did not detect the Sentinel One RTP and definition date properly, which caused the HIP check to fail.
Addressed
5.2.13
GPC-14439
Fixed an issue where, when split tunnel was configured on the GlobalProtect app to exclude destination domain traffic that included a slash character (/) for sub-page domain names, the slash character (/) was not displayed in the sub-page domain names in the exception list.
Addressed
5.2.13
GPC-13752
Fixed an issue where, when the GlobalProtect app was installed on Windows devices, the SAML login page to authenticate Network Discovery was not properly displayed.
Addressed
5.2.12
GPC-15193
Fixed an issue where the GlobalProtect app failed to connect when the embedded browser was closed after Okta authentication.
Addressed
5.2.12
GPC-15179
Fixed an issue where, when the
No Direct Access to local network
option was enabled on GlobalProtect gateway, the GlobalProtect users’ loopback interface network was masked causing connection failure.
Addressed
5.2.12
GPC-15169
Fixed an issue where, when the
Allow GlobalProtect UI to Persist for User Input
was enabled and the machine was restarted, the GlobalProtect app did not show up on the screen. The browser directly opened the SAML login page and the app worked only in the background after successful authentication.
Addressed
5.2.12
GPC-15155
Fixed an issue where, when the GlobalProtect app was installed on macOS devices and the language was set to Japanese, the password field for disabling the app was not properly displayed.
Addressed
5.2.12
GPC-15073
A fix was made to address an OpenSSL infinite loop vulnerability in GlobalProtect app software ( CVE-2022-0778 ).
Addressed
5.2.12
GPC-15062
Fixed an issue where, when the GlobalProtect app was installed on macOS devices, the connection became unstable when the user clicked the
Click here
or
Retry
button on the default browser page for SAML authentication.
Addressed
5.2.12
GPC-15050
Fixed an issue where the GlobalProtect HIP check did not detect the Last Scan Date for Cortex XDR, which caused the device to fail the HIP check.
Addressed
5.2.12
GPC-15030
Fixed an issue where the GlobalProtect app prompted users to re-enter the gateway login credentials even though the save-user credentials was configured.
Addressed
5.2.12
GPC-15029
Fixed an issue where the GlobalProtect app displayed the incorrect copyright year on the app.
Addressed
5.2.12
GPC-15017
Fixed an issue where GlobalProtect users were unable to connect using
Connect Before Logon
because the app got stuck during the SAML authentication stage.
Addressed
5.2.12
GPC-14959
Fixed an issue where, when the GlobalProtect app was installed on Linux devices, the GlobalProtect logs displayed password information when the password contained the (<) character.The password characters succeeding the (<) character were displayed in the logs.
Addressed
5.2.12
GPC-14943
Fixed an issue where the GlobalProtect app connection failed after the app was upgraded to Windows 10 21H2.
Addressed
5.2.12
GPC-14867
Fixed an issue where the GlobalProtect app could not connect to the Prisma Access gateway when a FQDN was used instead of an IP address in the Proxy Auto-Configuration (PAC) file.
Addressed
5.2.12
GPC-14763
Fixed an issue where, when the GlobalProtect app was installed on Windows devices, the device displayed a blue screen when users tried to connect to the GlobalProtect app.
Addressed
5.2.12
GPC-14732
Fixed an issue where the GlobalProtect app got disconnected after HIP check.
Addressed
5.2.12
GPC-14609
Fixed an issue where the HIP check did not detect the Sentinel One RTP and definition date properly, which caused the HIP check to fail.
Addressed
5.2.12
GPC-14578
Fixed an issue where, after connecting to GlobalProtect using Connect Before Logon (CBL) with SAML authentication, the GlobalProtect app kept opening and closing after the user logged in.
Addressed
5.2.12
GPC-14572
Fixed an issue where GlobalProtect app users were prompted to re-enter the password when the connection was refreshed.This issue occurred only when the password contained non-English characters.
Addressed
5.2.12
GPC-14278
Fixed an issue where, when the GlobalProtect app was installed on macOS devices, the GlobalProtect HIP report displayed encryption status even when the encryption feature was disabled.
Addressed
5.2.12
GPC-14148
Fixed an issue where the Azure IDP page was not displayed properly when
Connect Before Logon
was used.
Addressed
5.2.12
GPC-13939
Fixed an issue where multiple spelling and translation errors were observed in the GlobalProtect app for French localization.
Addressed
5.2.12
GPC-13725
Fixed an issue where, during a transparent upgrade of the GlobalProtect app, if the system rebooted or woke up from hibernation, the upgrade failed due to competing resources between the system reboot and transparent upgrade. The previous version of the GlobalProtect app was completely uninstalled.
Addressed
5.2.11
GPC-14892
Fixed an issue where the users were unable to connect applications such as TESSY to a local database when GlobalProtect was connected.
Addressed
5.2.11
GPC-14824
Fixed an issue where, when the GlobalProtect app was installed on macOS devices, the GlobalProtect app tried to restore the gateway connection even when the device was on Modern Standby mode. The users were prompted to authenticate using multi-factor authentication (MFA) authentication.
Addressed
5.2.11
GPC-14792
Fixed an issue where, when Connect Before Logon using Security Assertion Markup Language (SAML) authentication was used to login to the endpoint, the users could not authenticate as the authentication process stopped when redirected to the organization’s sign-in page.
Addressed
5.2.11
GPC-14716
Fixed an issue where, when the GlobalProtect app was installed on macOS devices and the Autonomous Digital Experience Management (ADEM) was not enabled in the app, the agent took more time than expected to establish a connection.
Addressed
5.2.11
GPC-14691
Fixed an issue where the GlobalProtect IPV6 static route for the gateway was getting removed shortly after establishing the connection causing unexpected GlobalProtect disconnections.
Addressed
5.2.11
GPC-14686
Fixed an issue where, when the GlobalProtect app was installed on macOS devices, the GlobalProtect credentials that were saved earlier were lost when the user faced network connectivity issues and the users had to re-enter the credentials.
Addressed
5.2.11
GPC-14672
Fixed an issue where, when the GlobalProtect app was installed on macOS devices and
No direct access to local network
option was enabled with access routes excluded from the GlobalProtect VPN tunnel, the excluded traffic was not sent through the physical adapter on the endpoint. Following this, the users were unable to access the local physical network devices such as printers.
Addressed
5.2.11
GPC-14671
Fixed an issue where the GlobalProtect agent (PanGPA) stopped running when Client Certificate authentication along with SAML authentication method was used to authenticate users. This issue resulted in GlobalProtect connection failures.
Addressed
5.2.11
GPC-14659
Fixed an issue where, when the user entered their credentials in the Connect Before Logon SAML authentication page, a blank screen was displayed instead of prompting the users to authenticate using a Two-Factor Authentication (2FA) authentication method as expected.
Addressed
5.2.11
GPC-14651
Fixed an issue where the GlobalProtect HIP check did not detect patch management properly, which caused the device to fail the HIP check.
Addressed
5.2.11
GPC-14650
Fixed an issue where, when pre-logon was configured for the GlobalProtect app, the users were still prompted to authenticate using multi-factor authentication (MFA) during the GlobalProtect gateway pre-logon stage.
Addressed
5.2.11
GPC-14649
Fixed an issue where, when the GlobalProtect app was installed on devices running on macOS High Sierra and split tunnel was configured to exclude application traffic such as Microsoft Teams and Zoom, some excluded traffic was still being forwarded through the tunnel.
Addressed
5.2.11
GPC-14640
Fixed an issue where, when the GlobalProtect app was deployed for pre-logon, the GlobalProtect Enforcer remained enabled even after the app was disabled.
Addressed
5.2.11
GPC-14616
Fixed an issue where the GlobalProtect HIP check did not detect HCL BigFix version 10.0.3, which caused the device to fail the HIP check.
Addressed
5.2.11
GPC-14611
Fixed an issue where the GlobalProtect HIP check did not detect the Anti-Malware information for Windows Defender and McAfee Anti-Malware Detection, which caused the device to fail the HIP check.
Addressed
5.2.11
GPC-14610
Fixed an issue where the GlobalProtect HIP check did not detect HCL BigFix version 10.0.3, which caused the device to fail the HIP check.
Addressed
5.2.11
GPC-14600
Fixed an issue where the GlobalProtect app did not detect real-time protection and the correct definition date and definition version for Microsoft Defender Advanced Threat Protection (ATP), which caused the device to fail the HIP check.
Addressed
5.2.11
GPC-14583
Fixed an issue where, when the GlobalProtect app was installed on macOS devices, the app failed to reconnect and continued to stay in the connecting state even after restarting the device.
Addressed
5.2.11
GPC-14577
Fixed an issue where, when the GlobalProtect app was configured to use the end user’s default system browser for SAML authentication, the app displayed the following warning message while enrolling with PingID.
Assignment to read-only properties is not allowed in strict mode.
Addressed
5.2.11
GPC-14567
Fixed an issue where, when Connect Before Logon using Security Assertion Markup Language (SAML) authentication was used to log in to the endpoint, users were unable to complete the authentication process as the SAML login page got stuck after they entered their credentials.
Addressed
5.2.11
GPC-14545
Fixed an issue where the GlobalProtect HIP check did not detect HCL BigFix version, which caused the device to fail the HIP check.
Addressed
5.2.11
GPC-14528
Fixed an issue where, when the GlobalProtect app was installed on macOS devices, the GlobalProtect HIP check did not detect Symantec Endpoint Protection 14.3 real-time protection, which caused the device to fail the HIP check.
Addressed
5.2.11
GPC-14522
Fixed an issue where, when the GlobalProtect was configured with split tunnel to include traffic based on the destination domain by overriding the DNS server manually, the DNS queries were still being sent to the DHCP configured server.
Addressed
5.2.11
GPC-14492
Fixed an issue where, when the GlobalProtect app was installed on Windows devices and split tunnel was configured to exclude or include any application traffic that relied on the loopback connection source IP address, the split tunnel configuration based on the application did not work.
Addressed
5.2.11
GPC-14488
Fixed an issue where, when the GlobalProtect app was installed on Windows devices, a pop-up message
Connected - You are securely connected to the corporate network
was displayed and the message continued to stay on the screen even though the users tried to close it.
Addressed
5.2.11
GPC-14469
Fixed an issue where, when the GlobalProtect app was installed on Windows devices with
No direct access to local network
option enabled on the gateway and split tunnel feature configured to exclude specific access routes, traffic for those access routes continued to go through the VPN tunnel.
Addressed
5.2.11
GPC-14453
Fixed an issue where the TCP Option lookup for IP fragmented TCP packets caused the endpoint to lose access to internal resources.
Addressed
5.2.11
GPC-14439
Fixed an issue where, when split tunnel was configured on the GlobalProtect app to exclude destination domain traffic that included a slash character (/) for sub-page domain names, the slash character (/) was not displayed in the sub-page domain names in the exception list.
Addressed
5.2.11
GPC-14430
Fixed an issue where the GlobalProtect HIP check did not detect the Trend Micro Apex One Endpoint Security, which caused the device to fail the HIP check.
Addressed
5.2.11
GPC-14405
Fixed an issue where, when the IPv6 Sinkhole feature was enabled to block the GlobalProtect app from accessing the local network devices using IPv6 address, the GlobalProtect gateway still allowed the GlobalProtect app to send IPV6 traffic to local network devices instead of blocking them.
Addressed
5.2.11
GPC-14400
Fixed an issue where GlobalProtect HIP check incorrectly detected the encryption stage for Trend Micro Full Disk Encryption as ‘Unknown’.
Addressed
5.2.11
GPC-14181
Fixed an issue where, when the GlobalProtect portal was set to authenticate users through Security Assertion Markup Language (SAML) authentication, the users were prompted to re-enter their credentials whenever they tried to connect to the GlobalProtect app even when the Authentication override cookie was enabled.
Addressed
5.2.11
GPC-14125
Fixed an issue where, when the GlobalProtect service (PanGPS) stopped running unexpectedly causing IP address-to-username mapping issues on the firewall. Users were unable to create user-based access policies due to the issue.
Addressed
5.2.11
GPC-14105
Fixed an issue where the GlobalProtect HIP check did not detect the real-time protection for the FireEye Endpoint Agent, which caused the device to fail the HIP check.
Addressed
5.2.11
GPC-14100
Fixed an issue where, when split tunnel was configured on the GlobalProtect gateway to include routes, the traffic which was not included was also sent over the VPN tunnel intermittently.
Addressed
5.2.11
GPC-13970
Fixed an issue where DNS queries for excluded domains were sent out on both the GlobalProtect app virtual adapter and the device's physical adapter with the
Split-Tunnel Option
set to
Both Network Traffic and DNS
in the App Configurations area of the GlobalProtect portal configuration.
Addressed
5.2.11
GPC-13878
Fixed an issue where, when the GlobalProtect app was installed on Windows devices, the GlobalProtect HIP check did not detect the correct definition version and definition date for the Carbon Black Cloud Sensor, which caused the device to fail the HIP check.
Addressed
5.2.11
GPC-13774
Fixed an issue where the GlobalProtect tunnel could not send traffic after the system woke up from sleep mode.
Addressed
5.2.11
GPC-13561
Fixed an issue where the hamburger menu icon on the GlobalProtect app was not highlighted when the users selected the menu using the tab key on the keyboard. Users were unable to identify the difference whether they were using the menu or not since the highlight was not visible to them due to the issue.
Addressed
5.2.11
GPC-12777
Fixed an issue where, when a device connected to GlobalProtect would establish an Remote Desktop Protocol (RDP) connection to another device connected to GlobalProtect, the RDP connection would time out and disconnect.
Addressed
5.2.10
GPC-14251
Fixed an issue where the GlobalProtect HIP report displayed incorrect OS version Windows 10 instead of the correct version Windows 11.
Addressed
5.2.10
GPC-14505
Fixed an issue where GlobalProtect users were prompted to install the Rosetta 2 compatibility package along with the GlobalProtect app on ARM64-based MacBook devices running macOS M1. The system prompted for Rosetta 2 installation despite the GlobalProtect app having native support for the M1 processor (ARM64, Apple silicon).
Addressed
5.2.10
GPC-14276
Fixed an issue where the
Check for Updates
option in the GlobalProtect app failed to display the recent GlobalProtect version updates. The users had to refresh the GlobalProtect connection to get the latest version updates.
Addressed
5.2.10
GPC-14181
Fixed an issue where, when the GlobalProtect portal was set to authenticate users through Security Assertion Markup Language (SAML) authentication, the users were prompted to re-enter their credentials whenever they tried to connect to the GlobalProtect app even when Authentication override cookie was enabled.
Addressed
5.2.10
GPC-10200
Fixed an issue where, when the GlobalProtect app was installed on Android devices, the app failed to reconnect and continued to stay in the connecting state. Users had to close and launch the GlobalProtect app again to establish the connection.
Addressed
5.2.9
GPC-14423
Fixed an issue where the GlobalProtect HIP check did not detect the correct status for Sophos Endpoint Protection, which caused the device to fail the HIP check.
Addressed
5.2.9
GPC-14421
Fixed an issue where the GlobalProtect app continued to stay in the connecting state when users tried to log in to the gateway by entering their usernames without providing a password. Users were not prompted to re-enter credentials on authentication failure.
Addressed
5.2.9
GPC-14389
Fixed an issue where the GlobalProtect HIP check did not detect the Anti-Malware information for the Bitdefender Endpoint Security for macOS, which caused the device to fail the HIP check.
Addressed
5.2.9
GPC-14388
Fixed an issue where the GlobalProtect HIP check did not correctly detect the Anti-Malware information for McAfee Endpoint Security on devices running macOS, which caused the devices to fail the HIP check.
Addressed
5.2.9
GPC-14329
Fixed an issue where macOS devices were able to bypass the GlobalProtect tunnel using the physical adapter even when
No direct access to local network
was enabled.
Addressed
5.2.9
GPC-14289
Fixed an issue where the Apple MacBook Pro failed to reconnect to the GlobalProtect app after hibernation.
Addressed
5.2.9
GPC-14282
Fixed an issue where, when the GlobalProtect app was installed on macOS devices, the GlobalProtect HIP check did not detect the Patch Management software for the Jamf Pro application, which caused the device to fail the HIP check.
Addressed
5.2.9
GPC-14234
Fixed an issue where, when the GlobalProtect app was installed on macOS devices, the app could not send the Kerberos SSO support properly during the pre-login stage.This issue resulted in two authentication prompts when devices were connected to a corporate network.
Addressed
5.2.9
GPC-14223
Fixed an issue where the GlobalProtect app failed to fetch the configuration from the portal during the automatic configuration refresh.
Addressed
5.2.9
GPC-14118
Fixed an issue where when SAML was used with the default browser for authentication, GlobalProtect could not establish a tunnel to the gateway with a cached portal configuration.
Addressed
5.2.9
GPC-14104
Fixed an issue where DNS queries for excluded domains were sent out on both the GlobalProtect app virtual adapter and the device’s physical adapter with the
Split-Tunnel Option
set to
Both Network Traffic and DNS
in the App Configurations area of the GlobalProtect portal configuration.
Addressed
5.2.9
GPC-14099
Fixed an issue where the GlobalProtect app for macOS allowed users to enter extra spaces after the portal IP address or FQDN, causing the connection to fail.
Addressed
5.2.9
GPC-14089
Fixed an issue where the GlobalProtect app did not launch the SAML login page correctly to complete the authentication sequence.
Addressed
5.2.9
GPC-14070
Fixed an issue where the GlobalProtect app did not detect real-time protection and the correct definition date for Microsoft Defender Advanced Threat Protection (ATP), causing the HIP check to fail.
Addressed
5.2.9
GPC-14013
Fixed an issue where the GlobalProtect app displayed the wrong version when fetched from Workspace One.
Addressed
5.2.9
GPC-14000
Fixed an issue where, when the GlobalProtect HIP check did not detect the Anti-Malware information for Malware Definition Date for the Carbon Black Cloud Sensor, which caused the device to fail the HIP check.
Addressed
5.2.9
GPC-13978
Fixed an issue where the GlobalProtect HIP check did not detect the correct details of the Malware Definition Version and Malware Definition Date for the CrowdStrike Falcon application, which caused the device to fail the HIP check.
Addressed
5.2.9
GPC-19977
Fixed an issue where the GlobalProtect user was unable to sign in to the portal by pressing the ‘Enter’ key after entering the credentials on the GlobalProtect embedded browser.
Addressed
5.2.9
GPC-13963
Fixed an issue where the DNS UDP checksum was incorrectly calculated, causing latency in the GlobalProtect connection.
Addressed
5.2.9
GPC-13939
Fixed an issue where multiple spelling and translation errors were observed in the GlobalProtect app for French localization.
Addressed
5.2.9
GPC-13938
Fixed an issue where the GlobalProtect HIP check did not detect the correct details for Symantec Endpoint Protection on Windows endpoints, which caused the device to fail the HIP check.
Addressed
5.2.9
GPC-13870
Fixed an issue where, when the GlobalProtect app was installed on ARM-based MacBook devices running macOS M1, the GlobalProtect app was unable to detect HIP information for Anti-Malware, Disk Backup, Disk Encryption, Firewall, and Patch Management.
Addressed
5.2.9
GPC-13857
Fixed an issue where, if GlobalProtect was configured for domain-based split tunneling and the domain name resolved to the loopback address (127.0.0.1), the GlobalProtect app would disconnect on devices running macOS 11.5 or later.
Addressed
5.2.9
GPC-13855
Fixed an issue where the GlobalProtect app for macOS was unable to detect Jamf version 10.31.0 in the HIP check, causing the endpoints to fail the HIP check.
Addressed
5.2.9
GPC-13834
Fixed an issue where the GlobalProtect app did not start right away after a computer reboot.
Addressed
5.2.9
GPC-13805
Fixed an issue where, when the GlobalProtect app was installed on Linux devices, the GlobalProtect HIP report displayed encryption status as unencrypted even when encryption was complete.
Addressed
5.2.9
GPC-13802
Fixed an issue that caused the GlobalProtect app to restart when using the MacBook keyboard to navigate through the GlobalProtect GUI.
Addressed
5.2.9
GPC-13794
Fixed an issue where the GlobalProtect login screen displayed an incorrect Spanish translation.
Addressed
5.2.9
GPC-13737
Fixed an issue where, when the GlobalProtect app was installed on Windows devices, the GlobalProtect HIP check did not detect the firewall state of McAfee Endpoint Security v10.7.0.1961.
Addressed
5.2.9
GPC-13735
Fixed an issue where the GlobalProtect users on macOS 11 Big Sur were unable to use the Spotify application properly, when application-based split tunneling was configured on the gateway and Spotify was excluded from the VPN tunnel.
Addressed
5.2.9
GPC-13705
Fixed an issue where the GlobalProtect HIP check did not correctly detect the McAfee DLP information on Windows 10 devices, which caused the devices to fail the HIP check.
Addressed
5.2.9
GPC-13693
Fixed an issue where DNS resolution to internal host detection got delayed because of mDNS.
Addressed
5.2.9
GPC-13674
Fixed an issue where GlobalProtect authentication failed when the SAML username contained special characters.
Addressed
5.2.9
GPC-13668
Fixed an issue where the GlobalProtect HIP check did not detect the correct details for Cortex XDR, which caused the device to fail the HIP check.
Addressed
5.2.9
GPC-13632
Fixed an issue where the GlobalProtect HIP check did not detect the details for Forcepoint Data Loss Prevention (DLP) and FireEye Advanced Malware, which caused the device to fail the HIP check.
Addressed
5.2.9
GPC-13570
Fixed an issue where the GlobalProtect HIP check did not detect the correct details of the Anti-Malware information for the Sentinel Agent, which caused the device to fail the HIP check.
Addressed
5.2.9
GPC-13569
Fixed an issue where the GlobalProtect HIP report displayed erroneous warning messages, such as whole disk encryption failed, after an upgrade.
Addressed
5.2.9
GPC-13551
Fixed an issue where the GlobalProtect HIP check did not detect the correct details of the Anti-Malware information for the Carbon Black Cloud Sensor, which caused the device to fail the HIP check.
Addressed
5.2.9
GPC-13420
Fixed an issue where, when the GlobalProtect app was installed on iOS devices, the app consumed a large amount of storage space under
Documents & Data
.
Addressed
5.2.9
GPC-13385
Fixed an issue where the GlobalProtect app took a long time to connect when the internal host detection DNS query failed.
Addressed
5.2.9
GPC-13364
Fixed an issue where, when the GlobalProtect app was installed on Windows devices, the GlobalProtect HIP check did not detect information for Signature Version and Last Updated for the Carbon Black Cloud application, which caused the device to fail the HIP check.
Addressed
5.2.9
GPC-13346
Fixed an issue where the GlobalProtect app GUI would disappear to the system tray or menu bar during authentication prompts thereby preventing the users from entering their credentials.
Addressed
5.2.9
GPC-13195
Fixed an issue where, when the GlobalProtect app was installed on iOS devices, the app was unable to establish a connection for the second user using Security Assertion Markup Language (SAML) authentication when cookie authentication was configured on the portal.
Addressed
5.2.9
GPC-13093
Fixed an issue where the upgrade to a newer version of GlobalProtect app failed if the
Allow User to Uninstall GlobalProtect App (Windows Only)
was set to
Disallow
or
Allow with Password
.
Addressed
5.2.9
GPC-13008
Fixed an issue where, when the GlobalProtect app was installed on iOS devices and configured in
Always-On
mode, the app was unable to send the HIP report to the firewall after the device was turned off and turned on in locked mode. When the device was turned on in locked mode, users connected to the app in
Always-On
mode but GlobalProtect failed to send the HIP report to the firewall.
Addressed
5.2.9
GPC-12777
Fixed an issue where the remote desktop connection via GlobalProtect tunnel got disconnected at times.
Addressed
5.2.8
GPC-13701
Fixed an issue where the GlobalProtect HIP check did not detect the correct details of the
Anti-Malware
information for the Carbon Black Cloud Sensor, which caused the device to fail the HIP check.
Addressed
5.2.8
GPC-13683
Fixed an issue where, when the GlobalProtect app was installed on Windows (32-bit) devices and the portal was set up to authenticate end users through the default system browser for Security Assertion Markup Language (SAML) authentication, the default system browser for SAML authentication did not work as expected.
Addressed
5.2.8
GPC-13680
Fixed an issue where, when the GlobalProtect app was installed on Windows devices, the GlobalProtect HIP check did not detect the Microsoft Defender ATP real-time protection, which caused the device to fail the HIP check.
Addressed
5.2.8
GPC-13655
Fixed an issue where, where the GlobalProtect HIP check did not detect the correct details of the
Malware Definition Version
and
Malware Definition Date
for the CrowdStrike Falcon application, which caused the device to fail the HIP check.
Addressed
5.2.8
GPC-13641
Fixed an issue where, when the GlobalProtect app was installed on Windows devices, the GlobalProtect HIP check did not detect the status of
Disk Encryption
and the presence of Bitlocker Drive Encryption after upgrading to GlobalProtect app 5.2.6, which caused the device to fail the HIP check.
Addressed
5.2.8
GPC-13640
Fixed an issue where, when the GlobalProtect app was installed on Windows devices and configured with On-Demand mode, a new portal authentication including a RADIUS challenge caused the app to hang in
Connecting
state.
Addressed
5.2.8
GPC-13637
Fixed an issue where, when the GlobalProtect app was installed on Windows devices, the GlobalProtect HIP check did not detect the status of
Disk Encryption
and the presence of Bitlocker Drive Encryption, which caused the device to fail the HIP check.
Addressed
5.2.8
GPC-13622
Fixed an issue where, when the GlobalProtect app was enabled for FIPS-CC mode, the app failed to connect to the portal because the app attempted to perform an OCSP check for the root CA certificate.
Addressed
5.2.8
GPC-13583
Fixed an issue where, where the GlobalProtect HIP check did not detect the correct details of the
Malware Definition Version
,
Malware Definition Date
, and
Last Full Scan Time
for the CrowdStrike Falcon application, which caused the device to fail the HIP check.
Addressed
5.2.8
GPC-13558
Fixed an issue where, when the GlobalProtect app was installed on Windows devices, the
General
tab of the
GlobalProtect Settings
panel displayed a spelling error when the system language was French.
Addressed
5.2.8
GPC-13555
Fixed an issue where, when the GlobalProtect app was installed on macOS devices, the app used the tunnel assigned IPv6 address as the source address for the physical interface for the excluded IPv6 traffic. This issue occurred when the physical adapter did not have any IPv6 addresses.
Addressed
5.2.8
GPC-13551
Fixed an issue where the GlobalProtect HIP check did not detect the correct details of the
Anti-Malware
information for the Carbon Black Cloud Sensor, which caused the device to fail the HIP check.
Addressed
5.2.8
GPC-13547
Fixed an issue where, when the GlobalProtect app was deployed for Pre-logon then On-demand, the pre-logon tunnel took 2-3 minutes to connect to GlobalProtect when switching from disconnecting to connecting states. With this fix, the pre-logon tunnel was able to connect to GlobalProtect without changing connection states.
Addressed
5.2.8
GPC-13511
Fixed an issue where, when the GlobalProtect app was installed on Windows devices, the GlobalProtect HIP process (PanGpHip) completely stopped running after the GlobalProtect service (PanGPS) crashed.
Addressed
5.2.8
GPC-13481
Fixed an issue where, where the GlobalProtect HIP check did not detect the
Anti-Malware
information for the Malware Definition Date and the software version for the 360 security guard and 360 Antivirus, which caused the device to fail the HIP check.
Addressed
5.2.8
GPC-13479
Fixed an issue where the GlobalProtect HIP check did not detect the Anti-Malware information for the Malware Definition Date for the Carbon Black Cloud Sensor, which caused the device to fail the HIP check.
Addressed
5.2.8
GPC-13466
Fixed an issue where, when the GlobalProtect app was installed on macOS devices, the GlobalProtect HIP check did not detect the
Anti-Malware
information for the FireEye Endpoint Agent, which caused the device to fail the HIP check.
Addressed
5.2.8
GPC-13464
Fixed an issue where, when the GlobalProtect app was installed on non-English Windows devices, the GlobalProtect HIP check did not detect real-time protection for Cisco Advanced Malware Protection for Endpoints, which caused the device to fail the HIP check.
Addressed
5.2.8
GPC-13432
Fixed an issue where, when the GlobalProtect app was installed on macOS devices and another application with system extensions were installed, issues with web-browsing and network activity were observed.
Addressed
5.2.8
GPC-13417
Fixed an issue where, when the GlobalProtect app was installed on Windows devices, the GlobalProtect HIP check did not detect the correct definition date for Kaspersky Endpoint Security, which caused the device to fail the HIP check.
Addressed
5.2.8
GPC-13395
Fixed an issue where, when the GlobalProtect app was installed on Windows devices and deployed for Pre-logon then On-demand with user initiated Pre-logon enabled,
Start GlobalProtect Connection
was displayed at the Windows login page when the system was locked. This option should be displayed only during a system restart or when users logged out from the device.
Addressed
5.2.8
GPC-13389
Fixed an issue where, when the GlobalProtect app was installed on Windows devices, the user was unable to save the gateway as the
Preferred Gateway
because this setting was removed from the Windows registry after a system reboot.
Addressed
5.2.8
GPC-13384
Fixed an issue where, when the GlobalProtect app was installed on macOS devices, the embedded browser (WKWebView) did not send the client certificate to the SAML identity provider configured with mutual TLS authentication.
Addressed
5.2.8
GPC-13354
Fixed an issue where, where the GlobalProtect HIP check did not detect the correct details of the
Malware Definition Version
and the
Malware Definition Date
for the CrowdStrike Falcon application, which caused the device to fail the HIP check.
Addressed
5.2.8
GPC-13276
Fixed an issue where when the GlobalProtect app was installed on ARM-based and Intel-based MacBooks, the app continued to stay in connecting state after the device woke up from sleep mode.
Addressed
5.2.8
GPC-13208
Fixed an issue where, when the GlobalProtect app was installed on Windows devices and split tunnel (optimized split tunneling) was configured to exclude any application traffic that relied on the loopback connection source IP address to be 127.0.0.1, the excluded application did not work as expected.
Addressed
5.2.8
GPC-13158
Fixed an issue where, when the GlobalProtect app was installed on Windows devices, the blue screen was displayed on the device after users logged in and connected to the app.
Addressed
5.2.8
GPC-13036
Fixed an issue where, when the GlobalProtect app was installed on Windows devices and exclusions for destination domain traffic were not enforced, the app did not open the browser for SAML authentication that was blocked by the GlobalProtect enforcer.
Addressed
5.2.8
GPC-12699
Fixed an issue where, when the GlobalProtect app was installed on Windows devices, the app was not disconnected from the tunnel when a user removed a smart card even when
Retain Connection on Smart Card Removal
was set to
No
in the GlobalProtect portal configuration.
Addressed
5.2.8
GPC-12982
Fixed an issue where, when the GlobalProtect app was installed on iOS devices, the app was unable to establish the connection on an IPv6 LTE network.
Addressed
5.2.8
GPC-12847
Fixed an issue where, when the GlobalProtect app was installed on iOS devices, users were prompted multiple times to enter their user credentials.
Addressed
5.2.8
GPC-12005
Fixed an issue where, when the GlobalProtect app was installed on iOS devices, the app displayed a connection failed error message and the device was reconnecting by itself to GlobalProtect.
Addressed
5.2.7
GPC-13501
Fixed an issue where, when the GlobalProtect app was deployed on managed Android devices through a mobile device management (MDM) system such as Microsoft Intune, the app was unable to automatically fetch a certificate after upgrading from GlobalProtect app 5.2.5 to GlobalProtect app 5.2.6.
Addressed
5.2.7
GPC-13479
Fixed an issue where the GlobalProtect HIP check did not detect the
Anti-Malware
information for the
Malware Definition Date
for the Carbon Black Cloud Sensor, which caused the device to fail the HIP check.
Addressed
5.2.7
GPC-13453
Fixed an issue where after a
Fresh Install
of GlobalProtect app 5.2.6 and using the embedded browser for Security Assertion Markup Language (SAML) authentication, authentication failed due to a script error when end users attempted to access the identity provider (IdP) web page. With this fix, after you installed GlobalProtect app 5.2.7, end users can access the idP web page using the embedded browser for SAML authentication without any script errors and connect to GlobalProtect.
Addressed
5.2.7
GPC-13452
Fixed an issue where after upgrading to GlobalProtect 5.2.6, the GlobalProtect client on the end user’s endpoint did not connect to the Best Available gateway.
Addressed
5.2.7
GPC-13446
Fixed an issue in GlobalProtect app for Android devices where the documented syntax of app_list key for Per-App VPN was not in sync with the App.
Addressed
5.2.7
GPC-13367
Fixed a performance issue where the GlobalProtect HIP process (PanGpHip) caused high CPU usage on devices.
Addressed
5.2.7
GPC-13366
Fixed an issue where, when the GlobalProtect app was installed on Windows 10 devices, the GlobalProtect HIP check did not detect the correct definition version, definition date, and year for the CrowdStrike Falcon application, which caused the device to fail the HIP check.
Addressed
5.2.7
GPC-13364
Fixed an issue where, when the GlobalProtect app was installed on Windows devices, the GlobalProtect HIP check did not detect information for
Signature Version
and
Last Updated
for the Carbon Black Cloud application, which caused the device to fail the HIP check.
Addressed
5.2.7
GPC-13303
Fixed an issue where the GlobalProtect HIP check did not detect the
Anti-Malware
information for the
Malware Definition Version
and
Malware Definition Date
for the FireEye Endpoint Agent, which caused the device to fail the HIP check.
Addressed
5.2.7
GPC-13275
Fixed an issue where, when the GlobalProtect app was installed on macOS devices running macOS Catalina 10.15.7 and Big Sur, the GlobalProtect HIP check did not detect the Microsoft Defender ATP real-time protection, which caused the device to fail the HIP check.
Addressed
5.2.7
GPC-13254
Fixed an issue where the GlobalProtect HIP check did not detect did not detect real-time protection for Traps version 4.2.3.41131, which caused the device to fail the HIP check.
Addressed
5.2.7
GPC-13206
Fixed an issue where the GlobalProtect app was configured to exclude application traffic such as Cisco Webex for split tunnel, excluded traffic was still forwarded through the tunnel. This issue occurred when the
Pre-logon Tunnel Rename Timeout
value was set to
-1
in the GlobalProtect portal configuration.
Addressed
5.2.7
GPC-13203
Fixed an issue where, when the GlobalProtect app was installed on Windows 10 devices and if the
Exceptions to Enforce GlobalProtect
list was configured with a subnet, existing connections to those hosts were not allowed even when the Enforcer status was enabled.
Addressed
5.2.7
GPC-13188
Fixed an issue where, when the GlobalProtect tunnel was established on macOS devices, the default route was installed before the excluded routes and then excluded traffic leaked into the tunnel periodically.
Addressed
5.2.7
GPC-13186
Fixed an issue where, when the GlobalProtect app was installed on macOS devices, the GlobalProtect HIP check did not detect the correct ESET Endpoint Antivirus definition version.
Addressed
5.2.7
GPC-13164
Fixed an issue where, when the GlobalProtect app was installed on macOS devices and when the tunnel disconnected and reestablished immediately, the split tunnel configuration based on the application was not adhered.
Addressed
5.2.7
GPC-13155
Fixed an issue where the GlobalProtect app received a notification when the connection falls back from IPSec to SSL even after setting
Display IPSec to SSL Fallback Notification
to
No
to disable the app from displaying the notification.
Addressed
5.2.7
GPC-13151
Fixed an issue where, when the GlobalProtect app was installed on macOS devices running Big Sur, end users were unable to access the internal domains when split tunnel based on the destination domain was configured with port 53.
Addressed
5.2.7
GPC-13150
Fixed an issue where the GlobalProtect HIP check did not detect the CrowdStrike Falcon application, which caused the device to fail the HIP check.
Addressed
5.2.7
GPC-13138
Fixed an issue where, after upgrading to GlobalProtect 5.2.6, the GlobalProtect HIP report was not complete, which caused the GlobalProtect client host device to fail the HIP check.
Addressed
5.2.7
GPC-13120
Fixed an issue where, when the GlobalProtect app was installed on macOS devices running macOS Catalina, the Configurable Maximum Transmission Unit for GlobalProtect Connections feature did not support fallback to kernel extension mode.
Addressed
5.2.7
GPC-13105
Fixed an issue where the GlobalProtect client version was transparently upgraded even when
Allow User to Upgrade GlobalProtect
was changed to
Disallow
from
Allow Transparently
.
Addressed
5.2.7
GPC-13089
Fixed an issue where, when the GlobalProtect app was installed on macOS devices, the
Choose An Identity
pop-up prompted end users to
Select a valid client certificate to connect to GlobalProtect
even when the
certificate-store-lookup
value was set to
machine
on the GlobalProtect portal.
Addressed
5.2.7
GPC-13084
Fixed an issue where, when the GlobalProtect app was installed macOS devices, did not detect the correct state for the Microsoft Defender ATP real-time protection, which caused the device to fail the HIP check.
Addressed
5.2.7
GPC-13064
Fixed an issue where the PanGPA.log file displayed the user credentials in (clear-text) data when the SAML identity provider such as Enforce Enboard was used for portal and gateway authentication.
Addressed
5.2.7
GPC-13061
Fixed an issue where the GlobalProtect service restarted multiple times when DLSA was configured in a dual stack environment.
Addressed
5.2.7
GPC-13057
Fixed an issue where the Server Name Indication (SNI) was not set in the requests used for the HIP reports and client logout messages.
Addressed
5.2.7
GPC-13051
Fixed an issue where, when the GlobalProtect app was installed on macOS devices, the app displayed that the end user was connected to the corporate network even when their device was not connected to
Internal Network
.
Addressed
5.2.7
GPC-13045
Fixed an issue where, when the GlobalProtect app was installed on Windows devices, the HIP check process was delayed and the tunnel was disconnected after 3 hours.
Addressed
5.2.7
GPC-13032
Fixed an issue where the GlobalProtect HIP check was unable to detect the
Anti-Malware
information for the
Last Full Scan Time
for the McAfee Total Protection Antivirus software application.
Addressed
5.2.7
GPC-13031
Fixed an issue where, when the GlobalProtect app was installed on Windows devices, the gateway did not generate the HIP report within a reasonable time period after upgrading to GlobalProtect app 5.2.5-c84.
Addressed
5.2.7
GPC-12996
Fixed an issue where, when the GlobalProtect app was installed on Windows devices, the app failed to connect to the GlobalProtect gateway using a cached configuration if the GlobalProtect portal was unreachable using client certificate authentication.
Addressed
5.2.7
GPC-12995
Fixed an issue where the GlobalProtect app displayed the following HIP notification even when Forcepoint Data Loss Prevention (DLP) was installed:
Forcepoint DLP agent is not installed into your system.
Addressed
5.2.7
GPC-12993
Fixed an issue where, when the GlobalProtect app was installed on Windows devices and the default browser was used for SAML authentication, the app opened the default browser for SAML authentication twice.
Addressed
5.2.7
GPC-12971
Fixed an issue where, when the GlobalProtect app was installed on Windows devices and configured in a full tunnel deployment, the GlobalProtect virtual adapter was activated with the default gateway set to 0.0.0.0. Starting with GlobalProtect app 5.2.7, you can set a valid default gateway on the adapter using one of the following methods:
  • Open the Windows Registry (enter
    regedit
    on the command prompt) and go to:
    HKEY_LOCAL_MACHINE\SOFTWARE\Palo Alto Networks\GlobalProtect\Settings
    Right-click the
    Settings
    folder, then select
    New
    String Value
    and enter
    fake-default-gateway
    string value. In the
    Value data
    field, enter
    yes
    .
  • Use the Windows Installer (Msiexec) to add the
    FIXDEFAULTGATEWAY=”yes”
    Msiexec parameter during the installation.
Addressed
5.2.7
GPC-12970
Fixed an issue where the GlobalProtect client was unable to establish a connection when the proxy domain name had the “HTTP” keyword.
Addressed
5.2.7
GPC-12950
Fixed an issue where, when the GlobalProtect app was installed on Windows devices and by changing the registry settings, the end user was able to connect to a different portal even when
Allow User to Change Portal Address
was set to
No
in the GlobalProtect portal configuration.
Addressed
5.2.7
GPC-12916
Fixed an issue where the GlobalProtect HIP check excluded the
Anti-Malware
information for FireEye but some data was still collected from the FireEye agent and actions were performed on the data in PanGPHip.exe.
Addressed
5.2.7
GPC-12903
Fixed an issue where, when the GlobalProtect app was installed on Windows devices while third-party software was running, the filter driver failed to load.
Addressed
5.2.7
GPC-12900
Fixed an issue where the routing flags for the Address Resolution Protocol (ARP) route were not reverted once GlobalProtect was disconnected. This issue caused the third-party VPN connections to fail.
Addressed
5.2.7
GPC-12781
Fixed an issue where, when the GlobalProtect app was deployed for pre-logon and if a pre-logon tunnel was not established, the subsequent gateway login using RADIUS two-factor authentication (2FA) failed.
Addressed
5.2.7
GPC-12701
Fixed an issue where, when the GlobalProtect app was installed on Windows devices, the app did not use the system proxy server to connect to the SAML identity provider.
Addressed
5.2.7
GPC-12682
Fixed an issue where, when the GlobalProtect app was installed on macOS devices running Catalina, end users experienced issues when connecting to Zoom on the internal network.
Addressed
5.2.7
GPC-12540
Fixed an issue where, when the GlobalProtect app was installed on Windows devices, the HIP Report was significantly delayed while checking information for the Windows Defender.
Addressed
5.2.7
GPC-12527
Fixed an issue where, when the GlobalProtect app was installed on Windows devices, the GlobalProtect HIP check did not detect the
Anti-Malware
information for the Carbon Black Response application.
Addressed
5.2.7
GPC-12386
Fixed an issue where after a GlobalProtect connection was established, the network interface was detected as public instead of domain due to timer issue with Network Location Awareness (NLA).
Addressed
5.2.7
GPC-11489
Fixed an issue where the GlobalProtect HIP check did not detect Patch Management information for the Microsoft Intune management extension software.
Addressed
5.2.7
GPC-12585
Fixed an issue where, when the GlobalProtect app was installed on iOS devices, the app was unable to establish a connection when the root CA certificate was configured in the portal configuration and also installed on the device.
Addressed
5.2.6
GPC-12956
Fixed an issue where, when the GlobalProtect app was installed on Android devices, users had to always manually select a certificate even when the certificate was pre-selected from AirWatch.
Addressed
5.2.6
GPC-12914
When the GlobalProtect app installed on Windows and macOS devices are connected to gateways on PAN-OS 8.0 or earlier releases, the HIP report generated by GlobalProtect will no longer be sent to the gateway. When using GlobalProtect app 5.2.6 with gateways enabled on PAN-OS 8.0 or earlier releases, you should disable
Collect HIP Data
.
This addressed issue was not included in GlobalProtect 5.2.5-c84.
Addressed
5.2.6
GPC-12899
Fixed an issue where, when the GlobalProtect app was installed on macOS devices and when
Save User Credentials
was set to
No
, the username field was already populated with the username for the machine certificate when gateway authentication did not use certificate-based authentication.
This addressed issue was not included in GlobalProtect 5.2.5-c84.
Addressed
5.2.6
GPC-12875
Fixed an issue where, when the GlobalProtect app was installed on macOS devices running macOS Catalina 10.15.7 and Big Sur, unusual DNS server entries were found after the system woke up.
Addressed
5.2.6
GPC-12866
Fixed an issue where, when the GlobalProtect app was installed on Windows 10 devices, users experienced multiple transparent software upgrade issues on the device.
Addressed
5.2.6
GPC-12859
Fixed an issue where, when the GlobalProtect app was installed on Windows 10 devices, the PanGPS.log file flushed out quickly.
Addressed
5.2.6
GPC-12854
Fixed an issue where, when the GlobalProtect app was installed on macOS devices running Big Sur and split tunnel was configured to exclude application traffic such as Zoom, some excluded traffic were still forwarded through the tunnel.
Addressed
5.2.6
GPC-12853
Fixed an issue where the GlobalProtect app did not perform network discovery and reconnect to the internal network when the primary IP address was changed.
Addressed
5.2.6
GPC-12841
Fixed an issue where, when the GlobalProtect app was installed on the end user’s device and System Center Configuration Manager (SCCM) was used to set the
PORTAL
and
CANCHANGEPORTAL
values to
no
from the Windows Installer (Msiexec), the end user was unable to connect to the app when logging in for the first time.
Addressed
5.2.6
GPC-12832
Fixed an issue where the GlobalProtect pre-logon tunnel was unnecessarily disconnected when switching from pre-logon mode to user-logon mode.
This addressed issue was not included in GlobalProtect 5.2.5-c84.
Addressed
5.2.6
GPC-12822
Fixed an issue where, the GlobalProtect HIP check did not detect the correct
Disk Encryption
for the Bitlocker Drive Encryption, which caused the device to fail the HIP check.
This addressed issue was not included in GlobalProtect 5.2.5-c84.
Addressed
5.2.6
GPC-12819
Fixed an issue where, when the GlobalProtect app was installed on Windows devices, the GlobalProtect HIP check took longer than expected to collect the HIP information for the Sentinel Agent anti-malware software leading up to an inaccurate HIP report.
This addressed issue was not included in GlobalProtect 5.2.5-c84.
Addressed
5.2.6
GPC-12818
Fixed an issue where, when the GlobalProtect app was installed on macOS devices, the GlobalProtect HIP check did not detect the Elastic Security Endgame Sensor 3.x Anti-Malware application, which caused the device to fail the HIP check.
Addressed
5.2.6
GPC-12814
Fixed an issue where the GlobalProtect app displayed a script error instead of the GlobalProtect embedded browser Security Assertion Markup Language (SAML) login page when users tried to connect to the app through SAML authentication when Okta was used as the identity provider (ldP). This issue occurred after upgrading from GlobalProtect app 5.2.3 to GlobalProtect app 5.2.5.
Addressed
5.2.6
GPC-12807
Fixed an issue where the GlobalProtect app was unable to establish a connection and the GlobalProtect service continuously restarted with an inactive message that was displayed on the GlobalProtect agent after a system reboot.
Addressed
5.2.6
GPC-12797
Fixed an issue where, when the GlobalProtect app was installed on Android endpoints and users connect in user-logon mode, the VPN connection failed when users switched from an external network to an internal network.
Addressed
5.2.6
GPC-12793
Fixed an issue where, when the GlobalProtect app was installed on macOS devices and after the device was rebooted, the app attempted to connect but failed. As a result, users had to disconnect and then reconnect to the app.
Addressed
5.2.6
GPC-12792
Fixed an issue where, when the GlobalProtect app was installed on Windows devices, the GlobalProtect HIP check did not detect the Microsoft Defender ATP software, which caused the device to fail the HIP check.
Addressed
5.2.6
GPC-12791
Fixed an issue where, when the GlobalProtect app was installed on macOS devices, the GlobalProtect HIP check did not detect the correct date and year for the Microsoft Defender ATP software, which caused the device to fail the HIP check.
Addressed
5.2.6
GPC-12782
Fixed an issue where, when the GlobalProtect app was installed on Windows devices, the app was unable to translate the CA certificate that contained unicode characters for certificate authentication, and as a result, client certificate authentication failed.
Addressed
5.2.6
GPC-12780
Fixed an issue where, when the GlobalProtect app was installed on Windows devices, the GlobalProtect HIP check did not detect the CrowdStrike 6.16 application, which caused the device to fail the HIP check.
Addressed
5.2.6
GPC-12770
Fixed an issue where, when the GlobalProtect app was installed on macOS devices running Big Sur, the GlobalProtect HIP check did not detect the correct date and year for the Microsoft Defender ATP real-time protection, which caused the device to fail the HIP check.
Addressed
5.2.6
GPC-12751
Fixed an issue where, when the GlobalProtect app was installed on macOS devices running Big Sur, the GlobalProtect HIP process (PanGpHip) crashed multiple times and the gateway was disconnected.
Addressed
5.2.6
GPC-12748
Fixed an issue where the GlobalProtect authentication failed when the new password contained the (+) character.
Addressed
5.2.6
GPC-12732
Fixed an issue where the GlobalProtect app displayed a script error instead of the GlobalProtect embedded browser Security Assertion Markup Language (SAML) login page when users tried to connect to the app through SAML authentication when Okta was used as the identity provider (ldP).
Addressed
5.2.6
GPC-12731
Fixed an issue where, when the GlobalProtect app was installed on Windows devices and
Save User Credentials
was enabled, users were prompted for credentials for every alternate gateway authentication when SAML was used as the portal authentication.
Addressed
5.2.6
GPC-12728
Fixed an issue where, when the GlobalProtect app was installed on Windows devices, the GlobalProtect HIP check did not detect the
Anti-Malware
information for the Morphisec Protector software, which caused the device to fail the HIP check.
Addressed
5.2.6
GPC-12720
Fixed an issue where, when the GlobalProtect app was installed on iOS devices and the portal was down or unreachable, the app displayed an error message when the app used the cached portal client configuration.
Addressed
5.2.6
GPC-12716
Fixed an issue where, when the GlobalProtect app was installed on macOS devices and after upgrading from GlobalProtect app 5.2.4 to GlobalProtect 5.2.5, the app attempted to reconnect when the connect method was set to On-Demand mode.
Addressed
5.2.6
GPC-12714
Fixed an issue where, when the GlobalProtect app was installed on Windows, the app did not identify the firewall settings for Kaspersky Endpoint Security.
Addressed
5.2.6
GPC-12689
Fixed an issue where, when the GlobalProtect app was installed on macOS devices, the GlobalProtect HIP check did not detect Symantec Endpoint Protection 14.3 real-time protection, which caused the device to fail the HIP check.
Addressed
5.2.6
GPC-12630
Fixed an issue where users established a GlobalProtect connection to Prisma Access but failed to connect to a manually selected Prisma Access gateway.
Addressed
5.2.6
GPC-12607
Fixed an issue where, when the GlobalProtect app was installed on Windows devices and
Resolve All FQDNs Using DNS Servers Assigned by the Tunnel
was set to
Yes
, DNS resolution failed in a dual stack environment.
Addressed
5.2.6
GPC-12603
Fixed an issue where users established a GlobalProtect connection to Prisma Access but failed to connect to a manually selected Prisma Access gateway when upgrading to GlobalProtect app 5.2.5.
Addressed
5.2.6
GPC-12601
Fixed an issue where information about the manual gateway was included in the portal message in the PanGPA.log file.
Addressed
5.2.6
GPC-12596
Fixed an issue where, when the GlobalProtect app was installed on Windows devices, the GlobalProtect HIP check did not detect the
Real-Time Protection
status for the ESET Endpoint Antivirus, which caused the device to fail the HIP check.
Addressed
5.2.6
GPC-12570
Fixed an issue where, when the GlobalProtect app was installed on Windows devices and split tunnel was configured based on the destination domain, IPv6 traffic was forwarded through the tunnel.
Addressed
5.2.6
GPC-12569
Fixed an issue where, when the GlobalProtect app was installed on Windows devices, the pre-logon tunnel was not renamed after users logged in to the device through SAML authentication.
Addressed
5.2.6
GPC-12568
Fixed an issue where the GlobalProtect app displayed the following notification when
Connect with SSL Only
was enabled by you or the end user:
The network connection is unreliable and GlobalProtect reconnected using an alternate method. You may experience slowness when accessing the internet or business applications.
With this fix, this notification will display only when GlobalProtect falls back to using SSL after attempting IPSec. If you specified the amount of time (in hours) during which you want the GlobalProtect app to
Automatically Use SSL When IPSec Is Unreliable
for example 5 hours, the app will not display this notification during the specified time period because it will not attempt to establish an IPSec tunnel and instead establish an SSL tunnel.
Addressed
5.2.6
GPC-12567
Fixed an issue where, when the GlobalProtect app was installed on Windows devices, the pre-logon tunnel was not renamed after users logged in to the device through SAML authentication.
Addressed
5.2.6
GPC-12565
Fixed an issue where the GlobalProtect app did not display the proper authentication message for the login screen when the RSA token was not synchronized. This issue occurred when GlobalProtect was used with seamless RSA authentication.
Addressed
5.2.6
GPC-12562
Fixed an issue where, when the GlobalProtect app was installed on Windows devices, the DNS short name resolution was not queried with all the DNS suffixes present on the client machine.
Addressed
5.2.6
GPC-12559
Fixed an issue where, when the GlobalProtect app was installed on Windows devices, the app delayed establishing a connection to the gateway for 90 seconds because of the delay in setting up the IP address on the virtual adapter.
Addressed
5.2.6
GPC-12558
Fixed an issue where, when the GlobalProtect app was installed on macOS devices running macOS Catalina 10.15.7, the GlobalProtect HIP check did not detect the Carbon Black Cloud application, which caused the device to fail the HIP check.
Addressed
5.2.6
GPC-12543
Fixed an issue where GlobalProtect parsed the external gateways from the portal configuration and each gateway was resolved individually and thereby increased the time to finish DNS resolution for all the external gateways. With this fix, GlobalProtect will now resolve only the first external gateway at the beginning of network discovery, and then resolve all the external gateways (auto discovery) at the same time. This can help to reduce the time for DNS resolution.
Addressed
5.2.6
GPC-12507
Fixed an issue where, when the GlobalProtect app was installed on Windows devices, the character size of the pre-login page was difficult to read on high-resolution. With this fix, users now have the option to
Zoom In
,
Zoom Out
, and
Restore Default Zoom
when they connect to the app through SAML authentication using Okta as the ldP.
Addressed
5.2.6
GPC-12499
Fixed an issue where, when the GlobalProtect app was installed on macOS devices, the GlobalProtect agent restarted when the system extensions were loaded.
Addressed
5.2.6
GPC-12466
Fixed an issue where, when the GlobalProtect app was installed on macOS devices running 10.14.6, the GlobalProtect HIP check did not detect the
Anti-Malware
information for the Carbon Black Endpoint Detection and Response application, which caused the device to fail the HIP check.
Addressed
5.2.6
GPC-12465
Fixed an issue where, when the GlobalProtect app was installed on macOS devices, the GlobalProtect HIP check did not detect correct the
Last Full Scan Time
information for the Symantec Endpoint Protection, which caused the device to fail the HIP check.
Addressed
5.2.6
GPC-12447
Fixed an issue where, when the GlobalProtect app was installed on macOS devices running macOS Catalina 10.15.7 and Big Sur and when the pre-logon tunnel was established to the internal gateway, the Enforcer status was enabled.
Addressed
5.2.6
GPC-12442
Fixed an issue where, when the GlobalProtect app was installed on macOS devices running Big Sur, the app failed to connect to the portal or gateway after upgrading from GlobalProtect app 5.0.9 to GlobalProtect 5.2.4.
Addressed
5.2.6
GPC-12440
Fixed an issue where, when the GlobalProtect app was installed on macOS devices, the GlobalProtect HIP check did not detect the
Disk Encryption
information for the enumerated disks, which caused the device to fail the HIP check.
Addressed
5.2.6
GPC-12385
Fixed an issue where, when the GlobalProtect app was installed on Linux devices, the GlobalProtect HIP check did not detect the CrowdStrike 6.16 application, which caused the device to fail the HIP check.
Addressed
5.2.6
GPC-12377
Fixed an issue where, when the GlobalProtect app was installed on Windows devices, the app did not display the GlobalProtect system tray icon after the explorer.exe application was restarted from the Task Manager.
Addressed
5.2.6
GPC-12356
Fixed an issue where, when the GlobalProtect app was installed on Windows devices, the GlobalProtect tunnel was disconnected after the device woke up from Modern Standby mode.
Addressed
5.2.6
GPC-12352
Fixed an issue where, when the GlobalProtect app was installed on Windows devices, the GlobalProtect HIP check did not detect the
Real-Time Protection
status for the ESET Endpoint Antivirus, which caused the device to fail the HIP check.
Addressed
5.2.6
GPC-12293
Fixed an issue where, the GlobalProtect HIP check did not detect the correct
Last Full Scan Time
information for SenitnelOne Antivirus 4.4.2, which caused the device to fail the HIP check.
Addressed
5.2.6
GPC-12278
Fixed an issue where, when the GlobalProtect app was configured for split tunnel based on the destination domain, the fully qualified domain names were case-sensitive when the number of inclusions and exclusions added to the list was more than eight entries.
Addressed
5.2.6
GPC-12265
Fixed an issue where, when the GlobalProtect app was installed on Windows devices, the user interface of the GlobalProtect agent was unresponsive when users were prompted to enter their one-time password (OTP).
Addressed
5.2.6
GPC-12252
Fixed an issue where users were not prompted for their login credentials after using Remote Desktop Protocol (RDP) to connect to the GlobalProtect app and they were disconnected after the grace period expired.
Addressed
5.2.6
GPC-12248
Fixed an issue where, when the GlobalProtect app was installed on Windows devices, the web interface did not display the normal window size when seamless soft-token authentication was used on a high display resolution (3840 X 2160) system. This issue occurred when the
auth-api
value was set to
yes
in the Windows registry.
This addressed issue was not included in GlobalProtect 5.2.5-c84.
Addressed
5.2.6
GPC-12235
Fixed an issue where, when the GlobalProtect app was installed on Windows devices and after the GlobalProtect agent was installed as the SYSTEM user through SCCM or Microsoft Intune, the repair message pops-up for modern devices and failure or reconnection message pop-ups for normal devices.
Addressed
5.2.6
GPC-12212
Fixed an issue where, when the GlobalProtect app was installed on Windows devices and split tunnel was configured to exclude application traffic such as Microsoft Teams and Zoom, some excluded traffic was still forwarded through the tunnel.
Addressed
5.2.6
GPC-12190
Fixed an issue where, when the GlobalProtect app was installed on Windows devices, the GlobalProtect enforcer blocked SAML authentication after the endpoint woke up from sleep mode.
This addressed issue was not included in GlobalProtect 5.2.5-c84.
Addressed
5.2.6
GPC-12041
Fixed an issue where, when the GlobalProtect app was installed on macOS devices, the GlobalProtect HIP check did not detect the correct
Anti-Malware
information for the
Last Full Scan Time
for Sophos Endpoint Protection, which caused the device to fail the HIP check.
Addressed
5.2.6
GPC-11987
Fixed an issue where, when the GlobalProtect app was installed on Windows devices and split tunnel was configured to exclude destination domain traffic that included a wildcard character (*) for domain names, excluded traffic is still forwarded through the tunnel.
Addressed
5.2.6
GPC-11964
Fixed an issue where, when the GlobalProtect app was installed on macOS devices and the
No direct access to local network
option was enabled on the gateway, the default route was deleted for the interface to the local gateway when the IPv6 address was changed that caused GlobalProtect to disconnect.
Addressed
5.2.6
GPC-11916
Fixed an issue where, when the GlobalProtect app was installed on iOS devices, the app displayed the
The connection has failed
error message when changing from WiFi to a LTE network.
Addressed
5.2.6
GPC-11568
Fixed an issue where, when the GlobalProtect app was installed on Windows devices, traffic was blocked for 25-45 seconds for some users while generating the HIP report.
Addressed
5.2.6
GPC-11484
Fixed an issue where, when the GlobalProtect app was installed on Windows, macOS, and Linux devices, the HIP process collected information about all supported endpoint security software even when
HIP Data Collection
was configured on the portal to exclude categories, vendors, and products.
This addressed issue was not included in GlobalProtect 5.2.5-c84.
Addressed
5.2.6
GPC-11450
Fixed an issue where, when the GlobalProtect app was installed on macOS devices running macOS Catalina 10.15.7 and Big Sur, client certificate authentication failed when using a common access card (CAC).
Addressed
5.2.6
GPC-11367
Fixed an issue where the GlobalProtect HIP check incorrectly detected the
Anti-Malware
information for the Definition Version for Cybereason.
This addressed issue was not included in GlobalProtect 5.2.5-c84.
Addressed
5.2.6
GPC-11311
Fixed an issue where, when the GlobalProtect app was installed on Linux devices, the output
[1]+ Done $PANGPA start
was displayed when users executed commands such as
ls /etc/hostname
or
echo hi
in the command prompt.
Addressed
5.2.6
GPC-11281
Fixed an issue where, when the GlobalProtect app was installed on macOS devices, the app automatically switched to the graphics processor on the user’s device during SAML authentication.
Addressed
5.2.6
GPC-10650
Fixed an issue where, when the GlobalProtect app was installed on Windows devices, the transparent software upgrade failed for the GlobalProtect app.
Addressed
5.2.6
GPC-11916
Fixed an issue where, when the GlobalProtect app was installed on iOS devices, the app displayed
The connection has failed
error message when changing from WiFi to a LTE network.
Addressed
5.2.5
GPC-12353
Fixed an issue where, when the GlobalProtect app was installed on macOS devices running Big Sur, the app was unable to establish a connection when the Netskope Client was installed on the system.
Addressed
5.2.5
GPC-12266
Fixed an issue where, when the GlobalProtect app was installed on Windows devices, the app was disconnected from the tunnel and performed a network discovery after waking up from Modern Standby mode.
Addressed
5.2.5
GPC-12264
Fixed an issue where, when the GlobalProtect app was installed on Windows devices, the app failed to establish a connection when the SIP softphone client was installed on the system.
Addressed
5.2.5
GPC-12243
Fixed an issue where, when the gateway was manually selected for the first time instead of the Best Available gateway, any subsequent connections to the Best Available gateway allowed end users to connect to the manually selected gateway rather than the Best Available gateway.
Addressed
5.2.5
GPC-12203
Fixed an issue where the
About GlobalProtect
dialog did not display the copyright symbol when the system language was German.
Addressed
5.2.5
GPC-12202
Fixed an issue where the
Custom Password Expiration Message (LDAP Authentication Only)
notification displayed grammatical errors when the system language was German.
Addressed
5.2.5
GPC-12185
Fixed an issue where the GlobalProtect app detected two or more internal gateways and all the gateways required users to authenticate through SAML authentication, the app stopped all operations following SAML authentication with the first gateway.
Addressed
5.2.5
GPC-12174
Fixed an issue where, when the GlobalProtect app was installed on macOS devices running macOS 10.15 or 11.0, the GlobalProtect HIP check did not detect the CrowdStrike Falcon application, which caused the device to fail the HIP check.
Addressed
5.2.5
GPC-12173
Fixed an issue where, when the GlobalProtect app was installed on macOS devices, the GlobalProtect HIP check did not detect the CrowdStrike 6.11 application, which caused the device to fail the HIP check.
Addressed
5.2.5
GPC-12154
Fixed an issue where the ADUC application and computer console experienced slowness after upgrading from GlobalProtect app 5.1.3 to 5.2.3.
Addressed
5.2.5
GPC-12131
Fixed an issue where, when the GlobalProtect app was installed on macOS devices, the GlobalProtect HIP check did not detect the CrowdStrike 6.12 application, which caused the device to fail the HIP check.
Addressed
5.2.5
GPC-12105
Fixed an issue where, when the GlobalProtect app was installed on macOS devices and split tunnel was configured based on the application, some traffic did not follow the split tunnel configuration on applications such as Microsoft Teams.
Addressed
5.2.5
GPC-12104
Fixed an issue where the GlobalProtect client on the end user’s endpoint did not connect to the Best Available gateway after the endpoint woke up from sleep mode. This issue occurred when SAML authentication was used and in the auto-scaled gateway scenario. With this fix, the GlobalProtect client can also connect to the Best Available gateway in the auto-scaled gateway scenario.
Addressed
5.2.5
GPC-12097
Fixed an issue where, when the GlobalProtect app was installed on Windows devices, the clear text password was visible through a memory dump when using the system browser for SAML authentication.
Addressed
5.2.5
GPC-12066
Fixed an issue where, when split tunnel was configured based on the destination domain and
Both Network Traffic and DNS
was selected, users experienced a delay when accessing the exclusions applied to the DNS traffic and the associated network application traffic for that domain.
Addressed
5.2.5
GPC-12059
Fixed an issue where the default route for the tunnel was removed shortly after establishing the tunnel.
Addressed
5.2.5
GPC-12050
Fixed an issue where the GlobalProtect HIP check did not correctly detect the
Last Full Scan Time
information for the Windows Defender on Windows endpoints, which caused the endpoints to fail the HIP check.
Addressed
5.2.5
GPC-12044
Fixed an issue where, after the GlobalProtect app was upgraded to release 5.1.6, the GlobalProtect virtual adapter was unable to be setup properly when using laptop docking stations.
Addressed
5.2.5
GPC-12043
Fixed an issue where, when the GlobalProtect app was installed on Windows devices and used a smart card for client certificate authentication, the number of prompts used between the portals were different.
Addressed
5.2.5
GPC-12031
Fixed an issue where, when the GlobalProtect app was installed on Windows devices, the GlobalProtect HIP check did not detect the whether the
Firewall
software was enabled, which caused the endpoints to fail the HIP check.
Addressed
5.2.5
GPC-12015
Fixed an issue where the GlobalProtect HIP check incorrectly detected the
Anti-Malware
information for the
Definition Version
for Sophos Endpoint Protection.
Addressed
5.2.5
GPC-12004
Fixed an issue where the GlobalProtect HIP check incorrectly detected the
Anti-Malware
information for the
Definition Version
for Cisco Advanced Malware Protection (AMP).
Addressed
5.2.5
GPC-11995
Fixed an issue where the GlobalProtect HIP check incorrectly detected the
Anti-Malware
information for the
Definition Version
for Sophos Endpoint Protection version 10.0.0.
Addressed
5.2.5
GPC-11938
Fixed an issue where, when the GlobalProtect app was installed on Linux devices, the app was unable to automatically launch due to the
Cannot connect to local GPD service
error message.
Addressed
5.2.5
GPC-11932
Fixed an issue where the GlobalProtect HIP check incorrectly detected the
Anti-Malware
information for the
Last Full Scan Time
for the McAfee Total Protection Antivirus software application.
Addressed
5.2.5
GPC-11931
Fixed an issue where, when the GlobalProtect app was installed on Windows devices, the GlobalProtect virtual interface adapter continued to stay enabled when connected to an internal network. Subsequently, the app failed to establish a tunnel connection with an external gateway on the external network due to the
Failed to get default route entry
error message, which caused the virtual adapter activation to fail.
Addressed
5.2.5
GPC-11911
Fixed an issue where, when the GlobalProtect app was installed on Windows devices, the
Custom Password Expiration Message (LDAP Authentication Only)
notification is blank after you changed the message setting.
Addressed
5.2.5
GPC-11876
Fixed an issue where, when the GlobalProtect app was installed on Windows devices, the command string for
pre-vpn-connect
or
post-vpn-connect
contained arguments with one or more whitespace characters, which caused the built-in GlobalProtect app upgrade to fail.
Addressed
5.2.5
GPC-11875
Fixed an issue where, when the GlobalProtect app was installed on macOS devices running macOS Catalina 10.15.7, the GlobalProtect HIP check did not detect the
Anti-Malware
information for the
Last Full Scan Time
for the McAfee Total Protection Antivirus software application version 4.9.2, which caused the device to fail the HIP check.
Addressed
5.2.5
GPC-11712
Fixed an issue where, when the GlobalProtect app was installed on macOS devices, the GlobalProtect HIP check did not detect the
Patch-Management
software for the JAMF Pro software application, which caused the device to fail the HIP check.
Addressed
5.2.5
GPC-11686
Fixed an issue where the HIP report did not contain the correct
Last Full Scan Time
information for the AVG Internet Security software.
Addressed
5.2.5
GPC-11648
Fixed an issue where, when the GlobalProtect app was installed on macOS devices, the GlobalProtect HIP check did not detect the
Patch-Management
software for the JAMF Pro software application, which caused the device to fail the HIP check.
Addressed
5.2.5
GPC-11606
Fixed an issue where, when the GlobalProtect app was installed on Windows devices, the GlobalProtect HIP check did not detect the Avast Antivirus software version 20.x. After upgrading from Antivirus software version 18.x, the GlobalProtect HIP check did detect the Avast Antivirus software version 20.x.
Addressed
5.2.5
GPC-11460
Fixed an issue where, when the GlobalProtect app was installed on Windows devices, the GlobalProtect HIP check did not detect the
Anti-Malware
information for the
Last Full Scan Time
for the McAfee Total Protection Antivirus software.
Addressed
5.2.5
GPC-11440
Fixed an issue where, when the GlobalProtect app was installed on Linux devices, the GlobalProtect agent stopped running after the device initially connected to the portal or gateway.
Addressed
5.2.5
GPC-11367
Fixed an issue where the GlobalProtect HIP check incorrectly detected the
Anti-Malware
information for the
Definition Version
for Cybereason.
Addressed
5.2.5
GPC-11888
Fixed an issue where, when the GlobalProtect app was installed on iOS devices, the app was unable to establish the connection on a 4G LTE network when the gateway was resolved to IPv6 only.
Addressed
5.2.5
GPC-11684
Fixed an issue where, when the GlobalProtect app was installed on iOS devices, VPN tunnel restoration was not supported when the portal was configured in
Always On
mode.
Addressed
5.2.5
GPC-11633
Fixed an issue where, when the GlobalProtect app was installed on iOS devices, the app displayed
No available network
even when the network was available.
Addressed
5.2.4
GPC-12069
Fixed an issue where, when the GlobalProtect app was installed on Chromebooks, the selection criteria for the portal agent configuration failed when the
OS
configured in the
Config Selection Criteria
was specified as
Chrome
.
Addressed
5.2.4
GPC-11989
Fixed an issue where SAML authentication was blocked because the GlobalProtect enforcer did not parse all the fully qualified domain names configured in the FQDN exclusions list.
Addressed
5.2.4
GPC-11894
Fixed an issue where, when the GlobalProtect app was installed on Windows devices with the
Resolve All FQDNs Using DNS Servers Assigned by the Tunnel (Windows Only)
set to
Yes
and after the portal configuration refresh interval timer was reached, the DNS queries were sent to both interfaces.
Addressed
5.2.4
GPC-11865
Fixed an issue where the
GlobalProtect Update
pop-up dialog displayed grammatical errors.
Addressed
5.2.4
GPC-11868
Fixed a rare issue where the PanGPS log file was not rotated and it caused the PanGPS.log file to consume a large amount of disk space.
Addressed
5.2.4
GPC-11819
Fixed an issue where the GlobalProtect app could not properly exclude multicast routes specified in the exclude list.
Addressed
5.2.4
GPC-11805
Fixed an intermittent issue where, when split tunnel was configured based on the destination domain and application, users were not allowed access to specific fully qualified domain names after changing the network.
Addressed
5.2.4
GPC-11804
Fixed an issue where, when the GlobalProtect app was installed on Windows and macOS devices with the
Split-Tunnel Option
enabled for both network traffic and DNS, the DNS queries were sent to both interfaces.
Addressed
5.2.4
GPC-11797
Fixed an issue where, when the GlobalProtect app was installed on macOS Big Sur devices and split tunnel was configured based on the application, the app was unable to connect to applications such as Zoom.
Addressed
5.2.4
GPC-11792
Fixed an issue where, when the GlobalProtect app was installed on macOS devices running macOS Catalina 10.15.7 or later, the app did not accept character input when using the on-screen Accessibility Keyboard required for remote learning.
Addressed
5.2.4
GPC-11784
Fixed an issue where the GlobalProtect app was configured with
Pre-logon then On-demand
mode and if the network was changed or the network connection was lost during pre-logon tunnel mode, the pre-logon tunnel was not able to reconnect to the app after the machine was connected to the network.
Addressed
5.2.4
GPC-11781
Fixed an issue where, when the GlobalProtect app was installed on Windows devices, the app was disconnected from the tunnel after the
Pre-logon Tunnel Rename Timeout
expired even when users successfully authenticated to the gateway through either SAML authentication or RADIUS for two-factor authentication.
Addressed
5.2.4
GPC-11777
Fixed an issue where the GlobalProtect app will not perform network discovery due to a network change event when the app was connected to the internal gateway without a tunnel connection.
Addressed
5.2.4
GPC-11749
Fixed an issue where, when the GlobalProtect app was installed on Linux devices, DNS resolution failed when the app was connected on Ubuntu 20.04.
Addressed
5.2.4
GPC-11726
Fixed an issue where the GlobalProtect client continued to stay in connecting state even when SAML authentication was configured to establish a connection to the portal or gateway.
Addressed
5.2.4
GPC-11723
Fixed an issue where, after you installed the GlobalProtect app on macOS devices using the client upgrade prompt, a kernel panic occurred on the macOS device.
Addressed
5.2.4
GPC-11707
Fixed an issue where the GlobalProtect app continued to stay in connecting state after failing to meet the
Config Selection Criteria
configured on the portal following a successful SAML authentication.
Addressed
5.2.4
GPC-11638
Fixed an issue where, when the GlobalProtect app was installed on Windows 10 devices and network connectivity was enabled in Modern Standby, the tunnel failed to be restored after waking up from sleep mode.
Addressed
5.2.4
GPC-11587
Fixed an issue where, when the GlobalProtect app was installed on Windows devices and Duo Security multi-factor authentication (MFA) was used to authenticate users through SAML authentication on the identity provider (ldP), the app did open an embedded browser using Connect Before Logon but the content incorrectly displayed.
Addressed
5.2.4
GPC-10200
Fixed an issue where, when the GlobalProtect app was installed on Android devices, the app failed to reconnect and continued to stay in connecting state. Users had to close and launch the app to establish the connection.
Addressed
5.2.4
GPC-11669
Fixed an issue where, when the GlobalProtect app was installed on iOS devices, the app continued to stay in connecting state after changing the network type and failed to automatically reconnect.
Addressed
5.2.3
GPC-11706
Fixed an issue where, when the GlobalProtect app was installed on Windows devices, the GlobalProtect tunnel could not send traffic after the system woke up from sleep mode.
Addressed
5.2.3
GPC-11694
Fixed an issue where the GlobalProtect tunnel was disconnected when the server sent packets greater than 1524.
Addressed
5.2.3
GPC-11683
Fixed an issue where, when the GlobalProtect app was installed on macOS devices, the GlobalProtect virtual interface was locally unreachable.
Addressed
5.2.3
GPC-11660
Fixed an issue on the GlobalProtect agent when the response from the gateway pre-login included the error status and an empty message, but the GlobalProtect client was not expected to receive the response from the pre-login with the error status and an empty message. With this fix, the GlobalProtect client is configured to handle the error status and the empty message response from the gateway pre-login when the minimum version is set to TLSv1.2 in the SSL/TLS service profile.
Addressed
5.2.3
GPC-11659
Fixed an issue where, when the GlobalProtect app was installed on Android devices, the gateway was randomly disconnected and users cannot reconnect until they force stop or force start the app.
Addressed
5.2.3
GPC-11656
Fixed an issue where, after you upgraded the GlobalProtect app to release 5.2.1 or release 5.2.2 on macOS devices using the client upgrade prompt, a kernel panic occurred on the macOS device.
Addressed
5.2.3
GPC-11644
Fixed an issue where the HIP report did not contain the correct
Last Full Scan Time
information for the AVG Internet Security software.
Addressed
5.2.3
GPC-11643
Fixed an issue where, when the GlobalProtect app was installed on Android devices and when the
Allow Authentication with User Credentials OR Client Certificate
option was set to
Yes
on the portal, users were not able to authenticate to the portal with a valid client certificate. With this fix, users are now able to authenticate to the portal with a valid client certificate when the
Allow Authentication with User Credentials OR Client Certificate
option is set to
Yes
on the portal.
Addressed
5.2.3
GPC-11637
Fixed an issue where, when the GlobalProtect app was installed on Linux devices, the GUI version of GlobalProtect sometimes was unresponsive (for example, when the GNOME Shell was replaced).
Addressed
5.2.3
GPC-11616
Fixed an issue where, when the GlobalProtect app was installed on macOS devices, the GlobalProtect HIP check did not detect
Anti-Malware
information for Sophos Endpoint Protection version 10.0.0.
Addressed
5.2.3
GPC-11612
Fixed an issue where, when the GlobalProtect app was installed on Windows devices, the speed limit of the GlobalProtect adapter was set to a maximum of 100Mbps, With this fix, the speed limit of the GlobalProtect adapter is now set to a maximum of 2Gbps.
Addressed
5.2.3
GPC-11603
Fixed an issue where, when the GlobalProtect Android app was installed on Chromebooks, the app identified the operating system as Android instead of Chrome.
Addressed
5.2.3
GPC-11601
Fixed an issue where, when the GlobalProtect app was installed on iOS devices, the app was unable to establish the tunnel when the connection was on the mobile network.
Addressed
5.2.3
GPC-11594
Fixed an issue where, when the GlobalProtect app was installed on Linux devices, the GUI version of GlobalProtect hangs when multiple terminals were launched (in a multi-user target) or when one terminal had to be launched for the GUI version to launch.
Addressed
5.2.3
GPC-11569
Fixed an issue on Windows endpoints where, if the GlobalProtect app is configured with the Pre-logon (Always On) Connect Method with the
Pre-logon Tunnel Rename Timeout
value set to
-1
(or any other value) and users disable the app and reboot their endpoint, the pre-logon tunnel is up after they login. After the system reboots, the app is disabled but the virtual interface is enabled. With this fix, the app and the virtual interface are disabled after a system reboot.
Addressed
5.2.3
GPC-11538
Fixed an issue where, when the GlobalProtect app was installed on macOS devices running macOS Catalina, the GlobalProtect service restarted after a system reboot or when users logged out and logged in to the endpoint.
Addressed
5.2.3
GPC-11530
Fixed an issue where, when the GlobalProtect app was installed on Windows devices and the
No direct access to local network
option was enabled, users with administrator privileges were able to modify the routing table to bypass the VPN tunnel.
Addressed
5.2.3
GPC-11529
Fixed an issue where Connect Before Logon using Security Assertion Markup Language (SAML) authentication was used to log in to the Windows 10 endpoint, users were able to launch the command prompt from the authentication web browser.
Addressed
5.2.3
GPC-11527
Fixed an issue where, when the GlobalProtect app was installed on Windows endpoints and split tunnel was configured based on the application, handle leaks were observed by the GlobalProtect service.
Addressed
5.2.3
GPC-11525
Fixed an issue where the GlobalProtect app failed to connect to the portal or gateway in the Prisma Access network through the proxy.
Addressed
5.2.3
GPC-11524
Fixed an issue where, when the GlobalProtect app was deployed on managed Android devices through a mobile device management (MDM) system such as Microsoft Intune, the app hangs in
Connecting
state and the tunnel failed to be restored when users moved to a poor cell reception.
Addressed
5.2.3
GPC-11489
Fixed an issue where the GlobalProtect HIP check did not detect
Patch Management
information for the Microsoft Intune management extension software.
Addressed
5.2.3
GPC-11478
Fixed an issue where, when the GlobalProtect app was installed on macOS devices and the
No direct access to local network
option was enabled on the gateway, the access route to the default gateway was not properly masked.
Addressed
5.2.3
GPC-11466
Fixed an issue on Windows 10 endpoints where the Active Directory Users and Computers (ADUC) application experienced high latency when users established a GlobalProtect connection.
Addressed
5.2.3
GPC-11461
Fixed an issue where, after you upgraded and installed the GlobalProtect app, the app was unable to connect to the gateway due to the
Failed to get default route entry
error message.
Addressed
5.2.3
GPC-11448
Fixed an issue where the GlobalProtect app was unable to establish a connection to the gateway because the fully qualified domain name (FQDN) specified for the gateway mapped to a different IP address during network discovery and pre-login. With this fix, the app performed a network discovery again and connected to the
Best Available
gateway.
Addressed
5.2.3
GPC-11402
Fixed an issue where, when the GlobalProtect app was installed on Windows endpoints, the app was disconnected from the VPN tunnel after the pre-logon tunnel grace period expired even when users logged in to the endpoint and the pre-logon tunnel was successfully renamed. This issue occurred when two-factor authentication (2FA) was used.
Addressed
5.2.3
GPC-11393
Fixed an issue where, when the GlobalProtect app was installed on Windows devices, the app performed a second network discovery after gateway authentication was successful. This issue resulted in two authentication prompts (for example, the SAML authentication type) right after waking up from sleep mode.
Addressed
5.2.3
GPC-11395
Fixed an issue where, when the GlobalProtect app was installed on macOS devices running macOS Catalina 10.15.4, the GlobalProtect HIP check did not detect Symantec Endpoint Protection 14.3 real-time protection, which caused the device to fail the HIP check.
Addressed
5.2.3
GPC-11370
Fixed an issue where the GlobalProtect app selected the geographically distant gateway instead of the gateway with the faster response time. With this fix, the
Best Available
gateway is now determined by the assigned weight of the gateway.
Addressed
5.2.3
GPC-11349
Fixed an issue where the GlobalProtect HIP check incorrectly detected the
Anti-Malware
information for the
Engine Version
,
Definition Version
, and
Date
for the CrowdStrike Falcon application.
Addressed
5.2.3
GPC-11346
Fixed an issue where portal authentication failed due to the authentication failure during the
GlobalProtect App Config Refresh
configuration, which caused users to be locked out of the RSA device.
Addressed
5.2.3
GPC-11218
Fixed an issue where the GlobalProtect HIP check did not detect Symantec Endpoint Protection 14.3 real-time protection, which caused the device to fail the HIP check.
Addressed
5.2.3
GPC-11173
Fixed an issue where the GlobalProtect app was configured with
On-Demand
mode and continued to stay in connecting state even when manually switching to a different gateway failed. With this fix, the app will now display an error message when switching to a different gateway failed.
Addressed
5.2.3
GPC-11084
Fixed an issue where, when the GlobalProtect app was connected on Linux endpoints, the DNS content was removed from the
resolv.conf
file found in the
/etc
folder because the network was interrupted.
Addressed
5.2.3
GPC-10954
Fixed an issue in GlobalProtect for macOS endpoints where installing or upgrading the package using a MDM system such as JAMF Pro resulted in a GlobalProtect app initialization failure.
Addressed
5.2.3
GPC-10934
Fixed an issue where the original DNS suffixes were removed from the client machine and only the DNS suffixes from the gateway were applied.
Addressed
5.2.3
GPC-10831
Fixed an issue where, when the GlobalProtect app was installed on Windows devices, the GlobalProtect service modified the DNS suffix system list even when the gateway pushed an empty DNS suffix list.
Addressed
5.2.3
GPC-10200
Fixed an issue where, when the GlobalProtect app was installed on Android devices, the app failed to reconnect and continued to stay in connecting state. Users had to close and launch the app to establish the connection.
Addressed
5.2.2
GPC-11531
Fixed an issue where, when the GlobalProtect app was installed on iOS devices, the GlobalProtect service was started multiple times when users initiated the VPN connection from the iOS VPN settings.
Addressed
5.2.2
GPC-11479
Fixed an issue where the GlobalProtect app took more than 2 minutes to establish a connection when users installed the app for the fist time on macOS endpoints running macOS Catalina 10.15.4 or later. This issue occurred when the administrator did not select the
GlobalProtect System Extensions
check box during the installation.
Addressed
5.2.1
GPC-10476
Fixed an issue where in high bandwidth environments, the download speed through the GlobalProtect connection was slower than the upload speed.
Addressed
5.2.1
GPC-11464
Fixed an issue where, when the GlobalProtect app was deployed for Android on managed Chromebooks using the Google Admin console, the app disconnected and reconnected because the same managed configuration file was pushed from the Google Admin Console multiple times.
Addressed
5.2.1
GPC-11417
Fixed an issue for Android on Chromebooks where, if the GlobalProtect app was configured with the Always On connect method, the app did not automatically connect to the portal after users rebooted the system.
Addressed
5.2.1
GPC-11348
Fixed an issue where, when the GlobalProtect app was installed on Windows devices, the GlobalProtect client failed to rename the pre-logon tunnel to the user tunnel when SAML was used to authenticate users.
Addressed
5.2.1
GPC-11347
Fixed an issue where, when the GlobalProtect app was installed on Windows devices and a connection was established, high CPU usage (around 30 percent) was detected for the system process.
Addressed
5.2.1
GPC-10881
Fixed an issue, when the GlobalProtect app was installed on iOS devices with
Always On
mode as part of the VPN profile, the app frequently reported authentication errors. This issue occurred when the portal cache configuration was not saved successfully.
Addressed
5.2.1
GPC-9982
Fixed an issue, when the GlobalProtect app was installed on macOS endpoints running macOS Catalina 10.15 or later and HIP checks were enabled, the macOS endpoint displayed additional pop-ups to the user when GlobalProtect requested to access your Desktop, Documents, and Downloads folders.
Addressed
5.3.4
GPC-15068
A fix was made to address an OpenSSL infinite loop vulnerability in GlobalProtect app software ( CVE-2022-0778 ).
Addressed
5.3.4
GPC-14719
Fixed an issue where the GlobalProtect HIP check incorrectly detected the Anti-Malware information for the McAfee VirusScan Enterprise software application.
Addressed
5.3.3
GPC-14490
Fixed an issue where, when the GlobalProtect app was installed on Linux devices, the app stopped working when the user installed McAfee Endpoint Security on the devices.
Addressed
5.3.2
GPC-14334
Fixed an issue where, when the GlobalProtect app was installed on Linux devices, the users were unable to log in to the app due to authentication failure in the gateway pre-login stage.
Addressed
5.3.2
GPC-13929
Fixed an issue where, when the GlobalProtect app was installed on Linux devices, the app displayed segmentation fault warning messages. This issue occurred when the user upgraded the machine to Ubuntu 20.04.02 LTS.
Addressed
5.3.2
GPC-13815
Fixed an issue where, when the GlobalProtect app was installed on Linux devices, the app displayed erroneous HIP pop-up notifications such as old HIP notifications and garbled text.
Addressed
5.3.2
GPC-13805
Fixed an issue where, when the GlobalProtect app was installed on Linux devices, the GlobalProtect HIP report displayed encryption status as unencrypted even when encryption was complete.
Addressed
5.3.1
GPC-13788
Fixed an issue where, when the GlobalProtect app was installed on Linux devices and configured with On-Demand mode, the GUI version of GlobalProtect hangs in
Connecting
state after the device woke up from sleep mode.
Addressed
5.3.1
GPC-13507
Fixed an issue where, when the GlobalProtect app was installed on Linux devices, the GlobalProtect HIP check did not detect the correct definition date and year for the CrowdStrike Falcon application, which caused the device to fail the HIP check.
Addressed
5.3.1
GPC-13476
Fixed an issue where, when the GlobalProtect app was installed on Linux devices and when IPv4 was configured in the network interface card (NIC), the app was unable to establish a connection to the portal when the fully qualified domain name (FQDN) specified for the portal mapped to both IPv4 and IPv6 DNS entries.
Addressed
5.3.1
GPC-13378
Fixed an issue where, when the GlobalProtect app was installed on Linux devices, the hamburger menu on the status panel did not display the
Report an Issue
and
Welcome Page
options even when they were enabled in the GlobalProtect portal configuration.
Addressed
5.3.1
GPC-13343
Fixed an issue where, when the GlobalProtect app was installed on Red Hat Enterprise Linux 8.4 Linux devices, the hamburger menu on the status panel sometimes was not displayed correctly.
Addressed
5.3.1
GPC-13298
Fixed an issue where, when the GlobalProtect app was installed on Linux devices and the command-line interface (CLI) was used, the
echo $?
command returned a status code of
1
to indicate that the commands were unsuccessful.
Addressed
5.3.1
GPC-13274
Fixed an issue where, when the GlobalProtect app was installed with the Cortex XDR agent on Linux devices, the GlobalProtect HIP check incorrectly reported two
Anti-Malware
products such as
Traps
and
Cortex
instead of one product (for example,
Cortex
). The GlobalProtect HIP check also incorrectly reported the real-time protection status, which caused the device to fail the HIP check.
Addressed
5.3.1
GPC-13136
Fixed an issue where, when the GlobalProtect app was installed on Linux devices, the GlobalProtect system tray icon was not visible when using the dark background.
Addressed
5.3
GPC-12784
Fixed an issue where, when the GlobalProtect app was installed on Linux devices, the status of the
Disk Encryption
category displayed as
partial
because
unencrypted
was reported for the home partition on the device.
Addressed
6.0.10
GPC-20114
Fixed an issue where, when the GlobalProtect app was installed on devices running macOS, the certificate information was incorrect during the portal login phase causing authentication failure.
Addressed
6.0.10
GPC-20112
Fixed an issue where the GlobalProtect HIP check incorrectly detected Real time protection status for Kaspersky Endpoint Security, which caused the device to fail the HIP check.
Addressed
6.0.10
GPC-19966
Fixed an issue where the embedded browser was unable to load the Microsoft IdP login page for the users to authenticate to the GlobalProtect app.
Addressed
6.0.10
GPC-19948
Fixed an issue where connection to the GlobalProtect portal failed with the error
Username from CAS SSO response is different from the input.
Addressed
6.0.10
GPC-19924
Fixed an issue where the users faced intermittent connection issues while accessing GlobalProtect using an embedded browser.
Addressed
6.0.10
GPC-19901
Fixed an issue where, when the GlobalProtect app was installed on devices running macOS, the app got disconnected and reconnected intermittently.
Addressed
6.0.10
GPC-19833
Fixed an issue where, when the GlobalProtect app was installed on Windows devices, the Smart card (Yubikey) authentication did not work when the device woke up from sleep mode.
Addressed
6.0.10
GPC-19829
Fixed an issue where the manual gateway login failed when users tried to login using their username and password.
Addressed
6.0.10
GPC-19818
Fixed an issue where, when the GlobalProtect app was installed on devices running macOs and when the Enforcer was enabled, Jamf connect was not working after the MacBook was rebooted. Users had to log in manually.
Addressed
6.0.10
GPC-19756
Fixed an issue where, when the GlobalProtect app was installed on devices running macOS, the GlobalProtect app got stuck in the
Connecting
status when the embedded browser did not load properly.
Addressed
6.0.10
GPC-19712
Fixed an issue where PanGPS did not work on GlobalProtect app version 6.0.4 due to invalid memory reference and users were unable to reconnect to the GlobalProtect app after a system reboot.
Addressed
6.0.10
GPC-19696
Fixed an issue where, when the GlobalProtect app was installed on endpoints running macOS and the split tunnel was configured based on the application for Zoom, users were unable to access any sites when the split tunnel was disabled for Zoom and moved to full tunnel.
Addressed
6.0.10
GPC-19686
Fixed an issue where translation errors were observed in the GlobalProtect app for French localization.
Addressed
6.0.10
GPC-19659
Fixed an issue where macOS users were connected to the GlobalProtect app before they agreed to their company’s terms of service.
Addressed
6.0.10
GPC-19657
Fixed an issue where, when the GlobalProtect app was installed on endpoints running macOS and split tunnel was configured based on the application, the Zoom app got disconnected intermittently.
Addressed
6.0.10
GPC-19630
Fixed an issue where the prelogon connect method failed on the GlobalProtect gateway prelogin stage.
Addressed
6.0.10
GPC-19629
Fixed an issue where, when the GlobalProtect app was installed on devices running macOS, the split tunnel feature did not work as expected when Jamf was used to push the configuration policy rules.
Addressed
6.0.10
GPC-19603
Fixed an issue where the GlobalProtect app displayed a generic SAML login page and not the actual login page for authentication and the connection was not established when cached portal configuration was used.
Addressed
6.0.10
GPC-19587
Fixed an issue where, when the Globalprotect app was installed on devices running macOS and Endpoint Traffic Policy Enforcement was set to
All traffic
, users were unable to log in using Okta.
Addressed
6.0.10
GPC-19545
Fixed an issue where, when the GlobalProtect app was installed on devices running macOS, users were unable to connect to the GlobalProtect app when they used T-Mobile iPhone hotspot.
Addressed
6.0.10
GPC-19513
Fixed an issue where the GlobalProtect app was trying to use the old portal's authorization cookie to login instead of the newly migrated portal. This happened when the user changed from secondary portal to primary portal or vice versa without signing out.
Addressed
6.0.10
GPC-19505
Fixed an issue where the GlobalProtect embedded browser for SAML authentication window obscured the two-factor authentication prompt hindering the users from entering their PIN.
Addressed
6.0.10
GPC-19475
Fixed an issue where users got connection errors in an embedded browser after the computer woke up from sleep or when the user switched gateways.
Addressed
6.0.10
GPC-19449
Fixed an issue where, when the user used CAS token to authenticate, the system logs incorrectly displayed an error message during the GlobalProtect auto refresh configuration interval.
Addressed
6.0.10
GPC-19433
Fixed an issue where a small white blank page randomly popped up on the device screen distracting the users. This issue occurred while the device was connected to GlobalProtect app.
Addressed
6.0.10
GPC-19403
Fixed an issue where the GlobalProtect HIP check failed to detect Kaspersky after an upgrade from 21.3.10.391 to 21.15.8.493.
Addressed
6.0.10
GPC-19400
Fixed an issue where the GlobalProtect HIP check incorrectly detected year and date for Bitdefender Virus Scanner, which caused the device to fail the HIP check.
Addressed
6.0.10
GPC-19391
Fixed an issue where GlobalProtect stayed disconnected even when the device was unlocked by the user.
Addressed
6.0.10
GPC-19387
Fixed an issue where, when the GlobalProtect app was installed on devices running macOS, the app displayed text incorrectly when the system language was German.
Addressed
6.0.10
GPC-19378
Fixed an issue where, when the GlobalProtect app was installed on devices running macOS, the app displayed text incorrectly when the system language was German.
Addressed
6.0.10
GPC-19374
Fixed an issue where the GlobalProtect debug logs displayed information, which was not supposed to display in the logs.
Addressed
6.0.10
GPC-19365
Fixed an issue where the GlobalProtect app displayed a timeout page intermittently when users tried to authenticate with SAML and using an embedded browser.
Addressed
6.0.10
GPC-19359
Fixed an issue where system extensions on MacBook were not updated after the GlobalProtect app was upgraded.
Addressed
6.0.10
GPC-19337
Fixed an issue where the Captive Portal functionality of the GlobalProtect app did not work as expected when users used public Wi-Fi hotspots and the users were unable to connect to the app.
Addressed
6.0.10
GPC-19331
Fixed an issue where, when SAML authentication was used to authenticate to the GlobalProtect app, the app used an unknown username SAML User which was not configured instead of the actual username of the user, which caused an authentication failure.
Addressed
6.0.10
GPC-19340
Fixed an issue where the GlobalProtect app failed to send HIP reports hourly.
Addressed
6.0.10
GPC-19323
Fixed an issue where, when the GlobalProtect app was installed on devices running macOS and split tunnel was configured to exclude application traffic for Zoom, Zoom application did not work as expected.
Addressed
6.0.10
GPC-19314
Fixed an issue where, when the GlobalProtect app is installed on devices running macOS, the app displayed the message,
Downloading in progress
when the GlobalProtect app was upgraded to 6.0.x using the option
Allow Transparently
. The app should not display the message when upgraded using the transparent method.
Addressed
6.0.10
GPC-19280
Fixed an issue where, when the GlobalProtect app transitioned from pre-logon to userlogon tunnel, the app did not display the list of gateways for the users to change the gateway. The gateway list was displayed only when the app was refreshed.
Addressed
6.0.10
GPC-19262
Fixed an issue where GlobalProtect 6.2.1 tried to connect automatically after the user restarted their computer even though the connect method was set to
On-Demand
.
Addressed
6.0.10
GPC-19237
Fixed an issue where the GlobalProtect app did not disconnect when the user used the
Disable
option on the hamburger menu. The tunnel was still up and connected even when the user disconnected the GlobalProtect app.
Addressed
6.0.10
GPC-19211
Fixed an issue where the users were unable to authenticate to the GlobalProtect app using the SAML authentication method with single sign-on (SSO). The app displayed the following message when users tried to authenticate to the app,
Cloud Authentication Service single-sign-on failed
and the users had to try multiple times to authenticate successfully to the app.
Addressed
6.0.10
GPC-19193
Fixed an issue where the GlobalProtect app was unable to fetch Windows firewall and antimalware information correctly.
Addressed
6.0.10
GPC-19181
Fixed an issue where the GlobalProtect HIP check did not detect the definition version correctly for Cortex XDR (8.0.1.33809).
Addressed
6.0.10
GPC-19169
Fixed an issue where, when the GlobalProtect app was installed on devices running macOS and domain and app traffic exclusion was configured for Zoom but users were unable to connect to the Zoom application when the app was connected.
Addressed
6.0.10
GPC-19162
Fixed an issue where, when the user upgraded the GlobalProtect version to 5.2.13 or later, the HIP report displayed the DLP Digital Guardian Agent as disabled.
Addressed
6.0.10
GPC-19143
Fixed an issue where the users were unable to choose the correct certificate for the app as the configured registry value previousCertificate did not work as expected.
Addressed
6.0.10
GPC-19104
Fixed an issue where the GlobalProtect HIP report failed to detect the Real Time Protection status for Cortex XDR, which caused the device to fail the HIP check.
Addressed
6.0.10
GPC-19083
Fixed an issue where when the GlobalProtect app was installed on devices running macOS, the
Connection
tab under app
Settings
did not display the connection status and the refresh connection did not work when the
Settings
window was opened.
Addressed
6.0.10
GPC-19060
Fixed an issue where, when the GlobalProtect app was installed on devices running macOS, the
Connection
tab under app
Settings
did not display the connection status when the app was changed from a non-tunneled gateway to a tunneled gateway.
Addressed
6.0.10
GPC-19044
Fixed an issue where, when the GlobalProtect app was installed on Windows devices and the user changed the network from wired to wireless within the organization, the device displayed a blue screen.
Addressed
6.0.10
GPC-19023
Fixed an issue where, when the GlobalProtect app version 5.2.13 was installed on devices running macOS, the users were unable to connect to the Zoom application.
Addressed
6.0.10
GPC-19009
Fixed an issue where, when SAML authentication was used to authenticate to the GlobalProtect app and the user changed the gateway to a manual gateway, the app stayed in the
Connecting
stage.
Addressed
6.0.10
GPC-18992
Fixed an issue where internet via WiFi connection was unavailable for GlobalProtect users after their computer woke up from sleep because the app WiFi adapter was unable to obtain a DHCP IP address. This issue occurred on devices where Enforce GlobalProtect for Network Access feature was enabled.
Addressed
6.0.10
GPC-18983
Fixed an issue where the Central Authentication Service (CAS) authentication did not work when the GlobalProtect app was connected to an internal gateway and the app repeatedly opened the SAML authentication page.
Addressed
6.0.10
GPC-18968
Fixed an issue where the GlobalProtect app displayed You are on the internal corporate network message when users were on a public network. Users had to reboot the system to resolve this issue.
Addressed
6.0.10
GPC-18964
Fixed an issue where, when the GlobalProtect app was installed on devices running macOS and the user upgraded the GlobalProtect version from 6.0.5 to 6.2.1, the app got disconnected after 10 minutes.
Addressed
6.0.10
GPC-18933
Fixed an issue where the GlobalProtect HIP check incorrectly detected Real Time Protection for Cortex XDR, which caused the device to fail the HIP check.
Addressed
6.0.10
GPC-18913
Fixed an issue where the GlobalProtect app displayed the connection status as
Not Connected
even though the app was connected to the internal gateway.
Addressed
6.0.10
GPC-18913
Fixed an issue where the GlobalProtect app displayed the connection status as
Not Connected
even though the app was connected to the internal gateway.
Addressed
6.0.10
GPC-18907
Fixed an issue where the GlobalProtect app running on macOS endpoints did not query the secondary DNS (when primary DNS is not responding) when the domain was part of the exclude domain list (both network and DNS).
Addressed
6.0.10
GPC-18906
Fixed an issue where, when the GlobalProtect app was installed on devices running macOS, the GlobalProtect HIP check did not detect the Trellix Endpoint Security application, which caused the device to fail the HIP check.
Addressed
6.0.10
GPC-18861
Fixed an issue where the GlobalProtect MSI download was getting stuck at 27%.
Addressed
6.0.10
GPC-18828
Fixed an issue where split tunnel CNAME records were created before the GlobalProtect tunnel was established.
Addressed
6.0.10
GPC-18815
Fixed an issue where the Logon button on the GlobalProtect login screen stopped working after receiving the Microsoft Edge WebView2 runtime, 117.0.2045.36 update on the devices.
Addressed
6.0.10
GPC-18750
Fixed an issue where, when the GlobalProtect app was installed on devices running macOS, the GlobalProtect HIP check did not detect the Total Defense antivirus application, which caused the device to fail the HIP check.
Addressed
6.0.10
GPC-18703
Fixed an issue where the GlobalProtect HIP check did not detect the Trellix Endpoint Security application, which caused the device to fail the HIP check.
Addressed
6.0.10
GPC-18702
Fixed an issue where, when the GlobalProtect app was installed on Windows devices, the
Allow Manually
upgrade failed when the user tried to upgrade the GlobalProtect app version from 6.0.5 to 6.0.7
Addressed
6.0.10
GPC-18695
Fixed an issue where, when the GlobalProtect app version 6.0.7 was installed on devices running macOS, the Allow with Passcode option did not work as expected when the user tried to disable the GlobalProtect app with the configured passcode.
Addressed
6.0.10
GPC-18528
Fixed an issue where the GlobalProtect HIP check incorrectly detected the version for KES 12 (Kaspersky Endpoint Security), which caused the device to fail the HIP check.
Addressed
6.0.10
GPC-18385
Fixed an issue where, when the GlobalProtect app got reconnected after the user changed the network access from Wi-Fi (IPv4 only) to Ethernet connection (Dual Stack IPv4 + IPv6), the IPv6 ip-user mapping was missing on the firewall and only IPv6 ip-user mapping was available. The user had to refresh the connection to resolve this issue.
Addressed
6.0.10
GPC-18384
Fixed an issue where GlobalProtect app did not connect while Netskope was connected and vice-versa.
Addressed
6.0.10
GPC-18239
Fixed an issue where the GlobalProtect app would not close when the user clicked the icon on the taskbar due to a bug in the Windows 11 operating system.
Addressed
6.0.10
GPC-17398
Fixed an issue where the
Settings
option under
Connection
did not display the
Assigned IP Address(es)
and
Gateway IP Address
properly.
Addressed
6.0.10
GPC-16975
Fixed an issue where, when the GlobalProtect app was installed on devices running macOS, the screen reader did not announce the name of the GlobalProtect gateway when the gateway was marked with the star symbol.
Addressed
6.0.10
GPC-16597
Fixed an issue where the GlobalProtect app stopped working when the app was upgraded from version 5.2.8 to 6.0.3.
Addressed
6.0.10
GPC-15750
Fixed an issue where a hyperlink in a HIP notification opened in the GPO-disabled Internet Explorer 11 browser instead of the default browser.
Addressed
6.0.8
GPC-18822
Fixed an issue where, when the GlobalProtect app was installed on Windows devices and the device was reset using the Microsoft Recovery tool, the GlobalProtect app was not properly displayed.
Addressed
6.0.8
GPC-18788
Fixed an issue where the GlobalProtect HIP check did not detect McAfee Total Protection as an anti-malware application, which caused the device to fail the HIP check.
Addressed
6.0.8
GPC-18733
Fixed an issue where the hyperlinks with the URLs containing the
=
character in the HIP notification message did not work as expected and the page did not open when the user clicked the URL.
Addressed
6.0.8
GPC-18728
Fixed an issue where the
I Agree
option on the GlobalProtect app Welcome page did not work as expected when the user selected the option using a keyboard.
Addressed
6.0.8
GPC-18720
Fixed an issue where the GlobalProtect app became unresponsive when the user clicked the
ESC
button during authentication using a hard token.
Addressed
6.0.8
GPC-18598
Fixed an issue where the GlobalProtect SSO tile was selected instead of the Windows Password tile in the Windows Login screen even though the registry key
MakeGPCPDefault
was set to
No
.
Addressed
6.0.8
GPC-18594
Fixed an issue where the GlobalProtect app was unable to send HIP reports when the app was connected using IPv6 address.
Addressed
6.0.8
GPC-18568
Fixed an issue where the Captive Portal Detection functionality of the GlobalProtect app did not work as expected when the users used public Wi-Fi hotspots and the GlobalProtect app failed to retrieve cached configuration without a username.
Addressed
6.0.8
GPC-18543
Fixed an issue where the GlobalProtect app was installed on Windows devices with the split tunnel feature and when the user excluded the access route, the GlobalProtect app excluded only the route and did not exclude the subnets.
Addressed
6.0.8
GPC-18471
Fixed an issue where, when multiple
wa_3rd_party_host_64.exe
processes persisted even after the HIP check was performed due to which the GlobalProtect app stopped working.
Addressed
6.0.8
GPC-18426
Fixed an issue where, when the GlobalProtect app was configured with the
Disable GlobalProtect
option set to
Allow with Ticket
, the app did not display the correct
Disable Duration
time.
Addressed
6.0.8
GPC-18379
Fixed an issue where, when the IP address type was set to IPv4 and IPv6, the GlobalProtect app could connect only to the manual gateway instead of connecting to the best available gateway.
Addressed
6.0.8
GPC-18336
Fixed an issue where, when the GlobalProtect app got automatically connected after a system reboot even though the connection method configured was On-Demand.
Addressed
6.0.8
GPC-18318
Fixed an issue where, when the GlobalProtect app was connected to the internal gateway, the app displayed the incorrect message :
Connected - Inter....
instead of
Connected
.
Addressed
6.0.8
GPC-18285
Fixed an issue where the GlobalProtect app displayed an incorrect gateway location name instead of the correct gateway location configured by the user.
Addressed
6.0.8
GPC-18281
Fixed an issue where the MSI install logs showed mutiple messages for Autonomous DEM installation.
Addressed
6.0.8
GPC-18263
Fixed an issue where, when the GlobalProtect app was configured with Endpoint Traffic Policy Enforcement and Disable Local Subnet Access (DLSA), the Autonomous DEM reported users’ internet connection as down.
Addressed
6.0.8
GPC-18251
Fixed an issue where the GlobalProtect HIP check did not detect McAfee LiveSafe as an anti-malware application, which caused the device to fail the HIP check.
Addressed
6.0.8
GPC-18242
Fixed an issue where the end users were prompted to enter Windows login credentials (username and password) instead of their PIV Badge PIN when the system was unlocked or after a system reboot.
Addressed
6.0.8
GPC-18230
Fixed an issue where, when the user entered credentials during SAML authentication after the set internal login timer, the app displayed an authentication failed message without providing the reason. The
Retry
button on the app web interface did not work properly when using an embedded browser for authentication. The
Retry
button was not fully visible on the embedded browser.
Addressed
6.0.8
GPC-18223
Fixed an issue where GlobalProtect experienced a prolonged connection time when IPv6 was disabled on Windows, but GlobalProtect Portal was configured to assign IPv6 addresses.
Addressed
6.0.8
GPC-18200
Fixed an issue where the GlobalProtect HIP check did not detect McAfee LiveSafe as an antivirus application, which caused the device to fail the HIP check.
Addressed
6.0.8
GPC-18175
Fixed an issue where users were prompted to enter their credentials even when the GlobalProtect app was configured for authenticating with either Authentication Profile /Cookie or Client Certificate.
Addressed
6.0.8
GPC-18173
Fixed an issue where the vertical scroll bar on the GlobalProtect app web interface did not work properly when users tried to select the certificate from the drop-down.
Addressed
6.0.8
GPC-18171
Fixed an issue where users were unable to select the external gateway manually when connected to the internal network. The GlobalProtect stayed in
Connecting
state and users had to manually disconnect the connection and connect to the internal network to exit the
Connecting
state.
Addressed
6.0.8
GPC-18167
Fixed an issue where the GlobalProtect app displayed the Prisma Access gateways that were not set for manual selection.
Addressed
6.0.8
GPC-18157
Fixed an issue where the GlobalProtect app displayed the Credential Provider language in English when the system language was German.
Addressed
6.0.8
GPC-18135
Fixed an issue where, when the GlobalProtect app was installed on devices running macOS, the GlobalProtect HIP check detected the WithSecure antivirus software as XProtect, which caused the device to fail the HIP check.
Addressed
6.0.8
GPC-18107
Fixed an issue where the GlobalProtect HIP check did not detect McAfee LiveSafe – Internet Security, which caused the device to fail the HIP check.
Addressed
6.0.8
GPC-18092
Fixed an issue where GlobalProtect connected to an internal gateway got automatically disconnected after a certain period of time.
Addressed
6.0.8
GPC-18073
Fixed an issue where the GlobalProtect app selected an unexpected gateway due to a latency discrepancy seen between PanGPS and packet capture.
Addressed
6.0.8
GPC-18060
Fixed an issue where the GlobalProtect HIP check did not detect McAfee Total Protection, which caused the device to fail the HIP check.
Addressed
6.0.8
GPC-18039
Fixed an issue where the GlobalProtect HIP check did not detect the Definition Date correctly for the CrowdStrike application, which caused the device to fail the HIP check.
Addressed
6.0.8
GPC-18036
Fixed an issue where, when the No direct access to local network option was enabled on the GlobalProtect app with access routes excluded from the GlobalProtect VPN tunnel, the feature did not work as expected when Endpoint Traffic Policy Enforcement was enabled.
Addressed
6.0.8
GPC-17896
Fixed an issue where users were unable to connect to GlobalProtect gateway when only one external gateway was added due to the following error:
Cannot Verify Server Certificate of Gateway
.
Addressed
6.0.8
GPC-17877
Fixed an issue where the GlobalProtect HIP check incorrectly detected Sophos Endpoint Agent version 3.86.1, which caused the device to fail the HIP check.
Addressed
6.0.8
GPC-17795
Fixed an issue where the GlobalProtect HIP check did not detect the Xcitium Enterprise, the Endpoint Protection Platform by COMODO, which caused the device to fail the HIP check.
Addressed
6.0.8
GPC-17776
Fixed an issue where, when the GlobalProtect app was installed on devices running macOS and GlobalProtect enforcer was configured with allowed FQDNs, users were still able to access the internet and other public domains.
Addressed
6.0.8
GPC-17762
Fixed an issue when the GlobalProtect app was configured with the option
Allow User to Disable GlobalProtect App
with comment, the option did not work as expected.
Addressed
6.0.8
GPC-17748
Fixed an issue where the GlobalProtect HIP check did not detect the Real-Time Protection status correctly for the CrowdStrike Falcon application, which caused the device to fail the HIP check.
Addressed
6.0.8
GPC-17740
Fixed an issue where, when the GlobalProtect app was connected through the Prisma Access gateway, the upload speed of the internet was reduced to 2 Mbps.
Addressed
6.0.8
GPC-17657
Fixed an issue, where the GlobalProtect app got stuck in
Selecting Best Gateway
status when the device woke up from sleep mode. Users had to reboot the device to connect to the app.
Addressed
6.0.8
GPC-17640
Fixed an issue where, when the upgrade script
update_tmp.bat
was used, the error message did not display the correct exit timeout for the PanGPS uninstall process.
Addressed
6.0.8
GPC-17518
Fixed an issue where the GlobalProtect app displayed the status as '
Connected-Internal
even when the app was not connected.
Addressed
6.0.8
GPC-17436
Fixed an issue where, when the GlobalProtect app was installed on devices running macOS, the upload speed of the internet was reduced after a version upgrade.
Addressed
6.0.8
GPC-17206
Fixed an issue where, when Internal Host Detection (IHD) was enabled but failed to detect the internal network properly, the app failed to switch to the external gateway when users switched from an internal network to an external network.
Addressed
6.0.8
GPC-17204
Fixed an issue where, when the GlobalProtect app was installed on devices running macOS, the certificate information was not accessible even though the GlobalProtect app had full access to the certificate store.
Addressed
6.0.8
GPC-17161
Fixed an issue where, when the GlobalProtect app was installed on devices running macOS, the GlobalProtect app failed to reconnect and continued to stay in the
Connecting
state after the device woke up from Modern Standby mode.
Addressed
6.0.8
GPC-17115
Fixed an issue where the GlobalProtect HIP check did not detect the Cortex Anti-Malware status properly after a system reboot, which caused the device to fail the HIP check.
Addressed
6.0.8
GPC-17086
Fixed an issue where, when the GlobalProtect app was installed on devices running macOS, users were unable to make a connection to an internal gateway using the default browser for SAML authentication.
Addressed
6.0.8
GPC-17001
Fixed an issue where, when the GlobalProtect app was installed on devices running on macOS, the app did not display the
Connect
button and
Refresh Connection
button properly.
Addressed
6.0.8
GPC-16584
Fixed an issue where the GlobalProtect HIP check did not detect the CrowdStrike antivirus software correctly, causing the device to fail the HIP check.
Addressed
6.0.8
GPC-16397
Fixed an issue where the GlobalProtect app was installed on devices running macOS, a blank GlobalProtect app user interface was displayed instead of the correct page.
Addressed
6.0.8
GPC-15697
Fixed an issue where, when the GlobalProtect app was installed on devices running macOS, users were able to select
All Gateways
heading on the page which was not an option for the users to select. This issue happened on the app interface with a non-English language.
Addressed
6.0.8
GPC-15262
Fixed an issue where, when single sign-on (SSO) for Smart Card was used for authentication, users were prompted to enter a PIN instead of password on the Windows login screen.
Addressed
6.0.7
GPC-18071
Fixed an issue where, when the GlobalProtect app was installed on Android devices with Android 13, the app stopped working while sending GPS notifications.
Addressed
6.0.7
GPC-17921
Fixed an issue where, when the language was set to Japanese, the time to connect was not displayed properly when
Disconnect Timeout
for the app was configured.
Addressed
6.0.7
GPC-17831
Fixed an issue where the GlobalProtect app reported the computer name differently from the computer name displayed in Autonomous DEM causing a data discrepancy.
Addressed
6.0.7
GPC-17771
Fixed an issue where the GlobalProtect app stopped working abruptly.
Addressed
6.0.7
GPC-17754
Fixed an issue where the GlobalProtect app did not detect Smart Card removal every time the user removed the card and due to which the app was not getting disconnected on
On-Demand
tunnel mode.
Addressed
6.0.7
GPC-17575
Fixed an issue where the GlobalProtect HIP check incorrectly detected Windows firewall as disabled, which caused the device to fail the HIP check.
Addressed
6.0.7
GPC-17556
Fixed an issue where the GlobalProtect app would get stuck at
Connecting
state when the user tried to close the browser window for SAML authentication after configuring
On-Demand
mode for the app.
Addressed
6.0.7
GPC-17473
Fixed an issue where the GlobalProtect portal and gateway selection list were displayed in the table format and not as menu item.
Addressed
6.0.7
GPC-17460
Fixed an issue where, when the GlobalProtect app was installed on Windows 10 or Windows11 devices, and when the user tried to authenticate using SAML authentication, the app did not display the
Term of Use
pop-up on the Welcome page properly.
Addressed
6.0.7
GPC-17451
Fixed an issue where the ADEM agent remained in the disabled state after connecting to a Prisma Access portal configured to enable ADEM on the GlobalProtect endpoints after switching from an on-premises portal that had ADEM disabled in the app configuration that was pushed to the endpoint.
Addressed
6.0.7
GPC-17406
Fixed an issue where GlobalProtect HIP check did not detect the new version of Trellix Drive Encryption correctly which caused the device to fail the HIP check.
Addressed
6.0.7
b
GPC-17401
Fixed an issue where the GlobalProtect app was installed on the Chromebook, the app got disconnected when the ChromeOS detected policy changes related to location information.
Addressed
6.0.7
GPC-17393
Fixed an issue where, when the GlobalProtect app was installed on Windows 10 devices and the language was set to Japanese, IpConfig.txt and Systeminfo.txt in the GlobalProtectLogs.zip did not work properly.
Addressed
6.0.7
GPC-17337
Fixed an issue where the GlobalProtect app got disconnected due to a HIP reporting error that prevented the app from sending HIP reports to the gateway.
Addressed
6.0.7
GPC-17335
Fixed an issue where the user interface of the GlobalProtect app was going over-sized when the system woke up from the sleep mode.
Addressed
6.0.7
GPC-17299
Fixed an issue where the GlobalProtect app did not display LDAP password expiration notification on consecutive connection attempts when the user tried to authenticate using the LDAP authentication method.
Addressed
6.0.7
GPC-17252
Fixed an issue where, when the GlobalProtect app was installed on devices running macOS, the app did not try to auto-connect to the gateway after exceeding the
Disable Timeout
value.
Addressed
6.0.7
GPC-17227
Fixed an issue where the tunnel was still up and connected even when the user disconnected the GlobalProtect app.
Addressed
6.0.7
GPC-17205
Fixed an issue where GlobalProtect failed to decrypt HipPolicy.dat on endpoints, which caused the device to fail the HIP check for anti-malware.
Addressed
6.0.7
GPC-17137
Fixed an issue where, when user clicked the Network sign-in icon on the Windows login page, an icon with the name
image
was displayed instead of the portal IP address/ URL.
Addressed
6.0.7
GPC-17128
Fixed an issue where the Client Certificate had a blank Subject with SAN as the critical extension, which caused the endpoints to fail the HIP check.
Addressed
6.0.7
GPC-17099
Fixed an issue where devices with Driver Verified enabled and configured to monitor the PAN virtual adapter driver (pangpd.sys) displayed the
DRIVER_VERIFIER_DETECTED_VIOLATION
Blue Screen error
Addressed
6.0.7
GPC-17041
Fixed an issue where, when the GlobalProtect app was installed on Windows 10 devices and the language was set to Japanese, IpConfig.txt in the GlobalProtectLogs.zip did not work properly.
Addressed
6.0.7
GPC-17011
Fixed an issue where the GlobalProtect app tried to send HIP reports even when the device was on Modern Standby mode.
Addressed
6.0.7
GPC-17000
Fixed an issue where the GlobalProtect app would get stuck at
Connecting
state when user tried to authenticate with SAML authentication method using the embedded browser and user clicked
Cancel
on the certificate prompts.
Addressed
6.0.7
GPC-16978
Fixed an issue where the GlobalProtect app took a long time to establish a connection due to an erroneous packet capture process.
Addressed
6.0.7
GPC-16959
Fixed an issue where the Endpoint Traffic Policy Enforcement feature was causing the GlobalProtect app to drop Slack WebSocket outbound traffic on macOS endpoints.
Addressed
6.0.7
GPC-16788
Fixed an issue where when the GlobalProtect app was installed on devices running macOS, HIP check did not detect the Tanium Client correctly which caused the device to fail the HIP check.
Addressed
6.0.7
GPC-16682
Fixed an issue where the GlobalProtect app did not honor the
Disable Timeout
value and would automatically reconnect after the user restarted two times due to an issue with the new splash screen.
Addressed
6.0.7
GPC-16645
Fixed an issue where the GlobalProtect app couldn't display the Verify text box when using the full 255 characters for Radius DUO Authentication on Windows devices.
Addressed
6.0.7
GPC-16631
Fixed an issue where GlobalProtect logs forwarded from CDL to syslog-ng and Splunk were arriving in multiline and single line mode randomly.
Addressed
6.0.7
GPC-16627
Fixed an issue where the GlobalProtect HIP check incorrectly detected the Anti-Malware information for the McAfee Total Protection Antivirus software application, which caused the device to fail the HIP check.
Addressed
6.0.7
GPC-16609
Fixed an issue that the correct status is not displayed GlobalProtect status in the Windows lock screen when the gateway is connected.
Addressed
6.0.7
GPC-16575
Fixed an issue where GlobalProtect users were intermittently unable to log in to the gateway when using the user logon connect method because
Enforce GlobalProtect Connection for Network Access
was enabled immediately after portal login, blocking access to the gateway login URL.
Addressed
6.0.7
GPC-16572
Fixed an issue where the GlobalProtect HIP check took longer than expected to collect the HIP information causing the device to fail the HIP check.
Addressed
6.0.7
GPC-16441
Fixed an issue where the GlobalProtect app connection failed when the user enabled both Globalprotect Enforcer and Endpoint Traffic Policy Enforcement.
Addressed
6.0.7
GPC-16397
Fixed an issue where the GlobalProtect app was installed on devices running macOS, a blank GlobalProtect app user interface was displayed instead of the correct page.
Addressed
6.0.7
GPC-16297
Fixed an issue where users were unable to see the available list of eligible gateways to select the gateway manually when the best available gateway failed.
Addressed
6.0.7
GPC-16267
Fixed an issue where the portal status did not show as
Connected
even when the portal was accessible after a reboot and the portal status was
Using cached portal config
, which did not trigger the transparent upgrade.
Addressed
6.0.7
GPC-16126
Fixed an issue where the GlobalProtect app did not display the certificate name in the Client Certificate selection field properly.
Addressed
6.0.7
GPC-16003
Fixed an issue where, when the GlobalProtect app was installed on devices running macOS, the app was not connected when the proxy was configured for Safari or Chrome.
Addressed
6.0.7
GPC-16002
Fixed an issue where the GlobalProtect HIP check detected the device as Windows firewall enabled even though the firewall was disabled on the device.
Addressed
6.0.7
GPC-15968
Fixed an issue where the GlobalProtect app was stuck in
Connecting
state when users failed to authenticate with SAML and using an embedded browser. Users were unable to disconnect the app and had to reboot the device.
Addressed
6.0.7
GPC-15251
Fixed an issue where, when the GlobalProtect app was installed on Android devices and connected with
Always-On
(User logon) option, the app displayed the following notification twice.
Always on VPN is currently enabled. Disabling the VPN connection could result in loss of network access.
Addressed
6.0.7
GPC-15234
Fixed an issue where the app would get stuck at
Connecting
'state while trying to connect to a gateway.
Addressed
6.0.7
GPC-15231
Fixed an issue where, when the GlobalProtect app was installed on Android devices and connected with
Always-On
option, the app displayed the following notification twice and the users were unable to clear the notifications.
Always on VPN is currently enabled. Disabling the VPN connection could result in loss of network access.
Addressed
6.0.7
GPC-15111
Fixed an issue where, when the GlobalProtect app was installed on devices running macOS, the screen reader repeatedly announced tabs,
Add
button and portals table on the user interface. The screen reader should announce the user interface elements only once.
Addressed
6.0.7
GPC-15080
Fixed an issue where the split tunnel was configured based on the destination domain, split tunneling did not work as expected when IPv6 traffic exclusion was configured.
Addressed
6.0.7
GPC-14672
Fixed an issue where, when the GlobalProtect app was installed on macOS devices and
No direct access to local network
option was enabled with access routes excluded from the GlobalProtect VPN tunnel, the excluded traffic was not sent through the physical adapter on the endpoint. Following this, the users were unable to access the local physical network devices such as printers.
Addressed
6.0.6
GPC-16684
Fixed an issue where, when users on iOS endpoints disconnected and then reconnected GlobalProtect, the authentication cookie was not honored, requiring them to reauthenticate.
Addressed
6.0.5
GPC-17326
Fixed an issue where, when the GlobalProtect app was installed on Windows devices, the device displayed a blue screen when users tried to download files larger than 5GB.
Addressed
6.0.5
GPC-16837
Fixed an issue where the GlobalProtect app (PANGP Virtual Ethernet Adapter) was intermittently disconnected after a system reboot though the gateway status displayed it as
Connected
.
Addressed
6.0.5
GPC-16851
Fixed an issue where, when the GlobalProtect app was installed on devices running macOS, the app did not try to auto-connect to the gateway after exceeding the
Disable Timeout
value.
Addressed
6.0.5
GPC-16655
Fixed an issue where, when configured with the pre-logon connect method, the GlobalProtect app indicated that it was connected, but the tunnel was not established and users were unable to access resources.
Addressed
6.0.5
GPC-16525
Fixed an issue where, when the GlobalProtect app was installed on devices running macOS, the app did not detect correct information for Symantec Corporation Norton 360, which caused the device to fail the HIP check.
Addressed
6.0.5
GPC-16510
Fixed an issue where, when the GlobalProtect app was installed on devices running macOS 13 Ventura, the app did not display options to users to select gateways manually when connected to the portal.
Addressed
6.0.5
GPC-16495
Fixed an issue where, when the GlobalProtect app was installed on devices running macOS, the GlobalProtect cookie stopped working when CIS Benchmark 5.1.1 was applied for mac OS 12 Monterey.
Addressed
6.0.5
GPC-16482
Fixed an issue where the GlobalProtect HIP check did not detect the real-time protection status Symantec Endpoint Agent, which caused the device to fail the HIP check.
Addressed
6.0.5
GPC-16448
Fixed an issue where, when the GlobalProtect app was installed on devices running macOS, users were unable to connect to the GlobalProtect app.The users could connect only when they refreshed the connection.
Addressed
6.0.5
GPC-16436
Fixed an issue where the GlobalProtect HIP check did not detect information correctly for Cortex XDR, which caused the device to fail the HIP check.
Addressed
6.0.5
GPC-16418
Fixed an issue where the GlobalProtect HIP check incorrectly detected Definition Version, Definition Date, and Last Scan Date for Cortex XDR, which caused the device to fail the HIP check.
Addressed
6.0.5
GPC-16392
Fixed an issue where, when the GlobalProtect app was installed on devices running macOS and the user restarted the device, the app displayed the following error message even though the app got connected after a few seconds.
Could not connect to the GlobalProtect service. Make sure the GlobalProtect service is running. If the issue persists, contact your administrator
.
Addressed
6.0.5
GPC-16369
Fixed an issue where the GlobalProtect app user interface displayed incorrect French translation.
Addressed
6.0.5
GPC-16351
Fixed an issue where the GlobalProtect HIP check did not detect the real-time protection status correctly for the CrowdStrike Falcon application, which caused the device to fail the HIP check.
Addressed
6.0.5
GPC-16346
Fixed an issue where, when the GlobalProtect app was installed on Windows devices, the GlobalProtect HIP check took longer than expected to collect the HIP information and also displayed HIP pop-up error messages for antivirus software, which caused the device to fail the HIP check.
Addressed
6.0.5
GPC-16324
Fixed an issue where Endpoint Traffic Policy Enforcement dropped IPv6 ICMP neighbor discovery packets causing the IPv6 tunnel to drop.
Addressed
6.0.5
GPC-16289
Fixed an issue where, when the GlobalProtect app was configured with split tunnel to exclude traffic, the users could not access the excluded traffic when using an Airtel 4G PPP dongle since the Airtel PPP default traffic route was removed.
Addressed
6.0.5
GPC-16287
Fixed an issue where the GlobalProtect app did not detect correct version information for Sophos Endpoint Protection, which caused the device to fail the HIP check.
Addressed
6.0.5
GPC-16276
Fixed an issue where the GlobalProtect app displayed Welcome Page every time when the app got refreshed during
GlobalProtect APP Configuration Refresh Interval
.
Addressed
6.0.5
GPC-16271
Fixed an issue where the Retry button on the default browser page for SAML authentication did not work when the SAML authentication failed and the user tried to authenticate again using the
Retry
button.
Addressed
6.0.5
GPC-16213
Fixed an issue where, when the GlobalProtect app was installed on Windows devices, the
wa_3rd_party_host_64.exe
and
wa_3rd_party_host_32.exe
applications stopped working and the GlobalProtect event logs displayed the status of the applications as terminated.
Addressed
6.0.5
GPC-16119
Fixed an issue where the GlobalProtect app was installed on devices running macOS, the GlobalProtect HIP check failed to detect the Real time protection status for Symantec Endpoint Protection.
Addressed
6.0.5
GPC-16074
Fixed an issue where, when the GlobalProtect app was installed on devices running macOS with SAML authentication, users were unable to connect to the app after the system woke up from sleep mode. The app stayed in
Connecting
state for a long time and the users had to refresh the connection.
Addressed
6.0.5
GPC-16029
Fixed an issue where, when the GlobalProtect app was installed on devices running macOS, users were prompted for certificate selection even when the
Extended Key Usage OID for Client Certificate
was configured in the
App Configurations
area of the GlobalProtect portal configuration.
Addressed
6.0.5
GPC-15989
Fixed an issue where, when the Default System Browser is used for SAML, the GlobalProtect app kept displaying
Connecting
when connected to an internal gateway.
Addressed
6.0.5
GPC-15972
Fixed an issue where the GlobalProtect HIP check did not detect the Real-Time Protection status correctly for the CrowdStrike Falcon application, which caused the device to fail the HIP check.
Addressed
6.0.5
GPC-15869
Fixed an issue where the default route (0.0.0.0) was configured with a domain in etc/hosts and split tunnel was configured to include traffic based on the domain, the split tunnel did not work as expected.
Addressed
6.0.5
GPC-15369
Fixed an issue where the GlobalProtect HIP check did not detect the Last Full Scan Date and Definition Version for Cortex XDR, which caused the device to fail the HIP check.
Addressed
6.0.5
GPC-15338
Fixed an issue where, when the GlobalProtect app was installed on devices running macOS and when the GlobalProtect gateway was configured to exclude routes, the excluded routes were removed from the original routing table when the users disconnected the app.
Addressed
6.0.5
GPC-15126
Fixed an issue where, when the GlobalProtect app was installed on devices running macOS, the screen reader could not identify and announce the mandatory fields on the screen as asterisk symbols were not present on the screen to indicate the mandatory fields.
Addressed
6.0.5
GPC-15118
Fixed an issue where, when the GlobalProtect app was installed on devices running macOS, the screen reader incorrectly identified the order of elements on the screen.
Addressed
6.0.5
GPC-15106
Fixed an issue where, when the GlobalProtect app was installed on devices running macOS, the
Connections
tab on the Settings page displayed check marks for portal and gateway in incorrect color contrast ratio causing readability issues for users.
Addressed
6.0.5
GPC-14725
Fixed an intermittent issue where the users were unable to connect to the GlobalProtect app, when the app used cached portal configuration.
Addressed
6.0.5
GPC-14705
Fixed an issue where, when the GlobalProtect app was installed on endpoints running macOS and when connected to an internal gateway the endpoint did not send a HIP report or receive HIP notifications, and the HIP reports were not available on the Host Information Profile tab in the app.
Addressed
6.0.5
GPC-14562
Fixed an issue where, when the GlobalProtect app was installed on the Windows 10 UWP platform, the app got disconnected when the users tried to connect.
Addressed
6.0.5
GPC-16485
Fixed an issue where, when the GlobalProtect app was installed on devices running iOS 16, the app displayed the HIP Host Name as the device model name instead of the user-assigned device name, which caused the device to fail the HIP check.
Addressed
6.0.5
GPC-16149
Fixed an issue where, when the GlobalProtect app was installed on iOS devices, the app got disconnected after connecting to the portal preventing users from connecting to the app.
Addressed
6.0.5
GPC-15998
Fixed an issue where, when the GlobalProtect app was installed on iOS devices, the app GUI disappeared from the screen immediately after connecting to the app preventing users from being able to log out.
Addressed
6.0.5
GPC-15984
Fixed an issue where, when the GlobalProtect app was installed on devices running macOS, the app failed to reconnect when the user refreshed the connection.
Addressed
6.0.5
GPC-15509
Fixed an issue where, when the GlobalProtect app was installed on iOS devices, the GlobalProtect app GUI disappeared from the screen when the users tried to access the app. The users were unable to logout from the app due to this issue.
Addressed
6.0.5
GPC-14952
Fixed an issue where, when the GlobalProtect app was installed on iOS devices, users were unable to log in to the app using biometrics, such as Face ID.
Addressed
6.0.5
GPC-15977
Fixed an issue where, when the GlobalProtect app was installed on Android devices and configured with
Always-on (User logon)
mode and certificate authentication, the app failed to connect when certificate was renewed on the Microsoft Intune MDM.
Addressed
6.0.5
GPC-15231
Fixed an issue where, when the GlobalProtect app was installed on Android devices and connected with
Always-on (User logon)
option, the app displayed the following notifications twice and the users were unable to clear the notifications.
Always on VPN is currently enabled. Disabling the VPN connection could result in loss of network access
.
Addressed
6.0.5
GPC-15023
Fixed an issue where, when the GlobalProtect app was installed on devices running on Chrome OS, the app could not connect to the gateway after successful SAML authentication. The app stayed in
Connecting
state and the users had to go back to the Portal Authentication Complete page and click on
click here to launch GlobalProtect
to connect to the gateway.
Addressed
6.0.5
GPC-16269
Fixed an issue where, when the GlobalProtect app was installed on Linux devices, the metric of the tunnel default route was higher than the physical adapter's default route. Due to this issue, tunnel route was not considered and the traffic was sent through the physical adapter with lower metric.
Addressed
6.0.5
GPC-15539
Fixed an issue on the GlobalProtect app for Linux where, when the GlobalProtect app was connected and the tunnel was up, there was a DNS leak where DNS requests were sent to the public DNS servers assigned to the physical interface. This was because the resolv.conf was not being updated during the change in tunnel state due to a permissions issue.
Addressed
6.0.5
GPC-14490
Fixed an issue where, when the GlobalProtect app was installed on Linux devices, the app failed to connect when McAfee Threat Prevention was installed on the device.
Addressed
6.0.4
GPC-16414
Fixed an issue where, when the GlobalProtect app was installed on Android devices, the app got disconnected after an upgrade following which the GlobalProtect log displayed the status as
FATAL EXCEPTION: main
.
Addressed
6.0.4-c26
GPC-16077
Fixed an issue where, when the GlobalProtect app was installed on devices running macOS with Enforcer, end users could not connect to Android Studio application.
Addressed
6.0.4-c26
GPC-16055
Fixed an issue where, when the GlobalProtect app was installed on devices running macOS, the app did not display
Authentication Failed
when the user entered incorrect RSA SecureID.
Addressed
6.0.4-c26
GPC-15976
Fixed an issue where, when the GlobalProtect app was installed on Windows devices, the device displayed a blue screen due to a faulty GlobalProtect app driver.
Addressed
6.0.4-c26
GPC-15922
Fixed an issue where, when
Connect Before Logon
using Security Assertion Markup Language (SAML) authentication was used to log in to the endpoint, the
Use Default Browser for SAML Authentication
did not work as expected with the configured
Connect Before Logon
option.
Addressed
6.0.4-c26
GPC-15834
Fixed an issue where the GlobalProtect app got disconnected after HIP check.
Addressed
6.0.4-c26
GPC-15822
Fixed an issue when the GlobalProtect app got disconnected when the laptop power adapter was plugged in or unplugged.
Addressed
6.0.4-c26
GPC-15812
Fixed an issue where the split tunnel feature did not work as expected on devices running macOS Monterey 12.X and Chrome Browser 104.0.5112.79.
Addressed
6.0.4-c26
GPC-15663
Fixed an issue where when the GlobalProtect app was deployed for pre-logon and when the users tried to change their Windows password, the users were prompted to enter only a new password. The app did not prompt users to enter their old password while changing the password.
Addressed
6.0.4-c26
GPC-15548
Fixed an issue where users were unable to connect to the GlobalProtect app when users restarted the device from the hibernation mode.
Addressed
6.0.4-c26
GPC-15260
Fixed an issue, where the GlobalProtect app was installed on devices running macOS and Enforce GlobalProtect Connection for Network Access was configured with allowed FQDNs, the users were still able to access the internet and other public domains.
Addressed
6.0.4-c26
GPC-15116
Fixed an issue where, when the GlobalProtect app was installed on devices running macOS, the screen reader did not properly announce the role, status, and the numbering of the tabs on the navigation bar of the
Settings
page.
Addressed
6.0.4-c26
GPC-15109
Fixed an issue where, when the GlobalProtect app was installed on devices running macOS, the screen reader announced the Star button twice on the
Troubleshooting
tab of the
Settings
page.
Addressed
6.0.4-c26
GPC-14942
Fixed an issue where, when the GlobalProtect app was installed on devices running macOS, the users were unable to connect to the GlobalProtect app after an upgrade. The app displayed the following error message when the users tried to connect to the app:
The network connection is unreachable or the gateway is unresponsive. Check the network connection and reconnect.
Addressed
6.0.4
GPC-15739
Fixed an issue where, when the GlobalProtect app was installed on iOS devices and configured with
Always-On
connect method, the devices were not automatically connected to the app through
Always-On
mode after device reboot and the users had to manually connect to the app.
Addressed
6.0.4
GPC-14941
Fixed an issue where, when the GlobalProtect app was installed on iOS devices, the users were unable to connect to the app due to Keychain Access permission issue. The app stayed in
Connecting
state for a long time and the users had to force stop the app.
Addressed
6.0.4
GPC-14913
Fixed an issue where, when the GlobalProtect app was installed on iOS devices, the app was not reconnected automatically after a system reboot and the users had to connect the app manually.
Addressed
6.0.4
GPC-14686
Fixed an issue where, when the GlobalProtect app was installed on iOS devices, the GlobalProtect credentials that were saved earlier were lost when users faced network connectivity issues. Users had to re-enter their credentials due to this issue.
Addressed
6.0.4
GPC-16370
Fixed an issue where, when split tunnel (optimized split tunneling) was configured on GlobalProtect to exclude any application traffic that relied on the loopback connection source IP address to be 127.0.0.1, the excluded application did not work as expected.
Addressed
6.0.4
GPC-16148
Fixed an issue where the GlobalProtect notifications were displayed in HTML code instead of plaintext.
Addressed
6.0.4
GPC-16144
Fixed an issue where the GlobalProtect app failed to detect Cisco Secure Endpoint Anti-Malware software installed on the device.
Addressed
6.0.4
GPC-16064
Fixed an issue where, when the GlobalProtect was installed on devices running macOS, users were unable to log on to the app using the Kerberos Single Sign-On (SSO) authentication method.
Addressed
6.0.4
GPC-16056
Fixed an issue where GlobalProtect HIP check did not detect the name of the Trellix Agent correctly which caused the device to fail the HIP check.
Addressed
6.0.4
GPC-16023
Fixed an issue where the GlobalProtect app did not detect correct definition date for Sophos Endpoint Protection, which caused the device to fail the HIP check.
Addressed
6.0.4
GPC-15999
Fixed an issue where the GlobalProtect app did not detect
Virus Definition Date
for McAfee Total Protection, which caused the device to fail the HIP check.
Addressed
6.0.4
GPC-15994
Fixed an issue where the GlobalProtect app got disconnected after HIP check.
Addressed
6.0.4
GPC-15972
Fixed an issue where the GlobalProtect HIP check did not detect the real-time protection status correctly for the CrowdStrike Falcon application, which caused the device to fail the HIP check.
Addressed
6.0.4
GPC-15956
Fixed an issue where the GlobalProtect app did not detect real-time protection and the correct definition date for Sophos Endpoint Protection, which caused the device to fail the HIP check.
Addressed
6.0.4
GPC-15923
Fixed an issue where the GlobalProtect app did not detect real-time protection status for Sophos Endpoint Protection, which caused the device to fail the HIP check.
Addressed
6.0.4
GPC-15910
Fixed an issue where, when the GlobalProtect app was installed on devices running macOS, where the split tunnel was configured to exclude traffic, the excluded traffic was sent through the VPN tunnel instead of the physical adapter.
Addressed
6.0.4
GPC-15854
Fixed an issue where the GlobalProtect HIP check did not detect
Patch Management
information for the Windows Defender, which caused the device to fail the HIP check.
Addressed
6.0.4
GPC-15842
Fixed an issue where GlobalProtect HIP check did not detect the encryption stage for ESET Full Disk Encryption correctly as defined in the HIP profiles, which caused the device to fail the HIP check.
Addressed
6.0.4
GPC-15809
Fixed an issue where the GlobalProtect HIP check did not detect the correct
Last Scan Date
information for the
Last Full Scan Time
and
Definition Date
for Sophos Endpoint Protection, which caused the device to fail the HIP check.
Addressed
6.0.4
GPC-15699
Fixed an issue where the GlobalProtect HIP check did not detect the McAfee antivirus software, causing the device to fail the HIP check.
Addressed
6.0.4
GPC-15686
Fixed an issue when the user executed the command to disable the app, a new line break was added after the timestamp value in the command which caused parsing issues.
Addressed
6.0.4
GPC-15636
Fixed an issue where the GlobalProtect HIP check failed to detect the Real time protection status for Sophos Endpoint Protection.
Addressed
6.0.4
GPC-15631
Fixed an issue where, when the GlobalProtect app was installed on devices running macOS and the app did not start right away after a system reboot.
Addressed
6.0.4
GPC-15592
Fixed an issue where the GlobalProtect HIP check failed to detect the Definition Version for Sophos Endpoint Protection, which caused the device to fail the HIP check.
Addressed
6.0.4
GPC-15560
Fixed an issue where the GlobalProtect HIP check incorrectly detected
Last Scan Date
for Cortex XDR, which caused the device to fail the HIP check.
Addressed
6.0.4
GPC-15537
Fixed an issue where the GlobalProtect HIP check did not detect the correct Anti-Malware information for the Last Full Scan Time for Sophos Endpoint Protection, which caused the device to fail the HIP check.
Addressed
6.0.4
GPC-15451
Fixed an issue where, when the user upgraded the Sophos Endpoint Protection, the GlobalProtect HIP was not compatible with the new version of the Sophos Endpoint Protection after the upgrade, which caused the device to fail the HIP check.
Addressed
6.0.4
GPC-15439
Fixed an issue where the GlobalProtect app failed to collect HIP data and the
Host Information
tab on the device failed to display information.
Addressed
6.0.4
GPC-15433
Fixed an issue where, when the GlobalProtect was installed on devices running macOS and the split-tunnel option
Both Network Traffic and DNS
was configured on the GlobalProtect gateway, the domain-based split tunnel feature did not work as expected.
Addressed
6.0.4
GPC-15389
Fixed an issue where the GlobalProtect app did not detect real-time protection for Microsoft Defender, which caused the device to fail the HIP check.
Addressed
6.0.4
GPC-15369
Fixed an issue where the GlobalProtect HIP check did not detect the
Last Full Scan Date
and
Definition Version
for Cortex XDR, which caused the device to fail the HIP check.
Addressed
6.0.4
GPC-15338
Fixed an issue where, when the GlobalProtect app was installed on devices running macOS and when the GlobalProtect gateway was configured to exclude routes, the excluded routes were removed from the original routing table when the users disconnected the app.
Addressed
6.0.4
GPC-15315
Fixed an issue where the GlobalProtect HIP check detected incorrect Anti-Malware information for Definition Date for Sophos Endpoint Protection.
Addressed
6.0.4
GPC-15267
Fixed an issue where the GlobalProtect HP check failed to detect ESET anti-virus software version 7.0 on macOS devices.
Addressed
6.0.4
GPC-15263
Fixed an issue where the GlobalProtect HIP check failed to detect Ivanti Security Controls Agent which caused the device to fail the HIP check.
Addressed
6.0.4
GPC-15255
Fixed an issue where the GlobalProtect HIP check detected the device as Windows firewall enabled even though the firewall was disabled on the device.
Addressed
6.0.4
GPC-15177
Fixed an issue where the GlobalProtect HIP check did not detect real-time protection for Traps version 6.1.5, which caused the device to fail the HIP check.
Addressed
6.0.4
GPC-15149
Fixed an issue where the GlobalProtect app got disconnected due to incorrect HIP check after the system woke up from sleep mode or when the system was restarted.
Addressed
6.0.4
GPC-15126
Fixed an issue where, when the GlobalProtect app was installed on devices running macOS, the screen reader could not identify and announce the mandatory fields on the screen as asterisk symbols were not present on the screen to indicate the mandatory fields.
Addressed
6.0.4
GPC-15115
Fixed an issue where, when the GlobalProtect app was installed on devices running macOS, the screen reader did not properly announce the name and numbering of
Debug logs
and
Dump logs
options on the
Settings
page.
Addressed
6.0.4
GPC-15108
Fixed an issue where, when the GlobalProtect app was installed on devices running macOS, the screen reader incorrectly announced the Cancel button as the Help button when the user tried to disable the app.
Addressed
6.0.4
GPC-15105
Fixed an issue where, when the GlobalProtect app was installed on devices running macOS, the Home page of the app displayed text in incorrect color contrast ratio causing readability issues to the users.
Addressed
6.0.4
GPC-14815
Fixed an issue where the GlobalProtect HIP check did not detect the Scan Date for Bitdefender Endpoint Security for macOS, which caused the device to fail the HIP check.
Addressed
6.0.4
GPC-14609
Fixed an issue where the HIP check did not detect the Sentinel One RTP and definition date properly, which caused the HIP check to fail.
Addressed
6.0.4
GPC-14522
Fixed an issue where, when the GlobalProtect was configured with split tunnel to include traffic based on the destination domain by overriding the DNS server manually, the DNS queries were still being sent to the DHCP configured server.
Addressed
6.0.4
GPC-14439
Fixed an issue where, when split tunnel was configured on the GlobalProtect app to exclude destination domain traffic that included a slash character (/) for sub-page domain names, the slash character (/) was not displayed in the sub-page domain names in the exception list.
Addressed
6.0.4
GPC-15458
Fixed an issue where, when the GlobalProtect app was installed on Linux devices with
Use Default Browser for SAML Authentication
app option set to
Yes
, the device used embedded browser instead of default system browser.
Addressed
6.0.3
GPC-15088
Fixed an issue where, when the GlobalProtect app was installed on Android devices, the GlobalProtect notification displayed on the screen was unresponsive.
However, the notification continues to stay on the screen due to Android OS limitation. This issue is listed under the Known Issues section.
Addressed
6.0.3
GPC-15315
Fixed an issue where the GlobalProtect HIP check incorrectly detected the Anti-Malware information for Definition Date for Sophos Endpoint Protection.
Addressed
6.0.3
GPC-15314
Fixed an issue where, when the GlobalProtect app was installed on Windows devices, the app got disconnected when connected using
Connect Before Logon
(CBL) with SAML authentication.
Addressed
6.0.3
GPC-15310
Fixed an issue where, when the GlobalProtect app was installed on Windows machine, the
Star
button on the app screen when selected with Enter key was not working as expected.
Addressed
6.0.3
GPC-15243
Fixed an issue where, when the GlobalProtect app was installed on devices, the HIP check process stopped running and the tunnel was disconnected after 3 hours.
Addressed
6.0.3
GPC-15219
Fixed an issue where, when the GlobalProtect app was installed on Windows devices and split tunnel was configured to exclude application traffic for Zoom, some excluded traffic was still forwarded through the tunnel.
Addressed
6.0.3
GPC-15205
Fixed an issue where, when the GlobalProtect app was installed on devices, the HIP check process stopped running and the tunnel was disconnected after 3 hours.
Addressed
6.0.3
GPC-15200
Fixed an issue where the GlobalProtect app did not save the username after Kerberos SSO authentication following which the app could not use the cached GlobalProtect portal configuration. The users had to manually add the username to the Windows registry.
Addressed
6.0.3
GPC-15185
Fixed an issue where, when the GlobalProtect app was deployed along with Endpoint Protector and split tunnel was configured to exclude or include traffic based on FQDN, the split tunnel configuration did not work as expected.
Addressed
6.0.3
GPC-15167
Fixed an issue, where the GlobalProtect app was installed on devices running macOS, GlobalProtect enforcer continued to block network access even after connecting to the internal gateway.
Addressed
6.0.3
GPC-15125
Fixed an issue where, when the GlobalProtect app was installed on Mac devices, the screen reader did not properly announce the functions of the
Change Portal
and
Change Gateway
menus and the options under them.
Addressed
6.0.3
GPC-15120
Fixed an issue where, when the GlobalProtect app was installed devices running macOS, the screen reader did not properly announce the functions of the
Change Portal
and
Change Gateway
menus and the options under them.
Addressed
6.0.3
GPC-15114
Fixed an issue where, when the GlobalProtect app was installed on macOS devices, the screen reader on the
Settings
page did not announce the description for the
Sign Out
button properly.
Addressed
6.0.3
GPC-15112
Fixed an issue where, when the GlobalProtect app was installed on devices running macOS and when the users were using keyboard to navigate through the home page, the navigation on the UI was not visible to the users after they pressed the tab key on the keyboard to select a menu item.
Addressed
6.0.3
GPC-15110
Fixed an issue where, when the GlobalProtect app was installed on Mac devices, the screen reader did not properly announce the options under the
Change Portal
and
Change Gateway
menus upon their selection.
Addressed
6.0.3
GPC-15107
Fixed an issue where the hamburger menu icon on the GlobalProtect app was not properly highlighted when the users used tab key or arrow key on the keyboard for navigation.
Addressed
6.0.3
GPC-15104
Fixed an issue where, when the GlobalProtect app was installed on Mac devices, the screen reader did not announce the label and description for the
Manage Portals
(
Settings
Connections
) table.
Addressed
6.0.3
GPC-15100
Fixed an issue where, when the GlobalProtect app was installed on Mac devices, the screen reader did not announce any status message after the
Star
button was pressed to connect to the gateway.
Addressed
6.0.3
GPC-15072
Fixed an issue where the GlobalProtect HIP check incorrectly detected the Anti-Malware information for Definition Date for Sophos Endpoint Protection.
Addressed
6.0.3
GPC-15068
(
Windows 10 UWP
).
A fix was made to address an OpenSSL infinite loop vulnerability in GlobalProtect app software ( CVE-2022-0778 ).
Addressed
6.0.3
GPC-15063
Fixed an issue, where the GlobalProtect app was installed on devices running macOS, the Prisma Access users were not able to disable the GlobalProtect app using the
Allow with Ticket
option.
Addressed
6.0.3
GPC-15056
Fixed an issue where, when the GlobalProtect portal or gateway was configured to authenticate users using SAML authentication, the users were not prompted for Multi-Factor Authentication (MFA) even after entering their credentials through the IdP (Identity Providers) login page.
Addressed
6.0.3
GPC-15054
Fixed an issue where the GlobalProtect app got randomly disconnected when there was a high amount of traffic, such as when running a speed test or using Zoom or Hangout.
Addressed
6.0.3
GPC-14989
Fixed an issue where, when the
No Direct Access to local network
option was enabled on GlobalProtect gateway, the GlobalProtect users’ loopback interface network was masked causing connection failure.
Addressed
6.0.3
GPC-14933
Fixed an issue where the SAML authentication failed when users pressed the
Enter
key using keyboard after entering the login credentials.
Addressed
6.0.3
GPC-14915
Fixed an issue where, when the GlobalProtect app was installed on Windows and macOS devices, the gateway name was not fully displayed on the GlobalProtect main window and 'Host Information Profile' window on the 'Settings' page.
Addressed
6.0.3
GPC-14846
Fixed an issue where, when the GlobalProtect app was installed on macOS devices and the endpoint traffic policies were configured, the default browser page displayed the error
ERR_SOCKET_NOT CONNECTED
when the user tried to log out from the app. Users were unable to login to the app again.
Addressed
6.0.3
GPC-14770
Fixed an issue where, when the GlobalProtect app was installed on devices, the HIP check process stopped running and the tunnel was disconnected after 3 hours.
Addressed
6.0.3
GPC-14732
Fixed an issue where the GlobalProtect app got disconnected after HIP check.
Addressed
6.0.3
GPC-14657
Fixed an issue where, when the GlobalProtect app was installed on devices, the HIP check process stopped running and the tunnel was disconnected after 3 hours.
Addressed
6.0.3
GPC-14656
Fixed an issue where, when the GlobalProtect app was installed on devices, the HIP check process stopped running and the tunnel was disconnected after 3 hours.
Addressed
6.0.3
GPC-14578
Fixed an issue where, after connecting to GlobalProtect using Connect Before Logon (CBL) with SAML authentication, the GlobalProtect app kept opening and closing after the user logged in.
Addressed
6.0.3
GPC-13752
Fixed an issue where, when the GlobalProtect app was installed on Windows devices, the SAML login page to authenticate Network Discovery was not properly displayed.
Addressed
6.0.2
GPC-15068
A fix was made to address an OpenSSL infinite loop vulnerability in GlobalProtect app software ( CVE-2022-0778 ).
Addressed
6.0.2
GPC-15023
Fixed an issue where, when the GlobalProtect app was installed on devices running on Chrome OS, the app could not connect to the gateway after successful SAML authentication. The app stayed in
Connecting
state and the users had to go back to the
Portal Authentication Complete
page and click on
click here to launch GlobalProtect
to connect to the gateway.
Addressed
6.0.1
GPC-15293
Fixed an issue where, when the GlobalProtect app was installed on Linux devices for the first time, the users were prompted to enter the user credentials twice.
Addressed
6.0.1
GPC-15075
Fixed an issue where the GlobalProtect app got randomly disconnected when there was a high amount of traffic like when running a speed test or using Zoom or Hangout.
Addressed
6.0.1
GPC-15068
A fix was made to address an OpenSSL infinite loop vulnerability in GlobalProtect app software ( CVE-2022-0778 ).
Addressed
6.0.1
GPC-15062
Fixed an issue where, when the GlobalProtect app was installed on macOS devices, the connection became unstable when the user clicked the
Click here
or
Retry
button on the default browser page for SAML authentication.
Addressed
6.0.1
GPC-15060
Fixed an issue where, when the GlobalProtect app was installed on the Linux devices, the app could not resolve internal domains when the DNS suffix was not configured.
Addressed
6.0.1
GPC-14959
Fixed an issue where, when the GlobalProtect app was installed on Linux devices, the GlobalProtect logs displayed password information when the password contained the (<) character. The password characters succeeding the (<) character were displayed in the logs.
Addressed
6.0.1
GPC-14824
Fixed an issue where, when the GlobalProtect app was installed on macOS devices, the GlobalProtect app tried to restore the gateway connection even when the device was on Modern Standby mode. The users were prompted to authenticate using multi-factor authentication (MFA) authentication.
Addressed
6.0.1
GPC-14804
Fixed an issue where, when the GlobalProtect app was installed and configured with
Allow User to Disable GlobalProtect
to
Allow with Ticket
option, the app did not display the
Need Help?
link next to the
Ticket Number
field on the screen.
Addressed
6.0.1
GPC-14792
Fixed an issue where, when Connect Before Logon using Security Assertion Markup Language (SAML) authentication was used to login to the endpoint, the users could not authenticate as the authentication process stopped when redirected to the organization’s sign-in page.
Addressed
6.0.1
GPC-14763
Fixed an issue where, when the GlobalProtect app was installed on Windows devices, the machine displayed a blue screen when the users tried to connect to the GlobalProtect app.
Addressed
6.0.1
GPC-14691
Fixed an issue where the GlobalProtect IPV6 static route for the gateway was getting removed shortly after establishing the connection causing unexpected GlobalProtect disconnections.
Addressed
6.0.1
GPC-14640
Fixed an issue where, when the GlobalProtect app was deployed for pre-logon, the GlobalProtect Enforcer remained enabled even after the app was disabled.
Addressed
6.0.1
GPC-14609
Fixed an issue where the HIP check did not detect the Sentinel One RTP and definition date properly, which caused the device to fail the HIP check.
Addressed
6.0.1
GPC-14572
Fixed an issue, where the GlobalProtect app users were prompted to re-enter the password when the connection was refreshed.This issue occurred only when the password contained non-English alphabets.
Addressed
6.0.1
GPC-14492
Fixed an issue where, when the GlobalProtect app was installed on Windows devices and split tunnel was configured to exclude or include any application traffic that relied on the loopback connection source IP address, the split tunnel configuration based on the application did not work.
Addressed
6.0.1
GPC-14477
Fixed an issue where the GlobalProtect app did not detect real-time protection for SentinelOne Endpoint Security, which caused the device to fail the HIP check.
Addressed
6.0.1
GPC-14453
Fixed an issue where the TCP Option lookup for IP fragmented TCP packets caused the endpoint to lose access to internal resources.
Addressed
6.0.1
GPC-14405
Fixed an issue where, when the IPv6 Sinkhole feature was enabled to block the GlobalProtect app from accessing the local network devices using IPv6 address, the GlobalProtect gateway still allowed the GlobalProtect app to send IPV6 traffic to local network devices instead of blocking them.
Addressed
6.0.1
GPC-14329
Fixed an issue where macOS devices were able to bypass the GlobalProtect tunnel using the physical adapter even when
No direct access to local network
was enabled.
Addressed
6.0.1
GPC-14278
Fixed an issue where, when the GlobalProtect app was installed on macOS devices, the GlobalProtect HIP report displayed encryption status even when the encryption feature was disabled.
Addressed
6.0.1
GPC-14276
Fixed an issue where the
Check for Updates
option in the GlobalProtect app failed to display the recent GlobalProtect version available for update. The users had to refresh the GlobalProtect connection to get the latest version updates.
Addressed
6.0.1
GPC-14251
Fixed an issue where the GlobalProtect HIP report displayed incorrect OS version Windows 10 instead of the correct version Windows 11.
Addressed
6.0.1
GPC-14100
Fixed an issue where, when the split tunnel was configured on the GlobalProtect gateway to include routes, the traffic which was not included was also sent over the VPN tunnel intermittently.
Addressed
6.0.1
GPC-14010
Fixed an issue where, when the GlobalProtect app was installed on macOS devices, the HIP match logs were missing for some user profiles which caused the device to fail the HIP check.
Addressed
6.0.1
GPC-14008
Fixed an issue where after a GlobalProtect connection was established, the network interface was detected as public instead of domain due to timer issue with Network Location Awareness (NLA).
Addressed
6.0.1
GPC-13986
Fixed an issue where the DNS UDP checksum was incorrectly calculated by GlobalProtect, causing slow connections when the user accessed internal applications using either the CLI or web browser.
Addressed
6.0.1
GPC-13970
Fixed an issue where DNS queries for excluded domains were sent out on both the GlobalProtect app virtual adapter and the device's physical adapter with the
Split-Tunnel Option
set to
Both Network Traffic and DNS
in the App Configurations area of the GlobalProtect portal configuration.
Addressed
6.0.1
GPC-13963
Fixed an issue where the DNS UDP checksum was incorrectly calculated, causing latency in the GlobalProtect connection.
Addressed
6.0.1
GPC-13900
Fixed an issue where, when the
Resolve All FQDNs using DNS Servers Assigned by the Tunnel (Windows Only)
option was enabled in the App Configurations area of the GlobalProtect portal configuration, GlobalProtect generated a negative DNS response incorrectly using
SERVERFAIL
as the error code, causing DNS resolution to fail and delays on application start-up on end points in a dual stack environment.
Addressed
6.0.1
GPC-13857
Fixed an issue where, if GlobalProtect was configured for domain-based split tunneling and the domain name resolved to the loopback address (127.0.0.1), the GlobalProtect app would disconnect on devices running macOS 11.5 or later.
Addressed
6.0.1
GPC-13819
Fixed an issue where, when the
Resolve All FQDNs using DNS Servers Assigned by the Tunnel (Windows Only)
option in the App Configurations area of the GlobalProtect portal configuration was enabled, the GlobalProtect pre-logon process took more than 2 minutes to complete when the user tried to log on to the Windows operating system after a reboot.
Addressed
6.0.1
GPC-13801
Fixed an issue where, after an upgrade, GlobalProtect generated a negative DNS response incorrectly using error code
SERVERFAIL
, which caused Kerberos authentication to fail.
Addressed
6.0.1
GPC-13774
Fixed an issue where the GlobalProtect tunnel could not send traffic after the system woke up from sleep mode.
Addressed
6.0.1
GPC-13725
Fixed an issue where, during a transparent upgrade of the GlobalProtect app, the system rebooted or woke up from hibernation, which caused the upgrade to fail due to competing resources between the system reboot and transparent upgrade. The previous version of the GlobalProtect app was completely uninstalled.
Addressed
6.0.1
GPC-14612
Fixed an issue where, on Android devices with the GlobalProtect app installed, when the client certificate alias setting was set to pre-select in the managed configuration, the GlobalProtect
Choose certificate
pop-up failed to appear and the user was redirected to the captive portal (SAML) login page.
Addressed
6.1.5
GPC-20193
Fixed an issue where Linux users are disconnected intermittently from GlobalProtect.
Addressed
6.1.5
GPC-20124
Fixed an issue where GlobalProtect HIP was not working due to a failed OPSWAT library.
Addressed
6.1.5
GPC-19792
Fixed an issue where an error message was displayed on the GlobalProtect client: "Previous authentication attempt timed out. Please select Connect to initiate authentication once again". Despite this error, the VPN tunnel was established, and traffic was routed successfully through the tunnel.
Addressed
6.1.5
GPC-19748
Fixed an issue where the GlobalProtect app status was connected but no traffic was passing through. This issue occurred after the GlobalProtect Linux client was upgraded from 6.1.3 to 6.1.4 on Ubuntu Version 22.04.
Addressed
6.1.5
GPC-19353
Fixed an issue where GlobalProtect was stuck in "Connecting" stage a with "Login Successful!" white page displayed on the default browser instead of the expected Microsoft SAML page.
Addressed
6.1.5
GPC-19297
Fixed an issue where the Cortex XDR Last full-Scan-Time was not detected on GlobalProtect App for Linux.
Addressed
6.1.5
GPC-18903
Fixed an issue where when the GlobalProtect app was installed on Linux devices running on Red Hat version 9, the ‘resolv.conf file’ was not getting updated with GlobalProtect DNS servers as expected.
Addressed
6.1.5
GPC-17378
Fixed an issue where, when the GlobalProtect app was installed on devices running System76 coreboot BIOS, the HIP check failed when the Device ID was empty.
Addressed
6.1.4
GPC-19340
Fixed an issue where the GlobalProtect app failed to send HIP reports hourly.
Addressed
6.1.4
GPC-19331
Fixed an issue where, when SAML authentication was used to authenticate to the GlobalProtect app, the app used an unknown username
SAMLUser
which was not configured instead of the actual username of the user, which caused an authentication failure.
Addressed
6.1.4
GPC-19289
Fixed an issue where, when the GlobalProtect app was installed on Linux devices with Ubuntu 22.04, the app was unable to collect HIP reports.
Addressed
6.1.4
GPC-19280
Fixed an issue where, when the GlobalProtect app transitions from pre-logon to user-logon tunnel, the app did not display the list of gateways for the users to change the gateway. The gateway list was displayed only when the app was refreshed.
Addressed
6.1.4
GPC-19193
Fixed an issue where the GlobalProtect app was unable to fetch Windows firewall and antimalware information correctly.
Addressed
6.1.4
GPC-19187
Fixed an issue where, when the GlobalProtect app version 6.0.8 or 6.0.7 was installed on endpoints running macOS Sonoma 14.1, the PanGPS did not work as expected.
Addressed
6.1.4
GPC-19162
Fixed an issue where, when the user upgraded the GlobalProtect version to 5.2.13 or later version, the HIP report displayed the DLP Digital Guardian Agent as disabled.
Addressed
6.1.4
GPC-19153
Fixed an issue where, when the GlobalProtect app was installed on iOS devices, the users had to reconnect to the GlobalProtect app several times in a day. Users were prompted to enter the credentials every time they tried to reconnect.
Addressed
6.1.4
GPC-19143
Fixed an issue where the users were unable to choose the correct certificate for the app as the configured registry value
previousCertificate
did not work as expected.
Addressed
6.1.4
GPC-19104
Fixed an issue where the GlobalProtect HIP report failed to detect the Real Time Protection status for Cortex XDR, which caused the device to fail the HIP check.
Addressed
6.1.4
GPC-19083
Fixed an issue where, when the GlobalProtect app was installed on devices running macOS, the
Connection
tab under app
Settings
did not display the connection status and the refresh connection did not work when the
Settings
window was opened.
Addressed
6.1.4
GPC-19061
Fixed an issue where GlobalProtect detected an incorrect Real-Time Protection status for Crowdstrike Falcon during HIP checks for antimalware.
Addressed
6.1.4
GPC-19060
Fixed an issue where when the GlobalProtect app was installed on devices running macOS, the
Connection
tab under app
Settings
did not display the connection status when the app was changed from a non-tunneled gateway to a tunneled gateway.
Addressed
6.1.4
GPC-19044
Fixed an issue where, when the GlobalProtect app was installed on Windows devices and the user changed the network from wired to wireless within the organization, the device displayed a blue screen.
Addressed
6.1.4
GPC-19023
Fixed an issue where, when the GlobalProtect app version 5.2.13 was installed on devices running macOS, the users were unable to connect to the Zoom application.
Addressed
6.1.4
GPC-19009
Fixed an issue where, when SAML authentication was used to authenticate to the GlobalProtect app and the user changed the gateway to a manual gateway, the app stayed in the
Connecting
stage.
Addressed
6.1.4
GPC-18983
Fixed an issue where the Central Authentication Service (CAS) authentication did not work when the GlobalProtect app was connected to an internal gateway and the app repeatedly opened the SAML authentication page.
Addressed
6.1.4
GPC-18968
Fixed an issue where the GlobalProtect app displayed,
You are on the internal corporate network
message when users were on a public network. Users had to reboot the system to resolve this issue.
Addressed
6.1.4
GPC-18903
Fixed an issue where, when the GlobalProtect app was installed on Linux devices running on Red Hat version 9, the
resolv.conf
file was not getting updated with GlobalProtect DNS servers as expected.
Users should install/uninstall GlobalProtect app using
p_install.sh
and
gp_uninstall.sh
to fix resolve this issue.
Addressed
6.1.4
GPC-18703
Fixed an issue where the GlobalProtect HIP check did not detect the Trellix Endpoint Security application, which caused the device to fail the HIP check.
Addressed
6.1.4
GPC-18854
Fixed an issue where users were prompted twice to authenticate using SAML authentication when used with CAS authentication and authentication override cookie, the GlobalProtect app got stuck in the
Connecting
stage while trying to connect.
Addressed
6.1.4
GPC-18828
Fixed an issue where split tunnel CNAME records were created before the GlobalProtect tunnel was established.
Addressed
6.1.4
GPC-18525
Fixed an issue where, when the GlobalProtect app was installed on Linux devices running on Ubuntu 22.04, the app got disconnected intermittently with the error message:
Failed to read notify event buffer, error: Resource temporarily unavailable.
Addressed
6.1.4
GPC-16975
Fixed an issue where, when the GlobalProtect app was installed on devices running macOS, the screen reader did not announce the name of the GlobalProtect gateway when the gateway was marked with the star symbol.
Addressed
6.1.4
GPC-16597
Fixed an issue where the GlobalProtect app stopped working when the app was upgraded from version 5.2.8 to 6.0.3.
Addressed
6.1.3
GPC-19336
Fixed an issue where the ADEM portal did not display user information such as User-ID when the ADEM portal was changed from on-premises to Prisma Access.
Addressed
6.1.3
GPC-18964
Fixed an issue where, when the GlobalProtect app was installed on devices running macOS and the user upgraded the GlobalProtect version from 6.0.5 to 6.2.1, the app got disconnected after 10 minutes.
Addressed
6.1.3
GPC-18913
Fixed an issue where the GlobalProtect app changed the connection status to
Not Connected
even though the app was connected to the internal gateway.
Addressed
6.1.3
GPC-18907
Fixed an issue where the GlobalProtect app on macOS endpoints did not query the secondary DNS (when primary DNS is not responding) when the domain was part of the exclude domain list (both network and DNS).
Addressed
6.1.3
GPC-18822
Fixed an issue where, when the GlobalProtect app was installed on Windows devices and the device was reset using the Microsoft Recovery tool, the GlobalProtect app was not properly displayed.
Addressed
6.1.3
GPC-18788
Fixed an issue where the GlobalProtect HIP check did not detect McAfee Total Protection as an anti-malware application, which caused the device to fail the HIP check.
Addressed
6.1.3
GPC-18733
Fixed an issue where the hyperlinks with the URLs containing the
=
character in the HIP notification message did not work as expected and the page did not open when the user clicked the URL.
Addressed
6.1.3
GPC-18728
Fixed an issue where the
I Agree
option on the GlobalProtect app Welcome page did not work as expected when the user selected the option using a keyboard.
Addressed
6.1.3
GPC-18720
Fixed an issue where the GlobalProtect app became unresponsive when the user clicked the
ESC
button during authentication using a hard token.
Addressed
6.1.3
GPC-18599
Fixed an issue where Linux endpoints could not resolve FQDNs when the GlobalProtect tunnel was connected because the host stopped listening to UDP/53 on the loopback IP address.
Addressed
6.1.3
GPC-18598
Fixed an issue where the GlobalProtect SSO tile was selected instead of the Windows Password tile in the Windows Login screen even though the registry key
MakeGPCPDefault
was set to
No
.
Addressed
6.1.3
GPC-18594
Fixed an issue where the GlobalProtect app was unable to send HIP reports when the app was connected using IPv6 address.
Addressed
6.1.3
GPC-18566
Fixed an issue where the GlobalProtect app incorrectly displayed the gateway as internal when it was connected to an external gateway.
Addressed
6.1.3
GPC-18528
Fixed an issue where the GlobalProtect HIP check incorrectly detected the version for KES 12 (Kaspersky Endpoint Security), which caused the device to fail the HIP check.
Addressed
6.1.3
GPC-18512
Fixed an issue where, when the GlobalProtect app was installed on Linux devices running Ubuntu 22.04 or REHL 9.1, the app got disconnected periodically.
Addressed
6.1.3
GPC-18471
Fixed an issue where, when multiple
wa_3rd_party_host_64.exe
processes persisted even after the HIP check was performed, the GlobalProtect app stopped working.
Addressed
6.1.3
GPC-18426
Fixed an issue where, when the GlobalProtect app was configured with the '
Disable GlobalProtect
option set to
Allow With Ticket
, the app did not display the correct Disable Duration time.
Addressed
6.1.3
GPC-18383
Fixed an issue where the GlobalProtect app failed to connect on Windows 11 endpoints with error
Could not connect to the GlobalProtect service
.
Addressed
6.1.3
GPC-18379
Fixed an issue where, when the IP address type was set to IPv4 and IPv6, the GlobalProtect app could connect only to the manual gateway instead of connecting to the best available gateway.
Addressed
6.1.3
GPC-18367
Fixed an issue where, when pre-logon was configured for the GlobalProtect app, the GlobalProtect portal displayed the FQDN or IP address of the gateway and not the gateway name. With this fix, the portal displays the gateway name instead of FQDN or IP address.
Addressed
6.1.3
GPC-18336
Fixed an issue where, when the GlobalProtect app got automatically connected after a system reboot even though the connection method configured was On-Demand.
Addressed
6.1.3
GPC-18318
Fixed an issue where, when the GlobalProtect app was connected to the internal gateway, the app displayed the message :
Connected - Inter....
instead of
Connected
.
Addressed
6.1.3
GPC-18251
Fixed an issue where the GlobalProtect HIP check did not detect McAfee LiveSafe as an anti-malware application, which caused the device to fail the HIP check.
Addressed
6.1.3
GPC-18230
Fixed an issue where, when the user entered credentials during SAML authentication after the set internal login timer, the app displayed an authentication failed message without providing the reason. The
Retry
button on the app web interface did not work properly when using an embedded browser for authentication. The
Retry
button was not fully visible on the embedded browser.
Addressed
6.1.3
GPC-18223
Fixed an issue where GlobalProtect experienced a prolonged connection time when IPv6 was disabled on Windows devices.
Addressed
6.1.3
GPC-18200
Fixed an issue where the GlobalProtect HIP check did not detect McAfee LiveSafe as an antivirus application, which caused the device to fail the HIP check.
Addressed
6.1.3
GPC-18173
Fixed an issue where the vertical scroll bar on the GlobalProtect app web interface did not work properly when users tried to select the certificate from the drop-down.
Addressed
6.1.3
GPC-18171
Fixed an issue where users were unable to select the external gateway manually when connected to the internal network. The GlobalProtect stayed in
Connecting
state and users had to manually disconnect the connection and connect to the internal network to exit the
Connecting
state.
Addressed
6.1.3
GPC-18167
Fixed an issue where the GlobalProtect app displayed the Prisma Access gateways that were not set for manual selection.
Addressed
6.1.3
GPC-18157
Fixed an issue where the GlobalProtect app displayed the Credential Provider language in English when the system language was German.
Addressed
6.1.3
GPC-18155
Fixed an issue where, when the GlobalProtect app was installed on Linux devices, the app displayed the text in an incorrect format and the users were unable to read the information displayed on the app.
Addressed
6.1.3
GPC-18146
Fixed an issue where, when the GlobalProtect app was installed on Windows devices, the GlobalProtect HIP check did not detect the correct details for Cortex XDR, which caused the device to fail the HIP check.
Addressed
6.1.3
GPC-18135
Fixed an issue where, when the GlobalProtect app was installed on devices running macOS, the GlobalProtect HIP check detected the WithSecure antivirus software as XProtect, which caused the device to fail the HIP check.
Addressed
6.1.3
GPC-18107
Fixed an issue where the GlobalProtect HIP check did not detect McAfee LiveSafe – Internet Security, which caused the device to fail the HIP check.
Addressed
6.1.3
GPC-18092
Fixed an issue where GlobalProtect connected to an internal gateway got automatically disconnected after a certain period of time.
Addressed
6.1.3
GPC-18060
Fixed an issue where the GlobalProtect HIP check did not detect McAfee Total Protection, which caused the device to fail the HIP check.
Addressed
6.1.3
GPC-18039
Fixed an issue where the GlobalProtect HIP check did not detect the Definition Date correctly for the CrowdStrike application, which caused the device to fail the HIP check.
Addressed
6.1.3
GPC-17914
Fixed an issue where, when the GlobalProtect app was install