Fixed an issue where GlobalProtect app version 6.3.3 using SAML with the embedded browser would lose cursor focus in the password field, requiring users to click in the password field before entering their password.

Fixed an issue where the GlobalProtect Welcome page displayed incorrect or duplicate HTML content.

Fixed an issue where the embedded browser shown as part of SAML authentication was blank.

Fixed an issue where GlobalProtect shut down unexpectedly on Windows 11 devices running multiple versions of GlobalProtect 6.3. The issue was caused by the firewall sending invalid IPv6 packets to GlobalProtect, which did not have a validation method before processing.

Fixed an issue where the users were unable to connect the GlobalProtect app after performing the resolution of CVE-2024-5921. The app displayed the following error, The certificate CN name mismatch.

(GlobalProtect app version 6.3.1 enabled with FIPS-CC only) Fixed an issue where the OCSP request did not send the Host header, causing the X509v3 certificate validation to fail when accessing the OCSP or CRL.

Fixed an issue where the GlobalProtect HIP report failed to detect the Seqrite Endpoint Protection application, when the application was upgraded to a higher version 18.00 (14.0.0.1)

Fixed an issue where, when the installed OPSWAT version was incompatible with the endpoint's CrowdStrike Falcon version and HIP checks were processed, the HIP check failed.

Fixed an issue where when the GlobalProtect app was installed on devices running macOS and the app version was upgraded to 6.2.5, end users were unable to connect the app. The app got stuck in the Connecting state and displayed the following message, You are redirected to an embedded browser to authenticate and connect.

Fixed an issue where GlobalProtect did not populate the internal routes in the user's routing table.

Fixed an issue where the HIP notification pop-up on macOS looked different from that on Windows.

Fixed an issue where, when the GlobalProtect app was installed on devices running macOS and traffic enforcement was enabled, Safari did not work as expected and websites were loaded slowly and sometimes partially loaded.

Fixed an issue where the GlobalProtect app intermittently disconnected from the gateway when the user was using the embedded browser for SAML authentication.

Fixed an issue where, when the GlobalProtect app was installed on Windows machine and Connect Before Logon (CBL) was configured for the app, the app did not start properly when the user logged on to the device.

Fixed an issue where, when the GlobalProtect for Government app was installed on Android devices with FIPS-CC mode enabled, the application erroneously searched for SERVERAUTH EKU instead of CLIENTAUTH EKU, leading to the failure of client certificate verification.

Fixed an issue where, when the GlobalProtect app was installed on iOS platforms, users were not logged out when refreshing the connection or signing out. Additionally, the logs showed that the gateway-logout and gateway-config-release events did not occur as expected for the Prisma Access internal gateway.

Fixed an issue where, when the GlobalProtect app is installed on Android devices, the Host ID column of the Strata Logging Service (formerly CDL) log did not display the mobile-id setting value.

Fixed an issue where, when the GlobalProtect app was installed on devices running macOS, the certificate information was incorrect during the portal login phase causing authentication failure.

Fixed an issue where the GlobalProtect HIP check incorrectly detected Real time protection status for Kaspersky Endpoint Security, which caused the device to fail the HIP check.

Fixed an issue where the embedded browser was unable to load the Microsoft IdP login page for the users to authenticate to the GlobalProtect app.

Fixed an issue where connection to the GlobalProtect portal failed with the error Username from CAS SSO response is different from the input.

Fixed an issue where the users faced intermittent connection issues while accessing GlobalProtect using an embedded browser.

Fixed an issue where, when the GlobalProtect app was installed on devices running macOS, the app got disconnected and reconnected intermittently.

Fixed an issue where, when the GlobalProtect app was installed on Windows devices, the Smart card (Yubikey) authentication did not work when the device woke up from sleep mode.

Fixed an issue where the manual gateway login failed when users tried to login using their username and password.

Fixed an issue where, when the GlobalProtect app was installed on devices running macOs and when the Enforcer was enabled, Jamf connect was not working after the MacBook was rebooted. Users had to log in manually.

Fixed an issue where, when the GlobalProtect app was installed on devices running macOS, the GlobalProtect app got stuck in the Connecting status when the embedded browser did not load properly.

Fixed an issue where PanGPS did not work on GlobalProtect app version 6.0.4 due to invalid memory reference and users were unable to reconnect to the GlobalProtect app after a system reboot.

Fixed an issue where, when the GlobalProtect app was installed on endpoints running macOS and the split tunnel was configured based on the application for Zoom, users were unable to access any sites when the split tunnel was disabled for Zoom and moved to full tunnel.

Fixed an issue where translation errors were observed in the GlobalProtect app for French localization.

Fixed an issue where macOS users were connected to the GlobalProtect app before they agreed to their company’s terms of service.

Fixed an issue where, when the GlobalProtect app was installed on endpoints running macOS and split tunnel was configured based on the application, the Zoom app got disconnected intermittently.

Fixed an issue where the prelogon connect method failed on the GlobalProtect gateway prelogin stage.

Fixed an issue where, when the GlobalProtect app was installed on devices running macOS, the split tunnel feature did not work as expected when Jamf was used to push the configuration policy rules.

Fixed an issue where the GlobalProtect app displayed a generic SAML login page and not the actual login page for authentication and the connection was not established when cached portal configuration was used.

Fixed an issue where, when the Globalprotect app was installed on devices running macOS and Endpoint Traffic Policy Enforcement was set to All traffic, users were unable to log in using Okta.

Fixed an issue where the GlobalProtect app was trying to use the old portal's authorization cookie to login instead of the newly migrated portal. This happened when the user changed from secondary portal to primary portal or vice versa without signing out.

Fixed an issue where the GlobalProtect embedded browser for SAML authentication window obscured the two-factor authentication prompt hindering the users from entering their PIN.

Fixed an issue where users got connection errors in an embedded browser after the computer woke up from sleep or when the user switched gateways.

Fixed an issue where, when the user used CAS token to authenticate, the system logs incorrectly displayed an error message during the GlobalProtect auto refresh configuration interval.

Fixed an issue where a small white blank page randomly popped up on the device screen distracting the users. This issue occurred while the device was connected to GlobalProtect app.

Fixed an issue where the GlobalProtect HIP check failed to detect Kaspersky after an upgrade from 21.3.10.391 to 21.15.8.493.

Fixed an issue where the GlobalProtect HIP check incorrectly detected year and date for Bitdefender Virus Scanner, which caused the device to fail the HIP check.

Fixed an issue where GlobalProtect stayed disconnected even when the device was unlocked by the user.

Fixed an issue where, when the GlobalProtect app was installed on devices running macOS, the app displayed text incorrectly when the system language was German.

Fixed an issue where, when the GlobalProtect app was installed on devices running macOS, the app displayed text incorrectly when the system language was German.

Fixed an issue where the GlobalProtect debug logs displayed information, which was not supposed to display in the logs.

Fixed an issue where the GlobalProtect app displayed a timeout page intermittently when users tried to authenticate with SAML and using an embedded browser.

Fixed an issue where system extensions on MacBook were not updated after the GlobalProtect app was upgraded.

Fixed an issue where the Captive Portal functionality of the GlobalProtect app did not work as expected when users used public Wi-Fi hotspots and the users were unable to connect to the app.

Fixed an issue where, when SAML authentication was used to authenticate to the GlobalProtect app, the app used an unknown username SAML User which was not configured instead of the actual username of the user, which caused an authentication failure.

Fixed an issue where the GlobalProtect app failed to send HIP reports hourly.

Fixed an issue where, when the GlobalProtect app was installed on devices running macOS and split tunnel was configured to exclude application traffic for Zoom, Zoom application did not work as expected.

Fixed an issue where, when the GlobalProtect app is installed on devices running macOS, the app displayed the message, Downloading in progress when the GlobalProtect app was upgraded to 6.0.x using the option Allow Transparently. The app should not display the message when upgraded using the transparent method.

Fixed an issue where, when the GlobalProtect app transitioned from pre-logon to userlogon tunnel, the app did not display the list of gateways for the users to change the gateway. The gateway list was displayed only when the app was refreshed.

Fixed an issue where GlobalProtect 6.2.1 tried to connect automatically after the user restarted their computer even though the connect method was set to On-Demand.

Fixed an issue where the GlobalProtect app did not disconnect when the user used the Disable option on the hamburger menu. The tunnel was still up and connected even when the user disconnected the GlobalProtect app.

Fixed an issue where the users were unable to authenticate to the GlobalProtect app using the SAML authentication method with single sign-on (SSO). The app displayed the following message when users tried to authenticate to the app, Cloud Authentication Service single-sign-on failed and the users had to try multiple times to authenticate successfully to the app.

Fixed an issue where the GlobalProtect app was unable to fetch Windows firewall and antimalware information correctly.

Fixed an issue where the GlobalProtect HIP check did not detect the definition version correctly for Cortex XDR (8.0.1.33809).

Fixed an issue where, when the GlobalProtect app was installed on devices running macOS and domain and app traffic exclusion was configured for Zoom but users were unable to connect to the Zoom application when the app was connected.

Fixed an issue where, when the user upgraded the GlobalProtect version to 5.2.13 or later, the HIP report displayed the DLP Digital Guardian Agent as disabled.

Fixed an issue where the users were unable to choose the correct certificate for the app as the configured registry value previousCertificate did not work as expected.

Fixed an issue where the GlobalProtect HIP report failed to detect the Real Time Protection status for Cortex XDR, which caused the device to fail the HIP check.

Fixed an issue where when the GlobalProtect app was installed on devices running macOS, the Connection tab under app Settings did not display the connection status and the refresh connection did not work when the Settings window was opened.

Fixed an issue where, when the GlobalProtect app was installed on devices running macOS, the Connection tab under app Settings did not display the connection status when the app was changed from a non-tunneled gateway to a tunneled gateway.

Fixed an issue where, when the GlobalProtect app was installed on Windows devices and the user changed the network from wired to wireless within the organization, the device displayed a blue screen.

Fixed an issue where, when the GlobalProtect app version 5.2.13 was installed on devices running macOS, the users were unable to connect to the Zoom application.

Fixed an issue where, when SAML authentication was used to authenticate to the GlobalProtect app and the user changed the gateway to a manual gateway, the app stayed in the Connecting stage.

Fixed an issue where internet via WiFi connection was unavailable for GlobalProtect users after their computer woke up from sleep because the app WiFi adapter was unable to obtain a DHCP IP address. This issue occurred on devices where Enforce GlobalProtect for Network Access feature was enabled.

Fixed an issue where the Central Authentication Service (CAS) authentication did not work when the GlobalProtect app was connected to an internal gateway and the app repeatedly opened the SAML authentication page.

Fixed an issue where the GlobalProtect app displayed You are on the internal corporate network message when users were on a public network. Users had to reboot the system to resolve this issue.

Fixed an issue where, when the GlobalProtect app was installed on devices running macOS and the user upgraded the GlobalProtect version from 6.0.5 to 6.2.1, the app got disconnected after 10 minutes.

Fixed an issue where the GlobalProtect HIP check incorrectly detected Real Time Protection for Cortex XDR, which caused the device to fail the HIP check.

Fixed an issue where the GlobalProtect app displayed the connection status as Not Connected even though the app was connected to the internal gateway.

Fixed an issue where the GlobalProtect app running on macOS endpoints did not query the secondary DNS (when primary DNS is not responding) when the domain was part of the exclude domain list (both network and DNS).

Fixed an issue where, when the GlobalProtect app was installed on devices running macOS, the GlobalProtect HIP check did not detect the Trellix Endpoint Security application, which caused the device to fail the HIP check.

Fixed an issue where the GlobalProtect MSI download was getting stuck at 27%.

Fixed an issue where split tunnel CNAME records were created before the GlobalProtect tunnel was established.

Fixed an issue where the Logon button on the GlobalProtect login screen stopped working after receiving the Microsoft Edge WebView2 runtime, 117.0.2045.36 update on the devices.

Fixed an issue where, when the GlobalProtect app was installed on devices running macOS, the GlobalProtect HIP check did not detect the Total Defense antivirus application, which caused the device to fail the HIP check.

Fixed an issue where the GlobalProtect HIP check did not detect the Trellix Endpoint Security application, which caused the device to fail the HIP check.

Fixed an issue where, when the GlobalProtect app was installed on Windows devices, the Allow Manually upgrade failed when the user tried to upgrade the GlobalProtect app version from 6.0.5 to 6.0.7

Fixed an issue where, when the GlobalProtect app version 6.0.7 was installed on devices running macOS, the Allow with Passcode option did not work as expected when the user tried to disable the GlobalProtect app with the configured passcode.

Fixed an issue where the GlobalProtect HIP check incorrectly detected the version for KES 12 (Kaspersky Endpoint Security), which caused the device to fail the HIP check.

Fixed an issue where, when the GlobalProtect app got reconnected after the user changed the network access from Wi-Fi (IPv4 only) to Ethernet connection (Dual Stack IPv4 + IPv6), the IPv6 ip-user mapping was missing on the firewall and only IPv6 ip-user mapping was available. The user had to refresh the connection to resolve this issue.

Fixed an issue where GlobalProtect app did not connect while Netskope was connected and vice-versa.

Fixed an issue where the GlobalProtect app would not close when the user clicked the icon on the taskbar due to a bug in the Windows 11 operating system.

Fixed an issue where, when the GlobalProtect app was installed on devices running macOS, the screen reader did not announce the name of the GlobalProtect gateway when the gateway was marked with the star symbol.

Fixed an issue where the GlobalProtect app stopped working when the app was upgraded from version 5.2.8 to 6.0.3.

Fixed an issue where a hyperlink in a HIP notification opened in the GPO-disabled Internet Explorer 11 browser instead of the default browser.

Fixed an issue where, when the GlobalProtect app was installed on Windows devices and the device was reset using the Microsoft Recovery tool, the GlobalProtect app was not properly displayed.

Fixed an issue where the GlobalProtect HIP check did not detect McAfee Total Protection as an anti-malware application, which caused the device to fail the HIP check.

Fixed an issue where the hyperlinks with the URLs containing the = character in the HIP notification message did not work as expected and the page did not open when the user clicked the URL.

Fixed an issue where the I Agree option on the GlobalProtect app Welcome page did not work as expected when the user selected the option using a keyboard.

Fixed an issue where the GlobalProtect app became unresponsive when the user clicked the ESC button during authentication using a hard token.

Fixed an issue where the GlobalProtect SSO tile was selected instead of the Windows Password tile in the Windows Login screen even though the registry key MakeGPCPDefault was set to No.

Fixed an issue where the GlobalProtect app was unable to send HIP reports when the app was connected using IPv6 address.

Fixed an issue where the Captive Portal Detection functionality of the GlobalProtect app did not work as expected when the users used public Wi-Fi hotspots and the GlobalProtect app failed to retrieve cached configuration without a username.

Fixed an issue where the GlobalProtect app was installed on Windows devices with the split tunnel feature and when the user excluded the access route, the GlobalProtect app excluded only the route and did not exclude the subnets.

Fixed an issue where, when the GlobalProtect app was configured with the Disable GlobalProtect option set to Allow with Ticket, the app did not display the correct Disable Duration time.

Fixed an issue where, when the IP address type was set to IPv4 and IPv6, the GlobalProtect app could connect only to the manual gateway instead of connecting to the best available gateway.

Fixed an issue where, when the GlobalProtect app got automatically connected after a system reboot even though the connection method configured was On-Demand.

Fixed an issue where, when the GlobalProtect app was connected to the internal gateway, the app displayed the incorrect message : Connected - Inter.... instead of Connected.

Fixed an issue where the GlobalProtect app displayed an incorrect gateway location name instead of the correct gateway location configured by the user.

Fixed an issue where the MSI install logs showed mutiple messages for Autonomous DEM installation.

Fixed an issue where, when the GlobalProtect app was configured with Endpoint Traffic Policy Enforcement and Disable Local Subnet Access (DLSA), the Autonomous DEM reported users’ internet connection as down.

Fixed an issue where the GlobalProtect HIP check did not detect McAfee LiveSafe as an anti-malware application, which caused the device to fail the HIP check.

Fixed an issue where the end users were prompted to enter Windows login credentials (username and password) instead of their PIV Badge PIN when the system was unlocked or after a system reboot.

Fixed an issue where, when the user entered credentials during SAML authentication after the set internal login timer, the app displayed an authentication failed message without providing the reason. The Retry button on the app web interface did not work properly when using an embedded browser for authentication. The Retry button was not fully visible on the embedded browser.

Fixed an issue where GlobalProtect experienced a prolonged connection time when IPv6 was disabled on Windows, but GlobalProtect Portal was configured to assign IPv6 addresses.

Fixed an issue where the GlobalProtect HIP check did not detect McAfee LiveSafe as an antivirus application, which caused the device to fail the HIP check.

Fixed an issue where users were prompted to enter their credentials even when the GlobalProtect app was configured for authenticating with either Authentication Profile /Cookie or Client Certificate.

Fixed an issue where the vertical scroll bar on the GlobalProtect app web interface did not work properly when users tried to select the certificate from the drop-down.

Fixed an issue where users were unable to select the external gateway manually when connected to the internal network. The GlobalProtect stayed in Connecting state and users had to manually disconnect the connection and connect to the internal network to exit the Connecting state.

Fixed an issue where the GlobalProtect app displayed the Prisma Access gateways that were not set for manual selection.

Fixed an issue where the GlobalProtect app displayed the Credential Provider language in English when the system language was German.

Fixed an issue where, when the GlobalProtect app was installed on devices running macOS, the GlobalProtect HIP check detected the WithSecure antivirus software as XProtect, which caused the device to fail the HIP check.

Fixed an issue where the GlobalProtect HIP check did not detect McAfee LiveSafe – Internet Security, which caused the device to fail the HIP check.

Fixed an issue where GlobalProtect connected to an internal gateway got automatically disconnected after a certain period of time.

Fixed an issue where the GlobalProtect app selected an unexpected gateway due to a latency discrepancy seen between PanGPS and packet capture.

Fixed an issue where the GlobalProtect HIP check did not detect McAfee Total Protection, which caused the device to fail the HIP check.

Fixed an issue where the GlobalProtect HIP check did not detect the Definition Date correctly for the CrowdStrike application, which caused the device to fail the HIP check.

Fixed an issue where, when the No direct access to local network option was enabled on the GlobalProtect app with access routes excluded from the GlobalProtect VPN tunnel, the feature did not work as expected when Endpoint Traffic Policy Enforcement was enabled.

Fixed an issue where users were unable to connect to GlobalProtect gateway when only one external gateway was added due to the following error: Cannot Verify Server Certificate of Gateway.

Fixed an issue where the GlobalProtect HIP check incorrectly detected Sophos Endpoint Agent version 3.86.1, which caused the device to fail the HIP check.

Fixed an issue where the GlobalProtect HIP check did not detect the Xcitium Enterprise, the Endpoint Protection Platform by COMODO, which caused the device to fail the HIP check.

Fixed an issue where, when the GlobalProtect app was installed on devices running macOS and GlobalProtect enforcer was configured with allowed FQDNs, users were still able to access the internet and other public domains.

Fixed an issue when the GlobalProtect app was configured with the option Allow User to Disable GlobalProtect App with comment, the option did not work as expected.

Fixed an issue where the GlobalProtect HIP check did not detect the Real-Time Protection status correctly for the CrowdStrike Falcon application, which caused the device to fail the HIP check.

Fixed an issue where, when the GlobalProtect app was connected through the Prisma Access gateway, the upload speed of the internet was reduced to 2 Mbps.

Fixed an issue, where the GlobalProtect app got stuck in Selecting Best Gateway status when the device woke up from sleep mode. Users had to reboot the device to connect to the app.

Fixed an issue where, when the upgrade script update_tmp.bat was used, the error message did not display the correct exit timeout for the PanGPS uninstall process.

Fixed an issue where the GlobalProtect app displayed the status as 'Connected-Internal even when the app was not connected.

Fixed an issue where, when the GlobalProtect app was installed on devices running macOS, the upload speed of the internet was reduced after a version upgrade.

Fixed an issue where, when Internal Host Detection (IHD) was enabled but failed to detect the internal network properly, the app failed to switch to the external gateway when users switched from an internal network to an external network.

Fixed an issue where, when the GlobalProtect app was installed on devices running macOS, the certificate information was not accessible even though the GlobalProtect app had full access to the certificate store.

Fixed an issue where, when the GlobalProtect app was installed on devices running macOS, the GlobalProtect app failed to reconnect and continued to stay in the Connecting state after the device woke up from Modern Standby mode.

Fixed an issue where the GlobalProtect HIP check did not detect the Cortex Anti-Malware status properly after a system reboot, which caused the device to fail the HIP check.

Fixed an issue where, when the GlobalProtect app was installed on devices running macOS, users were unable to make a connection to an internal gateway using the default browser for SAML authentication.

Fixed an issue where, when the GlobalProtect app was installed on devices running on macOS, the app did not display the Connect button and Refresh Connection button properly.

Fixed an issue where the GlobalProtect HIP check did not detect the CrowdStrike antivirus software correctly, causing the device to fail the HIP check.

Fixed an issue where the GlobalProtect app was installed on devices running macOS, a blank GlobalProtect app user interface was displayed instead of the correct page.

Fixed an issue where, when the GlobalProtect app was installed on devices running macOS, users were able to select All Gateways heading on the page which was not an option for the users to select. This issue happened on the app interface with a non-English language.

Fixed an issue where, when single sign-on (SSO) for Smart Card was used for authentication, users were prompted to enter a PIN instead of password on the Windows login screen.

Fixed an issue where, when the GlobalProtect app was installed on Android devices with Android 13, the app stopped working while sending GPS notifications.

Fixed an issue where, when the language was set to Japanese, the time to connect was not displayed properly when Disconnect Timeout for the app was configured.

Fixed an issue where the GlobalProtect app reported the computer name differently from the computer name displayed in Autonomous DEM causing a data discrepancy.

Fixed an issue where the GlobalProtect app stopped working abruptly.

Fixed an issue where the GlobalProtect app did not detect Smart Card removal every time the user removed the card and due to which the app was not getting disconnected on On-Demand tunnel mode.

Fixed an issue where the GlobalProtect HIP check incorrectly detected Windows firewall as disabled, which caused the device to fail the HIP check.

Fixed an issue where the GlobalProtect app would get stuck at Connecting state when the user tried to close the browser window for SAML authentication after configuring On-Demand mode for the app.

Fixed an issue where the GlobalProtect portal and gateway selection list were displayed in the table format and not as menu item.

Fixed an issue where, when the GlobalProtect app was installed on Windows 10 or Windows11 devices, and when the user tried to authenticate using SAML authentication, the app did not display the Term of Use pop-up on the Welcome page properly.

Fixed an issue where the ADEM agent remained in the disabled state after connecting to a Prisma Access portal configured to enable ADEM on the GlobalProtect endpoints after switching from an on-premises portal that had ADEM disabled in the app configuration that was pushed to the endpoint.

Fixed an issue where GlobalProtect HIP check did not detect the new version of Trellix Drive Encryption correctly which caused the device to fail the HIP check.

Fixed an issue where the GlobalProtect app was installed on the Chromebook, the app got disconnected when the ChromeOS detected policy changes related to location information.

Fixed an issue where, when the GlobalProtect app was installed on Windows 10 devices and the language was set to Japanese, IpConfig.txt and Systeminfo.txt in the GlobalProtectLogs.zip did not work properly.

Fixed an issue where the GlobalProtect app got disconnected due to a HIP reporting error that prevented the app from sending HIP reports to the gateway.

Fixed an issue where the user interface of the GlobalProtect app was going over-sized when the system woke up from the sleep mode.

Fixed an issue where the GlobalProtect app did not display LDAP password expiration notification on consecutive connection attempts when the user tried to authenticate using the LDAP authentication method.

Fixed an issue where, when the GlobalProtect app was installed on devices running macOS, the app did not try to auto-connect to the gateway after exceeding the Disable Timeout value.

Fixed an issue where the tunnel was still up and connected even when the user disconnected the GlobalProtect app.

Fixed an issue where GlobalProtect failed to decrypt HipPolicy.dat on endpoints, which caused the device to fail the HIP check for anti-malware.

Fixed an issue where, when user clicked the Network sign-in icon on the Windows login page, an icon with the name image was displayed instead of the portal IP address/ URL.

Fixed an issue where the Client Certificate had a blank Subject with SAN as the critical extension, which caused the endpoints to fail the HIP check.

Fixed an issue where devices with Driver Verified enabled and configured to monitor the PAN virtual adapter driver (pangpd.sys) displayed the DRIVER_VERIFIER_DETECTED_VIOLATION Blue Screen error

Fixed an issue where, when the GlobalProtect app was installed on Windows 10 devices and the language was set to Japanese, IpConfig.txt in the GlobalProtectLogs.zip did not work properly.

Fixed an issue where the GlobalProtect app tried to send HIP reports even when the device was on Modern Standby mode.

Fixed an issue where the GlobalProtect app would get stuck at Connecting state when user tried to authenticate with SAML authentication method using the embedded browser and user clicked Cancel on the certificate prompts.

Fixed an issue where the GlobalProtect app took a long time to establish a connection due to an erroneous packet capture process.

Fixed an issue where the Endpoint Traffic Policy Enforcement feature was causing the GlobalProtect app to drop Slack WebSocket outbound traffic on macOS endpoints.

Fixed an issue where when the GlobalProtect app was installed on devices running macOS, HIP check did not detect the Tanium Client correctly which caused the device to fail the HIP check.

Fixed an issue where the GlobalProtect app did not honor the Disable Timeout value and would automatically reconnect after the user restarted two times due to an issue with the new splash screen.

Fixed an issue where the GlobalProtect app couldn't display the Verify text box when using the full 255 characters for Radius DUO Authentication on Windows devices.

Fixed an issue where GlobalProtect logs forwarded from CDL to syslog-ng and Splunk were arriving in multiline and single line mode randomly.

Fixed an issue where the GlobalProtect HIP check incorrectly detected the Anti-Malware information for the McAfee Total Protection Antivirus software application, which caused the device to fail the HIP check.

Fixed an issue that the correct status is not displayed GlobalProtect status in the Windows lock screen when the gateway is connected.

Fixed an issue where GlobalProtect users were intermittently unable to log in to the gateway when using the user logon connect method because Enforce GlobalProtect Connection for Network Accesswas enabled immediately after portal login, blocking access to the gateway login URL.

Fixed an issue where the GlobalProtect HIP check took longer than expected to collect the HIP information causing the device to fail the HIP check.

Fixed an issue where the GlobalProtect app connection failed when the user enabled both Globalprotect Enforcer and Endpoint Traffic Policy Enforcement.

Fixed an issue where the GlobalProtect app was installed on devices running macOS, a blank GlobalProtect app user interface was displayed instead of the correct page.

Fixed an issue where users were unable to see the available list of eligible gateways to select the gateway manually when the best available gateway failed.

Fixed an issue where the portal status did not show as Connected even when the portal was accessible after a reboot and the portal status was Using cached portal config, which did not trigger the transparent upgrade.

Fixed an issue where the GlobalProtect app did not display the certificate name in the Client Certificate selection field properly.

Fixed an issue where, when the GlobalProtect app was installed on devices running macOS, the app was not connected when the proxy was configured for Safari or Chrome.

Fixed an issue where the GlobalProtect HIP check detected the device as Windows firewall enabled even though the firewall was disabled on the device.

Fixed an issue where the GlobalProtect app was stuck in Connecting state when users failed to authenticate with SAML and using an embedded browser. Users were unable to disconnect the app and had to reboot the device.

Fixed an issue where, when the GlobalProtect app was installed on Android devices and connected with Always-On(User logon) option, the app displayed the following notification twice.

Fixed an issue where the app would get stuck at Connecting'state while trying to connect to a gateway.

Fixed an issue where, when the GlobalProtect app was installed on Android devices and connected with Always-On option, the app displayed the following notification twice and the users were unable to clear the notifications.

Fixed an issue where, when the GlobalProtect app was installed on devices running macOS, the screen reader repeatedly announced tabs, Add button and portals table on the user interface. The screen reader should announce the user interface elements only once.

Fixed an issue where the split tunnel was configured based on the destination domain, split tunneling did not work as expected when IPv6 traffic exclusion was configured.

Fixed an issue where, when the GlobalProtect app was installed on macOS devices and No direct access to local network option was enabled with access routes excluded from the GlobalProtect VPN tunnel, the excluded traffic was not sent through the physical adapter on the endpoint. Following this, the users were unable to access the local physical network devices such as printers.

Fixed an issue where, when the GlobalProtect app was installed on Windows devices, the device displayed a blue screen when users tried to download files larger than 5GB.

Fixed an issue where the GlobalProtect app (PANGP Virtual Ethernet Adapter) was intermittently disconnected after a system reboot though the gateway status displayed it as Connected.

Fixed an issue where, when the GlobalProtect app was installed on devices running macOS, the app did not try to auto-connect to the gateway after exceeding the Disable Timeout value.

Fixed an issue where, when configured with the pre-logon connect method, the GlobalProtect app indicated that it was connected, but the tunnel was not established and users were unable to access resources.

Fixed an issue where, when the GlobalProtect app was installed on devices running macOS and the user restarted the device, the app displayed the following error message even though the app got connected after a few seconds.

Could not connect to the GlobalProtect service. Make sure the GlobalProtect service is running. If the issue persists, contact your administrator.

Fixed an issue where, when the GlobalProtect app was installed on endpoints running macOS and when connected to an internal gateway the endpoint did not send a HIP report or receive HIP notifications, and the HIP reports were not available on the Host Information Profile tab in the app.

Fixed an issue where, when the GlobalProtect app was installed on the Windows 10 UWP platform, the app got disconnected when the users tried to connect.

Fixed an issue where, when the GlobalProtect app was installed on iOS devices, users were unable to log in to the app using biometrics, such as Face ID.

Fixed an issue where, when the GlobalProtect app was installed on devices running on Chrome OS, the app could not connect to the gateway after successful SAML authentication. The app stayed in Connecting state and the users had to go back to the Portal Authentication Complete page and click on click here to launch GlobalProtect to connect to the gateway.

Fixed an issue where, when the GlobalProtect app was installed on Linux devices, the app failed to connect when McAfee Threat Prevention was installed on the device.

Fixed an issue where, when the GlobalProtect app was installed on Android devices, the app got disconnected after an upgrade following which the GlobalProtect log displayed the status as FATAL EXCEPTION: main.

Fixed an issue where, when the GlobalProtect app was installed on devices running macOS, the users were unable to connect to the GlobalProtect app after an upgrade. The app displayed the following error message when the users tried to connect to the app:

Fixed an issue where, when the GlobalProtect app was installed on iOS devices, the GlobalProtect credentials that were saved earlier were lost when users faced network connectivity issues. Users had to re-enter their credentials due to this issue.

Fixed an issue where, when split tunnel (optimized split tunneling) was configured on GlobalProtect to exclude any application traffic that relied on the loopback connection source IP address to be 127.0.0.1, the excluded application did not work as expected.

Fixed an issue where, when split tunnel was configured on the GlobalProtect app to exclude destination domain traffic that included a slash character (/) for sub-page domain names, the slash character (/) was not displayed in the sub-page domain names in the exception list.

Fixed an issue where, when the GlobalProtect app was installed on Linux devices with Use Default Browser for SAML Authentication app option set to Yes, the device used embedded browser instead of default system browser.

Fixed an issue where, when the GlobalProtect app was installed on Android devices, the GlobalProtect notification displayed on the screen was unresponsive.

However, the notification continues to stay on the screen due to Android OS limitation. This issue is listed under the Known Issues section.

Fixed an issue where, when the GlobalProtect app was installed on Windows devices, the SAML login page to authenticate Network Discovery was not properly displayed.

Fixed an issue where, when the GlobalProtect app was installed on devices running on Chrome OS, the app could not connect to the gateway after successful SAML authentication. The app stayed in Connecting state and the users had to go back to the Portal Authentication Complete page and click on click here to launch GlobalProtect to connect to the gateway.

Fixed an issue where, during a transparent upgrade of the GlobalProtect app, the system rebooted or woke up from hibernation, which caused the upgrade to fail due to competing resources between the system reboot and transparent upgrade. The previous version of the GlobalProtect app was completely uninstalled.

Fixed an issue where, on Android devices with the GlobalProtect app installed, when the client certificate alias setting was set to pre-select in the managed configuration, the GlobalProtect Choose certificate pop-up failed to appear and the user was redirected to the captive portal (SAML) login page.