Fixed an issue where the ADEM portal did not display user information such as User-ID when the ADEM portal was changed from on-premises to Prisma Access.

Fixed an issue where, when the GlobalProtect app was installed on devices running macOS and the user upgraded the GlobalProtect version from 6.0.5 to 6.2.1, the app got disconnected after 10 minutes.

Fixed an issue where the GlobalProtect app changed the connection status to

Not Connected

even though the app was connected to the internal gateway.

Fixed an issue where the GlobalProtect app on macOS endpoints did not query the secondary DNS (when primary DNS is not responding) when the domain was part of the exclude domain list (both network and DNS).

Fixed an issue where, when the GlobalProtect app was installed on Windows devices and the device was reset using the Microsoft Recovery tool, the GlobalProtect app was not properly displayed.

Fixed an issue where the GlobalProtect HIP check did not detect McAfee Total Protection as an anti-malware application, which caused the device to fail the HIP check.

Fixed an issue where the hyperlinks with the URLs containing the

=

character in the HIP notification message did not work as expected and the page did not open when the user clicked the URL.

Fixed an issue where the

I Agree

option on the GlobalProtect app Welcome page did not work as expected when the user selected the option using a keyboard.

Fixed an issue where the GlobalProtect app became unresponsive when the user clicked the

ESC

button during authentication using a hard token.

Fixed an issue where Linux endpoints could not resolve FQDNs when the GlobalProtect tunnel was connected because the host stopped listening to UDP/53 on the loopback IP address.

Fixed an issue where the GlobalProtect SSO tile was selected instead of the Windows Password tile in the Windows Login screen even though the registry key

MakeGPCPDefault

was set to

No

.

Fixed an issue where the GlobalProtect app was unable to send HIP reports when the app was connected using IPv6 address.

Fixed an issue where the GlobalProtect app incorrectly displayed the gateway as internal when it was connected to an external gateway.

Fixed an issue where the GlobalProtect HIP check incorrectly detected the version for KES 12 (Kaspersky Endpoint Security), which caused the device to fail the HIP check.

Fixed an issue where, when the GlobalProtect app was installed on Linux devices running Ubuntu 22.04 or REHL 9.1, the app got disconnected periodically.

Fixed an issue where, when multiple

wa_3rd_party_host_64.exe

processes persisted even after the HIP check was performed, the GlobalProtect app stopped working.

Fixed an issue where, when the GlobalProtect app was configured with the '

Disable GlobalProtect

option set to

Allow With Ticket

, the app did not display the correct Disable Duration time.

Fixed an issue where the GlobalProtect app failed to connect on Windows 11 endpoints with error

Could not connect to the GlobalProtect service

.

Fixed an issue where, when the IP address type was set to IPv4 and IPv6, the GlobalProtect app could connect only to the manual gateway instead of connecting to the best available gateway.

Fixed an issue where, when pre-logon was configured for the GlobalProtect app, the GlobalProtect portal displayed the FQDN or IP address of the gateway and not the gateway name. With this fix, the portal displays the gateway name instead of FQDN or IP address.

Fixed an issue where, when the GlobalProtect app got automatically connected after a system reboot even though the connection method configured was On-Demand.

Fixed an issue where, when the GlobalProtect app was connected to the internal gateway, the app displayed the message :

Connected - Inter....

instead of

Connected

.

Fixed an issue where the GlobalProtect HIP check did not detect McAfee LiveSafe as an anti-malware application, which caused the device to fail the HIP check.

Fixed an issue where, when the user entered credentials during SAML authentication after the set internal login timer, the app displayed an authentication failed message without providing the reason. The

Retry

button on the app web interface did not work properly when using an embedded browser for authentication. The

Retry

button was not fully visible on the embedded browser.

Fixed an issue where GlobalProtect experienced a prolonged connection time when IPv6 was disabled on Windows devices.

Fixed an issue where the GlobalProtect HIP check did not detect McAfee LiveSafe as an antivirus application, which caused the device to fail the HIP check.

Fixed an issue where the vertical scroll bar on the GlobalProtect app web interface did not work properly when users tried to select the certificate from the drop-down.

Fixed an issue where users were unable to select the external gateway manually when connected to the internal network. The GlobalProtect stayed in

Connecting

state and users had to manually disconnect the connection and connect to the internal network to exit the

Connecting

state.

Fixed an issue where the GlobalProtect app displayed the Prisma Access gateways that were not set for manual selection.

Fixed an issue where the GlobalProtect app displayed the Credential Provider language in English when the system language was German.

Fixed an issue where, when the GlobalProtect app was installed on Linux devices, the app displayed the text in an incorrect format and the users were unable to read the information displayed on the app.

Fixed an issue where, when the GlobalProtect app was installed on Windows devices, the GlobalProtect HIP check did not detect the correct details for Cortex XDR, which caused the device to fail the HIP check.

Fixed an issue where, when the GlobalProtect app was installed on devices running macOS, the GlobalProtect HIP check detected the WithSecure antivirus software as XProtect, which caused the device to fail the HIP check.

Fixed an issue where the GlobalProtect HIP check did not detect McAfee LiveSafe – Internet Security, which caused the device to fail the HIP check.

Fixed an issue where GlobalProtect connected to an internal gateway got automatically disconnected after a certain period of time.

Fixed an issue where the GlobalProtect HIP check did not detect McAfee Total Protection, which caused the device to fail the HIP check.

Fixed an issue where the GlobalProtect HIP check did not detect the Definition Date correctly for the CrowdStrike application, which caused the device to fail the HIP check.

Fixed an issue where, when the GlobalProtect app was installed on macOS endpoints and split tunnel was configured based on the application, the Zoom app got disconnected intermittently.

Fixed an issue where users were unable to connect to GlobalProtect gateway when only one external gateway was added due to the following error:

Cannot Verify Server Certificate of Gateway

.

Fixed an issue where, when the upgrade script

update_tmp.bat

was used, the error message did not display the correct exit timeout for the PanGPS uninstall process.

Fixed an issue where the GlobalProtect app displayed the status as

Connected-Internal

even when the app was not connected.

Fixed an issue where, when the traffic enforcer setting was applied for pre-logon and the GlobalProtect app was disconnected, the new user setting did not get updated and the pre-logon setting was still applicable.

Fixed an issue where, when the GlobalProtect app was installed on devices running macOS, the certificate information was not accessible even though the GlobalProtect app had full access to the certificate store.

Fixed an issue where, when the GlobalProtect app was installed on devices running macOS, the GlobalProtect app failed to reconnect and continued to stay in the

Connecting

state after the device woke up from

Modern Standby

mode.

Fixed an issue where, when the GlobalProtect app was installed on devices running on macOS, the app did not display the

Connect

button and

Refresh Connection

button properly.

Fixed an issue where, when the GlobalProtect app was installed on Windows devices and the screen displayed GlobalProtect app connection status incorrectly when the device was locked.

Fixed an issue where the GlobalProtect app stopped working when the app was upgraded from version 5.2.8 to 6.0.3.

Fixed an issue where the GlobalProtect app connection failed when both GlobalProtect Enforcer and Endpoint Traffic Policy Enforcement were enabled.

Fixed an issue where the GlobalProtect app was installed on devices running macOS, a blank GlobalProtect app user interface was displayed instead of the correct page.

Fixed an issue where, when the GlobalProtect app was installed on devices running macOS, users were able to select All Gateways heading on the page which was not an option for the users to select. This issue happened on the app interface with a non-English language.

Fixed an issue where GlobalProtect 6.1.0 on iOS 17 cannot connect gateways successfully.

Fixed an issue where, when the customer upgraded from 5.2.12-26 to 6.1.1-6 on several devices, several devices received blue screen error messages. To fix the problem, the customer completely uninstalled the 5.x version of GlobalProtect before upgrading to 6.1.1.

Fixed an issue where, when the GlobalProtect app was installed on Android devices and the block list was configured through mobile device management (MDM), the block list did not work as expected and the traffic was not blocked as per the configuration.

Fixed an issue where,when the GlobalProtect app was installed on iOS devices, the app got stuck in the

Connecting

state and users had to restart the device to connect to the app.

Fixed an issue where, when the GlobalProtect app was installed on iOS devices, users were unable to send logs (

Help > Send Logs

) through apps other than iOS Mail Client. Users can now share the logs using any file sharing app (e.g. Gmail) so that administrators can analyze the logs.

Fixed an issue where, when the GlobalProtect app was installed on iOS devices and configured with On-Demand mode, the app displayed the following erroneous pop-up message:

Fixed an issue where, when the GlobalProtect app was installed on iOS devices, users could not connect the iOS device to a manual gateway even though the GlobalProtect portal was configured with two external manual gateways.

Fixed an issue where, when the GlobalProtect app was installed on Android devices, the users could not connect to the app due to the following error:

Fixed an issue where devices displayed the

DRIVER_VERIFIER_DETECTED_VIOLATION

Blue Screen error when the GlobalProtect app was upgraded from version 5.2.10 to 6.1.1.

Fixed an issue where Trend Micro XDR detected packet capture processes randomly via GlobalProtect (PanGPS.exe service).

Fixed an issue where the GlobalProtect app selected an unexpected gateway due to a latency discrepancy seen between PanGPS and packet capture.

Fixed an issue where, when the language was set to Japanese, the time to connect was not displayed properly when a

Disconnect Timeout

was configured for the app.

Fixed an issue where users were unable to connect to GlobalProtect gateway when only one external gateway was added due to the following error:

Cannot Verify Server Certificate of Gateway

.

Fixed an issue where the GlobalProtect app reported the computer name differently from the computer name displayed in Autonomous DEM causing a data discrepancy.

Fixed an issue where the GlobalProtect app stopped working abruptly.

Fixed an issue where, when the GlobalProtect app was installed on devices running macOS and GlobalProtect enforcer was configured with allowed FQDNs, users were still able to access the internet and other public domains.

Fixed an issue where when the GlobalProtect app

Allow User to Disable GlobalProtect App

setting was set to

Allow with Comment

, the option did not work as expected.

Fixed an issue where the GlobalProtect app did not detect Smart Card removal every time the user removed the card and due to which the app was not getting disconnected in On-Demand tunnel mode.

Fixed an issue where, when the GlobalProtect app was connected through the Prisma Access gateway, the upload speed of the internet was reduced to 2 Mbps.

Fixed an issue where users were unable to connect to the GlobalProtect gateway when only one external gateway was added due to the following error:

Cannot Verify Server Certificate of Gateway

.

Fixed an issue where the GlobalProtect app incorrectly detected the firewall status as disabled while the GlobalProtect HIP check detected the device as Windows firewall enabled.

Fixed an issue where the GlobalProtect app would get stuck in the

Connecting

state when the user tried to close the browser window for SAML authentication after configuring On-Demand mode for the app.

Fixed an issue on the GlobalProtect app for Linux where, when the GlobalProtect app was connected and the tunnel was up, the DNS requests were sent to the public DNS servers assigned to the physical interface.

Fixed an issue where the device displayed a Blue Screen error when users upgraded the GlobalProtect version to 6.1.1-5

Fixed an issue where, when the GlobalProtect app was installed on Linux devices, the file size of the log file (PanGPUI.log.old) increased without getting log rotated.

Fixed an issue where the GlobalProtect portal and gateway selection list were displayed in the table format and not as menu items.

Fixed an issue where, when the GlobalProtect app was installed on Windows 10 or 11 devices, and when the user tried to authenticate using SAML authentication, the app did not display the Terms of Use pop-up on the Welcome page properly.

Fixed an issue where, when the GlobalProtect app was installed on devices running macOS, the upload speed of the internet was reduced after a version upgrade.

Fixed an issue where the GlobalProtect system tray icon continued to stay in Connecting state even when the app was connected and had access to internal resources.

Fixed an issue where GlobalProtect HIP check did not detect the new version of Trellix Drive Encryption correctly, which caused the device to fail the HIP check.

Fixed an issue where, when the GlobalProtect app was installed on Windows devices and the app was upgraded from version 5.2.12 to 6.0.5, the device displayed the

DRIVER_VERIFIER_DETECTED_VIOLATION

Blue Screen error.

Fixed an issue where the

Settings

Connection

tab in the GlobalProtect add did not display the

Assigned IP Address(es)

and

Gateway IP Address

properly.

Fixed an issue where, when the GlobalProtect app was installed on Windows 10 devices and the language was set to Japanese,

IpConfig.txt

and

Systeminfo.txt

in the

GlobalProtectLogs.zip

did not work properly.

Fixed an issue where the GlobalProtect app disconnected due to a HIP reporting error that prevented the app from sending HIP reports to the gateway.

Fixed an issue where the device could not reconnect to the internet when endpoint traffic policy enforcement was enabled and when the user switched networks. Users had to reboot the system to connect to the internet.

Fixed an issue where the user interface of the GlobalProtect app was going oversized when the system woke up from the sleep mode.

Fixed an issue where the GlobalProtect app did not display LDAP password expiration notification on consecutive connection attempts when the user tried to authenticate using the LDAP authentication method.

Fixed an issue where the tunnel was still up and connected even when the user disconnected the GlobalProtect app.

Fixed an issue where GlobalProtect failed to decrypt HipPolicy.dat on endpoints, which caused the device to fail the HIP check for anti-malware.

Fixed an issue where, when the user clicked the Network sign-in icon on the Windows login page, an icon with the name ‘image’ was displayed instead of the portal IP address/ URL.

Fixed an issue where devices with Driver Verified enabled and configured to monitor the PAN virtual adapter driver (pangpd.sys) displayed the

DRIVER_VERIFIER_DETECTED_VIOLATION

Blue Screen error.

Fixed an issue where the GlobalProtect app tried to send HIP reports even when the device was on Modern Standby mode.

Fixed an issue where the GlobalProtect app got stuck in the

Connecting

state when the user tried to authenticate with SAML authentication using the embedded browser and clicked Cancel on the certificate prompts.

Fixed an issue where the GlobalProtect app took a long time to establish a connection due to an erroneous packet capture process.

Fixed an issue where the Endpoint Traffic Policy Enforcement feature was causing the GlobalProtect app to drop Slack WebSocket outbound traffic on macOS endpoints.

Fixed an issue where, when the GlobalProtect app was installed on devices running macOS, the app did not try to auto-connect to the gateway after exceeding the

Disable Timeout

value.

Fixed an issue where the GlobalProtect app (PANGP Virtual Ethernet Adapter) was intermittently disconnected after a system reboot though the gateway status displayed it as Connected.

Fixed an issue where the GlobalProtect app sent the Intermediate Certificate instead of the Server Certificate for OCSP check while performing Certificate authentication on GlobalProtect.

Fixed an issue where, when configured with the pre-logon connect method, the GlobalProtect app indicated that it was connected, but the tunnel was not established and users were unable to access resources.

Fixed an issue where the GlobalProtect app couldn't display the Verify text box when using the full 255 characters for Radius DUO Authentication on Windows devices.

Fixed an issue where GlobalProtect logs forwarded from CDL to syslog-ng and Splunk were arriving in multiline and single line mode randomly.

Fixed an issue where GlobalProtect users were intermittently unable to log in to the gateway when using the user logon connect method because Enforce GlobalProtect Connection for Network Access was enabled immediately after portal login, blocking access to the gateway login URL.

Fixed an issue where, when the GlobalProtect app was installed on the Windows devices, the GlobalProtect app failed to send the Diagnostic report when the end user used the option to

Report an Issue

.

Fixed an issue where the GlobalProtect HIP check did not detect the Chinese anti-malware applications, which caused the device to fail the HIP check.

Fixed an issue where, when the GlobalProtect app was installed on Windows devices, the GlobalProtect HIP check took longer than expected to collect the HIP information and also displayed HIP pop-up error messages for antivirus software, which caused the device to fail the HIP check.

Fixed an issue where the portal status did not show as

Connected

even when the portal was accessible after a reboot and the portal status was

Using cached portal config

, which did not trigger the transparent upgrade.

Fixed an issue where GlobalProtect notifications were displayed in HTML code instead of formatted text.

Fixed an issue where the GlobalProtect app connection failed when Windows 10 21H2 users tried to switch to another Windows user account on the device

Fixed an issue where, when the GlobalProtect app was installed on devices running macOS with SAML authentication, users were unable to connect to the app after the system woke up from sleep mode. The app stayed in

Connecting

state for a long time and users had to refresh the connection.

Fixed an issue where GlobalProtect HIP check did not detect the name of the Trellix Agent correctly, which caused the device to fail the HIP check.

Fixed an issue where the GlobalProtect HIP check detected the device as Windows firewall enabled even though the firewall was disabled on the device.

Fixed an issue where, when the GlobalProtect app was installed on Windows devices, the device displayed a Blue Screen error due to a faulty GlobalProtect app driver.

Fixed an issue where the GlobalProtect app was stuck in the Connecting state when users failed to authenticate with SAML and using an embedded browser. Users were unable to disconnect the app and had to reboot the device.

Fixed an issue where, when Connect Before Logon using Security Assertion Markup Language (SAML) authentication was used to log in to the endpoint, the Use Default Browser for SAML Authentication did not work as expected with the configured Connect Before Logon option.

Fixed an issue where the GlobalProtect HIP check did not detect the Real-Time Protection status for the FireEye Endpoint Agent, which caused the device to fail the HIP check.

Fixed an issue where single sign-on (SSO) for Smart Card were used for authentication, users were prompted to enter PIN instead of password on the Windows login screen.

Fixed an issue where the app would get stuck at the Connecting state while trying to connect to a gateway.

Fixed an issue where, when the GlobalProtect app was installed on devices running macOS, the screen reader repeatedly announced tabs,

Add

button, and portals table on the user interface. The screen reader must announce the user interface elements only once.

Fixed an issue where, when the GlobalProtect app was installed on devices running macOS, the app Home page displayed text in an incorrect color contrast ratio causing readability issues for users.

Fixed an issue where the split tunnel was configured based on the destination domain, split tunneling did not work as expected when IPv6 traffic exclusion was configured.

Fixed an issue where the GlobalProtect HIP check did not detect the Real-Time Protection status correctly for the CrowdStrike Falcon application, which caused the device to fail the HIP check.

Fixed an issue where the GlobalProtect app installer was displaying the wrong Palo Alto Networks logo.

Fixed an issue where when the GlobalProtect app was installed on devices running macOS, the GlobalProtect enforcer continued to block network access even after connecting to the internal gateway.