GlobalProtect
GlobalProtect App 6.2.3 Windows and macOS Addressed Issues
Table of Contents
Expand All
|
Collapse All
GlobalProtect Docs
-
10.1 & Later
- 10.1 & Later
- 9.1 (EoL)
-
- How Does the App Know Which Certificate to Supply?
- Set Up Cloud Identity Engine Authentication
- Configure GlobalProtect to Facilitate Multi-Factor Authentication Notifications
- Enable Delivery of VSAs to a RADIUS Server
- Enable Group Mapping
-
-
- GlobalProtect App Minimum Hardware Requirements
- Download the GlobalProtect App Software Package for Hosting on the Portal
- Host App Updates on the Portal
- Host App Updates on a Web Server
- Test the App Installation
- Download and Install the GlobalProtect Mobile App
- View and Collect GlobalProtect App Logs
-
-
- Deploy App Settings in the Windows Registry
- Deploy App Settings from Msiexec
- Deploy Scripts Using the Windows Registry
- Deploy Scripts Using Msiexec
- Deploy Connect Before Logon Settings in the Windows Registry
- Deploy GlobalProtect Credential Provider Settings in the Windows Registry
- SSO Wrapping for Third-Party Credential Providers on Windows Endpoints
- Enable SSO Wrapping for Third-Party Credentials with the Windows Registry
- Enable SSO Wrapping for Third-Party Credentials with the Windows Installer
- Deploy App Settings to Linux Endpoints
- GlobalProtect Processes to be Whitelisted on EDR Deployments
-
-
- Mobile Device Management Overview
- Set Up the MDM Integration With GlobalProtect
- Qualified MDM Vendors
-
-
- Set Up the Microsoft Intune Environment for Android Endpoints
- Deploy the GlobalProtect App on Android Endpoints Using Microsoft Intune
- Create an App Configuration on Android Endpoints Using Microsoft Intune
- Configure Lockdown Mode for Always On Connect Method on Android Endpoints Using Microsoft Intune
-
- Deploy the GlobalProtect Mobile App Using Microsoft Intune
- Configure an Always On VPN Configuration for iOS Endpoints Using Microsoft Intune
- Configure a User-Initiated Remote Access VPN Configuration for iOS Endpoints Using Microsoft Intune
- Configure a Per-App VPN Configuration for iOS Endpoints Using Microsoft Intune
-
-
-
- Create a Smart Computer Group for GlobalProtect App Deployment
- Create a Single Configuration Profile for the GlobalProtect App for macOS
- Deploy the GlobalProtect Mobile App for macOS Using Jamf Pro
-
- Enable GlobalProtect System Extensions on macOS Endpoints Using Jamf Pro
- Enable GlobalProtect Network Extensions on macOS Big Sur Endpoints Using Jamf Pro
- Add a Configuration Profile for the GlobalProtect Enforcer by Using Jamf Pro 10.26.0
- Verify Configuration Profiles Deployed by Jamf Pro
- Remove System Extensions on macOS Monterey Endpoints Using Jamf Pro
- Non-Removable System Extensions on macOS Sequoia Endpoints Using Jamf Pro
- Uninstall the GlobalProtect Mobile App Using Jamf Pro
-
- Configure HIP-Based Policy Enforcement
- Configure HIP Exceptions for Patch Management
- Collect Application and Process Data From Endpoints
- Redistribute HIP Reports
-
- Identification and Quarantine of Compromised Devices Overview and License Requirements
- View Quarantined Device Information
- Manually Add and Delete Devices From the Quarantine List
- Automatically Quarantine a Device
- Use GlobalProtect and Security Policies to Block Access to Quarantined Devices
- Redistribute Device Quarantine Information from Panorama
- Troubleshoot HIP Issues
-
-
- Enable and Verify FIPS-CC Mode on Windows Endpoints
- Enable and Verify FIPS-CC Mode on macOS Endpoints
- Enable and Verify FIPS-CC Mode Using Workspace ONE on iOS Endpoints
- Enable FIPS Mode on Linux EndPoints with Ubuntu or RHEL
- Enable and Verify FIPS-CC Mode Using Microsoft Intune on Android Endpoints
- FIPS-CC Security Functions
- Resolve FIPS-CC Mode Issues
-
-
- Remote Access VPN (Authentication Profile)
- Remote Access VPN (Certificate Profile)
- Remote Access VPN with Two-Factor Authentication
- GlobalProtect Always On VPN Configuration
- Remote Access VPN with Pre-Logon
- User-Initiated Pre-Logon Connection
- GlobalProtect Multiple Gateway Configuration
- GlobalProtect for Internal HIP Checking and User-Based Access
- Mixed Internal and External Gateway Configuration
- Captive Portal and Enforce GlobalProtect for Network Access
- GlobalProtect on Windows 365 Cloud PC
-
- About GlobalProtect Cipher Selection
- Cipher Exchange Between the GlobalProtect App and Gateway
-
- Reference: GlobalProtect App Cryptographic Functions
-
- Reference: TLS Ciphers Supported by GlobalProtect Apps on macOS Endpoints
- Reference: TLS Ciphers Supported by GlobalProtect Apps on Windows Endpoints
- Reference: TLS Ciphers Supported by GlobalProtect Apps on Android 6.0.1 Endpoints
- Reference: TLS Ciphers Supported by GlobalProtect Apps on iOS 10.2.1 Endpoints
- Reference: TLS Ciphers Supported by GlobalProtect Apps on Chromebooks
- Ciphers Used to Set Up IPsec Tunnels
- SSL APIs
-
- View a Graphical Display of GlobalProtect User Activity in PAN-OS
- View All GlobalProtect Logs on a Dedicated Page in PAN-OS
- Event Descriptions for the GlobalProtect Logs in PAN-OS
- Filter GlobalProtect Logs for Gateway Latency in PAN-OS
- Restrict Access to GlobalProtect Logs in PAN-OS
- Forward GlobalProtect Logs to an External Service in PAN-OS
- Configure Custom Reports for GlobalProtect in PAN-OS
-
6.3
- 6.3
- 6.2
- 6.1
- 6.0
- 5.1
-
- Download and Install the GlobalProtect App for Windows
- Use Connect Before Logon
- Use Single Sign-On for Smart Card Authentication
- Use the GlobalProtect App for Windows
- Report an Issue From the GlobalProtect App for Windows
- Disconnect the GlobalProtect App for Windows
- Uninstall the GlobalProtect App for Windows
- Fix a Microsoft Installer Conflict
-
- Download and Install the GlobalProtect App for macOS
- Use the GlobalProtect App for macOS
- Report an Issue From the GlobalProtect App for macOS
- Disconnect the GlobalProtect App for macOS
- Uninstall the GlobalProtect App for macOS
- Remove the GlobalProtect Enforcer Kernel Extension
- Enable the GlobalProtect App for macOS to Use Client Certificates for Authentication
-
6.1
- 6.1
- 6.0
- 5.1
-
6.2
- 6.3
- 6.2
- 6.1
- 6.0
- 5.1
- Features Introduced
- Changes to Default Behavior
- Associated Software and Content Versions
-
- GlobalProtect App 6.2.8 Windows and macOS Known Issues
- GlobalProtect App 6.2.7 Windows and macOS Known Issues
- GlobalProtect App 6.2.6-c857 Windows and macOS Known Issues
- GlobalProtect App 6.2.1-c31 Linux Known Issues
- GlobalProtect App 6.2.6 Windows and macOS Known Issues
- GlobalProtect App 6.2.5 Windows and macOS Known Issues
- GlobalProtect App 6.2.4 Windows and macOS Known Issues
- GlobalProtect App 6.2.3-c287 Windows and macOS Known Issues
- GlobalProtect App 6.2.3 Windows and macOS Known Issues
- GlobalProtect App 6.2.2 Windows and macOS Known Issues
- GlobalProtect App 6.2.1 Linux Known Issues
- GlobalProtect App 6.2.1 Windows and macOS Known Issues
- GlobalProtect App 6.2.0 Linux Known Issues
-
- GlobalProtect App 6.2.8 Windows and macOS Addressed Issues
- GlobalProtect App 6.2.7 Addressed Issues
- GlobalProtect App 6.2.6-c857 Windows and macOS Addressed Issues
- GlobalProtect App 6.2.1-c31 Linux Addressed Issues
- GlobalProtect App 6.2.6 Windows and macOS Addressed Issues
- GlobalProtect App 6.2.5 Windows and macOS Addressed Issues
- GlobalProtect App 6.2.4 Windows and macOS Addressed Issues
- GlobalProtect App 6.2.3-c287 Addressed Issues
- GlobalProtect App 6.2.3 Windows and macOS Addressed Issues
- GlobalProtect App 6.2.2 Windows and macOS Addressed Issues
- GlobalProtect App 6.2.1 Linux Addressed Issues
- GlobalProtect App 6.2.1 Windows and macOS Addressed Issues
- GlobalProtect App 6.2.0 Linux Addressed Issues
GlobalProtect App 6.2.3 Windows and macOS Addressed Issues
GlobalProtect App 6.2.3 Windows and macOS Addressed Issues
The following table lists the issues that are addressed in GlobalProtect app 6.2.3
Windows and macOS.
| Issue ID | Description |
|---|---|
| GPC-19968 | Fixed an issue where the GlobalProtect agent failed to detect Bitdefender Antivirus Plus on the Windows ARM64 platform during the HIP check. |
| GPC-19924 | Resolved intermittent connection issues for users accessing GlobalProtect via an embedded browser. |
| GPC-19901 | Fixed an issue where the GlobalProtect client for Mac users was intermittently disconnecting and reconnecting. |
| GPC-19840 | Fixed an issue where Mac computers did not display all gateways in the Search Gateway tab. |
| GPC-19818 | Fixed an issue where when the Enforcer was enabled, Jamf connect was not working after the MacBook was rebooted. Users had to log in manually. |
| GPC-19784 | Fixed an issue where the HIP check did not detect McAfee Premium individual. |
| GPC-19753 | Fixed an issue where the GlobalProtect icon could not be selected using the keyboard. |
| GPC-19712 | Fixed an issue where PanGPS crashed on 6.0.4 caused by invalid memory reference. GlobalProtect did not run correctly after the system was rebooted. |
| GPC-19686 | Fixed an issue where translation errors were observed in the GlobalProtect app for French localization. |
| GPC-19664 | Fixed an issue where users were able to deploy GlobalProtect from JAMF on Mac Sonoma, but the connection to the portal was stuck. |
| GPC-19659 | Fixed an issue where macOS users were connected to the GlobalProtect app before they agreed to their company’s terms of service. |
| GPC-19656 | Resolved an issue where connecting to a GlobalProtect gateway with IPv6 from macOS resulted in the tunnel connection dropping every 45 seconds when Endpoint Traffic Policy Enforcement was set to All Traffic. |
| GPC-19630 | Fixed an issue where the prelogon connect method failed on the gateway prelogin stage. |
| GPC-19587 | Fixed an issue where the user could not login with Okta on macOS when Endpoint Traffic Policy Enforcement was set to All traffic. |
| GPC-19581 | Fixed an issue where GlobalProtect indicated that Windows firewall was not enabled in the HIP report even though it was enabled. |
| GPC-19545 | Fixed an issue where, when the GlobalProtect app was installed on devices running macOS, users were unable to connect to the GlobalProtect app when they used T-Mobile iPhone hotspot. |
| GPC-19524 | Fixed an issue where the GlobalProtect app connection failed when the user used CAS authentication to authenticate to the app. The app displayed the error message, "Username from CAS SSO response is different from the input". |
| GPC-19513 | Fixed an issue where the GlobalProtect client was trying to use the old portal's authorization cookie to login instead of the newly migrated portal. This happened when the user changed from secondary portal to primary portal or vice versa without signing out. |
| GPC-19475 | Fixed an issue where users got connection errors in an embedded browser after the computer woke up from sleep or when the user switched gateways. |
| GPC-19449 | Fixed an issue where the GlobalProtect client was trying to use the old portal's authorization cookie to login instead of the newly migrated portal. This happened when the user changed the portal from secondary to primary or vice versa without signing out. |
| GPC-19433 | Fixed an issue where a small white blank page randomly popped up on the user's screen and the focus shifted to this blank page. This issue occurs while the computer is connected to Global Protect. |
| GPC-19431 | Fixed an issue where interactive components in the session tray on Windows did not receive keyboard focus and were not keyboard operable. |
| GPC-19418 | Fixed an issue where GlobalProtect users randomly experienced issues connecting to the gateway after their computer woke up. This occurred when Enforce GlobalProtect for Network Access was enabled and Tunnel and Proxy was set to agent mode. |
| GPC-19416 | Fixed a GlobalProtect redirection issue in embedded browser. When a user tried to connect to GlobalProtect, an error was displayed while waiting for the SAML response instead of being redirected to the embedded browser. |
| GPC-19414 | Fixed an issue where GlobalProtect Always-On connect method was not triggered after a reboot when the connect-method setting was set to on-demand in the Windows Registry. |
| GPC-19403 | Fixed an issue where OPSWAT was unable to detect Kaspersky after an upgrade from 21.3.10.391 to 21.15.8.493. |
| GPC-19400 | Fixed an issue where the GlobalProtect HIP check did not detect the Definition Date for Bitdefender Virus Scanner, which caused the device to fail the HIP check. |
| GPC-19391 | Fixed an issue where GlobalProtect stayed disconnected even after being unlocked. |
| GPC-19387 | Fixed an issue where, when the GlobalProtect app was installed on devices running macOS, the app displayed text incorrectly when the system language was German. |
| GPC-19374 | Fixed an issue where the GlobalProtect debug logs displayed information, which was not supposed to display in the logs. |
| GPC-19359 | Fixed an issue where system extensions on MacBook were not updated after the GlobalProtect client was upgraded. |
| GPC-19340 | Fixed an issue where the GlobalProtect app failed to send HIP reports hourly. |
| GPC-19337 | Fixed an issue where the Captive Portal functionality of the GlobalProtect app did not work as expected when the users used public Wi-Fi hotspots. |
| GPC-19331 | Fixed an issue where, when SAML authentication was used to authenticate to the GlobalProtect app, the app used an unknown username ‘SAMLUser’ which was not configured instead of the actual username of the user, which caused an authentication failure. |
| GPC-19314 | Fixed an issue where, when the GlobalProtect app is installed on devices running macOS, the app displayed the message, ‘Downloading in progress’ when the GlobalProtect app was upgraded to 6.0.x using the option ‘Allow Transparently.’ The app should not display the message when upgraded using the transparent method. |
| GPC-19284 | Fixed an issue where GlobalProtect was unable to extend user session. |
| GPC-19280 | Fixed an issue where, when the GlobalProtect app transitioned from pre-logon to user-logon tunnel, the app did not display the list of gateways for the users to change the gateway. The gateway list was displayed only when the app was refreshed. |
| GPC-19262 | Fixed an issue where GlobalProtect 6.2.1 tried to connect automatically after the user restarted their computer even though the connect method was set to On-Demand. |
| GPC-19193 | Fixed an issue where the GlobalProtect app was unable to fetch Windows firewall and antimalware information correctly. |
| GPC-19162 | Fixed an issue where, when the user upgraded the GlobalProtect version to 5.2.13 or later, the HIP report displayed the DLP ‘Digital Guardian Agent’ as disabled. |
| GPC-19107 | Fixed an issue where some log files were missing from the GlobalProtect bundle when downloaded from the Explore app. |
| GPC-19104 | Fixed an issue where the GlobalProtect HIP report failed to detect the Real Time Protection status for Cortex XDR, which caused the device to fail the HIP check. |
| GPC-19083 | Fixed an issue where, when the GlobalProtect app was installed on devices running macOS, the Connection tab under app Settings did not display the connection status and refresh connection did not work when the Settings window was opened. |
| GPC-19074 | Fixed an issue where Login Lifetime was incorrectly translated on the French version of the GlobalProtect 6.2.1 app. |
| GPC-19060 | Fixed an issue where the app Settings -> Connection tab did not display the connection status when the app was changed from a non-tunneled gateway to a tunneled gateway. |
| GPC-19044 | Fixed an issue where, when the GlobalProtect app was installed on Windows devices and the user changed the network from wired to wireless within the organization, the device displayed a blue screen. |
| GPC-19023 | Fixed an issue where, when the GlobalProtect app version 5.2.13 was installed on devices running macOS, the users were unable to connect to the Zoom application. |
| GPC-19009 | Fixed an issue where, when SAML authentication was used to authenticate to the GlobalProtect app and the user changed the gateway to a manual gateway, the app stayed in the ‘Connecting’ stage. |
| GPC-18992 | Fixed an issue where internet via WiFi connection was unavailable for GlobalProtect users after their computer woke up from sleep because the client WiFi adapter was unable to obtain a DHCP IP address. This issue occurred on computers where Enforce GlobalProtect for Network Access was enabled. |
| GPC-18983 | Fixed an issue where the Central Authentication Service (CAS) authentication did not work when the GlobalProtect app was connected to an internal gateway and the app repeatedly opened the SAML authentication page. |
| GPC-18913 | Fixed an issue where the GlobalProtect app displayed the connection status as ‘Not Connected’ even though the app was connected to the internal gateway. |
| GPC-18907 | Fixed an issue where the GlobalProtect app running on macOS endpoints did not query the secondary DNS (when primary DNS is not responding) when the domain was part of the exclude domain list (both network and DNS). |
| GPC-18854 | Fixed an issue where users were prompted twice to authenticate using SAML authentication when used with CAS authentication and authentication override cookie, the GlobalProtect app got stuck in the 'Connecting' stage while trying to connect. |
| GPC-18845 | Fixed an issue, where the GlobalProtect app was installed manually and the user clicked the ‘Get Started’ button, the app displayed the incorrect message, "Oops! Slow or No Network Connection" instead of the actual message "Not Connected" window where they can input their portal address. |
| GPC-18828 | Fixed an issue where split tunnel CNAME records were created before the GlobalProtect tunnel was established. |
| GPC-18822 | Fixed an issue where, when the GlobalProtect app was installed on Windows devices and the device was reset using the Microsoft Recovery tool, the GlobalProtect app was not properly displayed. |
| GPC-18815 | Fixed an issue where the Logon button on the GlobalProtect login screen stopped working after receiving the Microsoft Edge WebView2 runtime, 117.0.2045.36 update on the devices. |
| GPC-18750 | Fixed an issue where, when the GlobalProtect app was installed on devices running macOS, the GlobalProtect HIP check did not detect the Total Defense antivirus application, which caused the device to fail the HIP check. |
| GPC-18733 | Fixed an issue where the hyperlinks with the URLs containing the "=" character in the HIP notification message did not work as expected and the page did not open when the user clicked the URL. |
| GPC-18720 | Fixed an issue where the GlobalProtect app became unresponsive when the user clicked the ESCbutton during authentication using a hard token. |
| GPC-18703 | Fixed an issue where the GlobalProtect HIP check did not detect the Trellix Endpoint Security application, which caused the device to fail the HIP check. |
| GPC-18598 | Fixed an issue where the GlobalProtect SSO tile was selected instead of the Windows Password tile in the Windows Login screen even though the registry key MakeGPCPDefault was set to No. |
| GPC-18384 | Fixed an issue where GlobalProtect did not connect while Netskope was connected and vice-versa. |
| GPC-18379 | Fixed an issue where, when the IP address type was set to IPv4 and IPv6, the GlobalProtect app could connect only to the manual gateway instead of connecting to the best available gateway. |
| GPC-18223 | Fixed an issue where GlobalProtect experienced a prolonged connection time when IPv6 was disabled on Windows devices. |
| GPC-18157 | Fixed an issue where the GlobalProtect app displayed the Credential Provider language in English when the system language was German. |
| GPC-18039 | Fixed an issue where the GlobalProtect HIP check did not detect the Definition Date correctly for the CrowdStrike application, which caused the device to fail the HIP check. |
|
GPC-18025
|
In 6.2.1, after a refresh connection, the HIP patch exclusion isn't
visible on the GlobalProtect UI. However, the HIP patch exclusion
logs are visible on the Pangphip.log file.
|
| GPC-17640 | Fixed an issue where the GlobalProtect HIP check did not detect the Definition Date correctly for the CrowdStrike application, which caused the device to fail the HIP check. |
| GPC-17518 | Fixed an issue where the GlobalProtect app displayed the status as 'Connected-Internal' even when the app was not connected. |
| GPC-17436 | Fixed an issue where, when the GlobalProtect app was installed on devices running macOS, the upload speed of the internet was reduced after a version upgrade. |
| GPC-17204 | Fixed an issue where, when the GlobalProtect app was installed on devices running macOS, the certificate information was not accessible even though the GlobalProtect app had full access to the certificate store. |
| GPC-16975 | Fixed an issue where, when the GlobalProtect app was installed on devices running macOS, the screen reader did not announce the name of the GlobalProtect gateway when the gateway was marked with the star symbol. |
| GPC-16584 | Fixed an issue where the GlobalProtect HIP check did not detect the CrowdStrike antivirus software correctly, causing the device to fail the HIP check. |
| GPC-15123 | Fixed an issue where users were unable to collapse the Change Portal and Change Gateway menus using the Escape key. |