The GlobalProtect app does not prompt users to extend the login lifetime user session when the device wakes up from sleep or hibernation mode.

The GlobalProtect tunnel disconnects after 10 minutes on app versions 6.0.8 and 6.2.1, when SAML authentication is used and the GlobalProtect app is running on macOS devices.

In 6.2.1, after a refresh connection, the HIP patch exclusion isn't visible on the GlobalProtect UI. However, the HIP patch exclusion logs are visible on the

Pangphip.log

file.

Firefox is not supported for proxied traffic in Tunnel and Proxy mode or proxy mode.

After entering CIE SAML authentication credentials to refresh an expired explicit proxy token or cookie when connected in Tunnel and Proxy mode or proxy mode, the GlobalProtect app gets stuck while retrieving the portal configuration.

Workaround:

Refresh the GlobalProtect connection or disconnect and reconnect the GlobalProtect app.

When the GlobalProtect app is connected in Tunnel and Proxy mode or proxy mode, SSH traffic cannot be sent over the proxy.

When GlobalProtect is configured in Tunnel and Proxy mode or proxy mode, if the admin-defined PAC file has an HTTP URL, the GlobalProtect app will not download the PAC content.

Workaround:

Use GlobalProtect in proxy mode for better compatibility with third-party VPNs.

In Tunnel and Proxy mode, the GlobalProtect agent tunnel on macOS does not coexist well with Cisco Anyconnect VPN due to an IP forwarding table issue.

Workaround:

Use GlobalProtect in proxy mode for better compatibility with third-party VPNs.

The GlobalProtect app does not prompt the users to extend the login lifetime user session when the device woke up from sleep or hibernation mode.