Addressed Issues

Fixed an issue where the GlobalProtect app was unable to validate the certificate from OCSP.

Fixed an issue where the OCSP requests were being rejected by the OCSP responder with a HTTP 400 Bad Request error due to the absence of the Host header in the OCSP request.

Fixed an issue where, when the GlobalProtect app version 6.3.x was installed on devices running macOS, the HIP check failed to detect ESET Endpoint Security version 8.

Fixed an issue where, when the patch management category was excluded for HIP checks, HIP checks were still happening for missing patches which consumed CPU resources on users' machine.

Fixed an issue in which the GlobalProtect app, when installed on Windows devices, caused a duplicate page to open in the system default browser (Chrome) when the user clicked the hyperlink on the Welcome page with fedmandate on the embedded browser.

Fixed an issue in GlobalProtect 6.3.1 for macOS where the Refresh Connection option was missing during the Connecting state, specifically for users who upgraded from version 6.3.0.

Fixed an issue where the GlobalProtect IPSec tunnel got disconnected on GlobalProtect app version 6.2.5 when gpupdate /force command was used to update policy.

Fixed an issue where the GlobalProtect ARM64 installers for 6.2.5 version did not display the Digital Signatures tab.

Fixed an issue where the GlobalProtect HIP check incorrectly detected Malware Definition Date for Trend Micro Deep Security Agent, which caused the device to fail the HIP check.

Fixed an issue where all the added portals got deleted from the portal list except the connected portal when the GlobalProtect app was upgraded from version 6.2.4 to 6.2.5-788. Users had to manually add them again to resolve the issue.

Fixed an issue where, when the GlobalProtect app was installed on devices running macOS and were connected to the internal gateway, the app did not display the Disconnect option under Settings.

Fixed an issue where the hyperlink in HIP notification opened up in Webview2 instead of the default browser.

Fixed an issue where the SAML embedded browser did not remember the username after sign-out, even when the user had selected the check box Remember Me on the SAML embedded browser.

Fixed an issue where GlobalProtect got stuck in connecting and failed the connection after some time.

Fixed an issue where GlobalProtect crashed when the PanGPS service was stopped.

Fixed an issue where the SAML authentication page would occasionally fail to appear due to the usage of a previous SAML pre-login cookie.

Fixed an issue where, when the GlobalProtect app was installed on devices running macOS, the HIP check for the built-in firewall shows N/A incorrectly.

The value should be either Yes or No.

Fixed an issue where the HIP check could not detect Trellix Firewall Status, which caused the device to fail the HIP check.

Fixed an issue where the GlobalProtect HIP check incorrectly detected Real Time Protection status for Avast and XProtect, which caused the device to fail the HIP check.

Fixed an issue where the GlobalProtect HIP check did not detect Kaspersky Endpoint Security antimalware application which caused the device to fail the HIP check.

Fixed an issue where, when the user upgraded the GlobalProtect app version to 6.2.4 with SAML authentication, users were unable to connect to GlobalProtect intermittently when Enforcer is enabled.

Fixed an issue where GlobalProtect HIP set the Filevault encryption status to unencrypted on macOS running devices, which denied access to the end-point machines.

Fixed an issue where the GlobalProtect HIP check incorrectly detected the Real Time Protection Status and Last Full Scan for Avast application, which caused the device to fail the HIP check.

Fixed an issue where the GlobalProtect service exited when the user logs off or put the computer in sleep mode.

Fixed an issue where the GlobalProtect HIP check did not detect Real time protection status for Acronis Cyber Protection Agent, which caused the device to fail the HIP check.

Fixed an issue where, when the GlobalProtect app was installed on devices running macOS, the GlobalProtect app failed to reconnect and continued to stay in the Connecting state after the device woke up from Modern Standby mode.

Fixed an issue where the GlobalProtect HIP check did not detect Real Time Protection status for Malwarebytes antimalware application, which caused the device to fail the HIP check.

Fixed an issue where the GlobalProtect app got stuck in connecting stage after authentication when the app was upgraded to 6.2.4 version.

Fixed an issue where the GlobalProtect app was installed on devices running macOS, the GlobalProtect got stuck in Connecting state when the device woke up from sleep mode.

Fixed an issue where, when the GlobalProtect app was installed with the Conditional Connect method, users had to click the Connect button twice to connect to an external gateway after a system reboot.

Fixed an issue where the GlobalProtect enforcer blocked DHCP packets.

Fixed an issue where the HIP report was not completed within the allowed time.

Fixed an issue where the HIP report for Symantec Encryption Desktop shows the encryption state as unencrypted.

Fixed an issue where Windows regional settings were not respected by Webview 2 on SAML embedded browser resulting in regional language(French, German, Chinese, Spanish, and Japanese) not loading properly in embedded browser.

Fixed an issue where macOS users had to enter the SAML username and password each time they refreshed or rebooted their computer. This issue occurred more frequently when they used Safari as the default browser or used the embedded browser.

Fixed an issue where all GlobalProtect portals except for the currently connected portal were deleted during the upgrade from 6.2.2 to 6.2.3 or from 6.2.3 to 6.3.0.

Fixed an issue where the PanGPS process crashed due to exception code 0xC0000374.

Fixed an issue where the tunnel gets broken during modern standby when using Enforce GlobalProtect for Network Access and the enforcer gets re-enabled only after the user resumes working on the computer.

Fixed an issue where HIP reports are sometimes not available on the firewall for newly connected users.

Fixed an issue where users were unable to install GlobalProtect 6.2 on windows 11 ARM64 devices.

Fixed an issue where the PanGPA executable version 6.1.2.83 did not work as expected on Windows devices.

Fixed an issue where it was possible to do a privilege escalation and\or login bypass when using a 3rd party credential provider with GlobalProtect.

Fixed an issue where when Endpoint Traffic enforcement feature was enabled, certain traffic was going through the physical adapter and not getting blocked as per the rules set.

Fixed an issue where, when the GlobalProtect app version 6.0.7 was installed on devices running macOS, the "Allow with Passcode option did not work as expected when the user tried to disable the GlobalProtect app with the configured passcode.

Fixed an issue where, when the GlobalProtect app was installed on devices running macOS, the GlobalProtect macOS install package created an unused /Library/Application folder.

Fixed an issue where, when the GlobalProtect app was installed on Windows devices, the app did not start right away after a system reboot.