The GlobalProtect agents on Windows and macOS experience persistent connection loops because of a misconfiguration in the Unified User-ID setup. This occurs when the agent identifies an internal network but connects to an external gateway that lacks a valid routing path back to that internal network. For this feature to function correctly, it is recommended to have at least one internal gateway reachable from the external gateway to ensure stable connectivity and proper network transitions.

(macOS only) GlobalProtect crashes when you click Change Portal on setups that include two or more portal entries and have a preferred gateway marked. This issue can corrupt the NSUserDefaults plist file leading to subsequent crashes.

Workaround: Do one of the following:

• Reinstall GlobalProtect.
• Remove the corrupted plist file located at ~/Library/Preferences/com.paloaltonetworks.GlobalProtect.client.plist.
• Remove portal entries only from the plist file using the following steps:
  1. $ launchctl unload -S Aqua /Library/LaunchAgents/com.paloaltonetworks.gp.pangpa.plist
  2. $ defaults delete com.paloaltonetworks.GlobalProtect.client PanPortalList
  3. killall cfprefsd
  4. launchctl load -S Aqua /Library/LaunchAgents/com.paloaltonetworks.gp.pangpa.plist