Windows users receive a script error when authenticating to the GlobalProtect portal or gateway using SAML authentication.

On endpoints running Android 8.0 and later releases, GlobalProtect does not reconnect automatically when switching from internal mode (corporate Wi-Fi) to external mode (LTE).

Workaround

: Launch the GlobalProtect app from the Start menu.

GlobalProtect cannot identify and display

Last Full Scan Time

HIP data for Bitdefender Antivirus on macOS endpoints.

The GlobalProtect app for Linux endpoints prompts end users to enter their credentials in succession despite entering correct credentials. This issue occurs after the end user attempts to connect to an alternate manual gateway configured with the User-logon (Always On) connect method.

GlobalProtect cannot identify and display the

Last Full Scan Time

HIP data for the 360 Total Security antivirus app.

Endpoints can't connect to GlobalProtect after you set the Windows System Display to Chinese and specify Chinese characters for the

Username Label

in the GlobalProtect app login page (

Network

GlobalProtect

Portals

<portal>

Agent

<agent>

Authentication

).

Workaround:

Specify English characters for the

Username Label

.

If you

Allow User to Disable GlobalProtect

and then specify a

Disable Timeout

value to restrict the amount of time for which users can disable the app (

Network

GlobalProtect

Portals

<portal>

Agent

<agent>

App

), the GlobalProtect app for macOS endpoints does not automatically enable after reaching the

Disable Timeout

value.

Workaround

: Users must manually enable the GlobalProtect app.

Endpoints running iOS 10.12 and later iOS releases on the T-Mobile LTE network cannot connect to GlobalProtect gateways that are configured with only IPv4 addresses because T-Mobile now assigns only IPv6 addresses to endpoints running iOS 10.12 and later releases.

Workaround

: Configure your GlobalProtect gateway with FQDNs instead of IPv4 addresses.

On Windows 10 endpoints, the GlobalProtect app removes DNS suffixes due to an error in the read/rewrite function that directly modifies the DNS suffix search list in the Windows registry key.

On macOS endpoints, the GlobalProtect app can’t detect the following

Anti-Malware

information for the HIP Match log details of the Gatekeeper security feature (

Monitor

Logs

HIP Match

<hip-match-log>

):

Proxies are disabled after you establish the GlobalProtect connection on macOS endpoints because proxy settings are not copied from the physical network adapter of the endpoint to the virtual network adapter of the endpoint, and the virtual network adapter becomes the primary adapter from which the macOS endpoint receives proxy settings.