Fixed an issue where, when the GlobalProtect app was installed on macOS devices running Big Sur, the app was unable to establish a connection when the Netskope Client was installed on the system.

Fixed an issue where, when the GlobalProtect app was installed on Windows devices, the app was disconnected from the tunnel and performed a network discovery after waking up from Modern Standby mode.

Fixed an issue where, when the gateway was manually selected for the first time instead of the Best Available gateway, any subsequent connections to the Best Available gateway allowed end users to connect to the manually selected gateway rather than the Best Available gateway.

Fixed an issue where the

Custom Password Expiration Message (LDAP Authentication Only)

notification displayed grammatical errors when the system language was German.

Fixed an issue where, when the GlobalProtect app was installed on macOS devices running macOS 10.15 or 11.0, the GlobalProtect HIP check did not detect the CrowdStrike Falcon application, which caused the device to fail the HIP check.

Fixed an issue where, when the GlobalProtect app was installed on macOS devices and split tunnel was configured based on the application, some traffic did not follow the split tunnel configuration on applications such as Microsoft Teams.

Fixed an issue where the GlobalProtect client on the end user’s endpoint did not connect to the Best Available gateway after the endpoint woke up from sleep mode. This issue occurred when SAML authentication was used and in the auto-scaled gateway scenario. With this fix, the GlobalProtect client can also connect to the Best Available gateway in the auto-scaled gateway scenario.

Fixed an issue where the GlobalProtect HIP check did not correctly detect the

Last Full Scan Time

information for the Windows Defender on Windows endpoints, which caused the endpoints to fail the HIP check.

Fixed an issue where, when the GlobalProtect app was installed on Windows devices and used a smart card for client certificate authentication, the number of prompts used between the portals were different.

Fixed an issue where the GlobalProtect HIP check incorrectly detected the

Anti-Malware

information for the

Definition Version

for Cisco Advanced Malware Protection (AMP).

Fixed an issue where the GlobalProtect HIP check incorrectly detected the

Anti-Malware

information for the

Definition Version

for Sophos Endpoint Protection version 10.0.0.

Fixed an issue where the GlobalProtect HIP check incorrectly detected the

Anti-Malware

information for the

Last Full Scan Time

for the McAfee Total Protection Antivirus software application.

Fixed an issue where, when the GlobalProtect app was installed on Windows devices, the

Custom Password Expiration Message (LDAP Authentication Only)

notification is blank after you changed the message setting.

Fixed an issue where, when the GlobalProtect app was installed on Windows devices, the command string for

pre-vpn-connect

or

post-vpn-connect

contained arguments with one or more whitespace characters, which caused the built-in GlobalProtect app upgrade to fail.

Fixed an issue where, when the GlobalProtect app was installed on macOS devices running macOS Catalina 10.15.7, the GlobalProtect HIP check did not detect the

Anti-Malware

information for the

Last Full Scan Time

for the McAfee Total Protection Antivirus software application version 4.9.2, which caused the device to fail the HIP check.

Fixed an issue where the

GlobalProtect Update

pop-up dialog displayed grammatical errors.

Fixed an issue where the GlobalProtect app could not properly exclude multicast routes specified in the exclude list.

Fixed an issue where the GlobalProtect app was configured with

Pre-logon then On-demand

mode and if the network was changed or the network connection was lost during pre-logon tunnel mode, the pre-logon tunnel was not able to reconnect to the app after the machine was connected to the network.

Fixed an issue where, when the GlobalProtect app was installed on Linux devices, DNS resolution failed when the app was connected on Ubuntu 20.04.

Fixed an issue where the HIP report did not contain the correct

Last Full Scan Time

information for the AVG Internet Security software.

Fixed an issue where, when the GlobalProtect app was installed on macOS devices, the GlobalProtect HIP check did not detect the

Patch-Management

software for the JAMF Pro software application, which caused the device to fail the HIP check.

Fixed an issue where, when the GlobalProtect app was installed on Windows devices, the GlobalProtect HIP check did not detect the Avast Antivirus software version 20.x. After upgrading from Antivirus software version 18.x, the GlobalProtect HIP check did detect the Avast Antivirus software version 20.x.

Fixed an issue where, when the GlobalProtect app was installed on Windows devices, the GlobalProtect HIP check did not detect the

Anti-Malware

information for the

Last Full Scan Time

for the McAfee Total Protection Antivirus software.

Fixed a rare issue where the PanGPS log file was not rotated and it caused the PanGPS.log file to consume a large amount of disk space.

Fixed an issue where, when the GlobalProtect app was installed on macOS Big Sur devices and split tunnel was configured based on the application, the app was unable to connect to applications such as Zoom.

Fixed an issue where, when the GlobalProtect app was installed on Windows devices, the app was disconnected from the tunnel after the

Pre-logon Tunnel Rename Timeout

expired even when users successfully authenticated to the gateway through either SAML authentication or RADIUS for two-factor authentication.

Fixed an issue where, after you installed the GlobalProtect app on macOS devices using the client upgrade prompt, a kernel panic occurred on the macOS device.

Fixed an issue where, when the GlobalProtect app was installed on Windows devices, the GlobalProtect tunnel could not send traffic after the system woke up from sleep mode.

Fixed an issue where, when the GlobalProtect app was installed on macOS devices, the GlobalProtect virtual interface was locally unreachable.

Fixed an issue on the GlobalProtect agent when the response from the gateway pre-login included the error status and an empty message, but the GlobalProtect client was not expected to receive the response from the pre-login with the error status and an empty message. With this fix, the GlobalProtect client is configured to handle the error status and the empty message response from the gateway pre-login when the minimum version is set to TLSv1.2 in the SSL/TLS service profile.

Fixed an issue where, after you upgraded the GlobalProtect app to release 5.2.1 or release 5.2.2 on macOS devices using the client upgrade prompt, a kernel panic occurred on the macOS device.

Fixed an issue where the GlobalProtect HIP check did not detect Symantec Endpoint Protection 14.3 real-time protection, which caused the device to fail the HIP check.

Fixed an issue where the HIP report did not contain the correct

Last Full Scan Time

information for the AVG Internet Security software.

Fixed an issue where, when the GlobalProtect app was installed on Windows 10 devices and network connectivity was enabled in Modern Standby, the tunnel failed to be restored after waking up from sleep mode.

Fixed an issue where, when the GlobalProtect app was installed on Linux devices, the GUI version of GlobalProtect sometimes was unresponsive (for example, when the GNOME Shell was replaced).

Fixed an issue where, when the GlobalProtect app was installed on macOS devices, the GlobalProtect HIP check did not detect

Anti-Malware

information for Sophos Endpoint Protection version 10.0.0.

Fixed an issue where, when the GlobalProtect app was installed on Windows devices, the speed limit of the GlobalProtect adapter was set to a maximum of 100Mbps, With this fix, the speed limit of the GlobalProtect adapter is now set to a maximum of 2Gbps.

Fixed an issue where, when the GlobalProtect app was installed on Linux devices, the GUI version of GlobalProtect hangs when multiple terminals were launched (in a multi-user target) or when one terminal had to be launched for the GUI version to launch.

Fixed an issue on Windows endpoints where, if the GlobalProtect app is configured with the Pre-logon (Always On) Connect Method with the

Pre-logon Tunnel Rename Timeout

value set to

-1

(or any other value) and users disable the app and reboot their endpoint, the pre-logon tunnel is up after they login. After the system reboots, the app is disabled but the virtual interface is enabled. With this fix, the app and the virtual interface are disabled after a system reboot.

Fixed an issue where the GlobalProtect app failed to connect to the portal or gateway in the Prisma Access network through the proxy.

Fixed an issue where the GlobalProtect HIP check did not detect

Patch Management

information for the Microsoft Intune management extension software.

Fixed an issue where, when the GlobalProtect app was installed on macOS devices and the

No direct access to local network

option was enabled on the gateway, the access route to the default gateway was not properly masked.

Fixed an issue where, after you upgraded and installed the GlobalProtect app, the app was unable to connect to the gateway due to the

Failed to get default route entry

error message.

Fixed an issue where the GlobalProtect app was unable to establish a connection to the gateway because the fully qualified domain name (FQDN) specified for the gateway mapped to a different IP address during network discovery and pre-login. With this fix, the app performed a network discovery again and connected to the

Best Available

gateway.

Fixed an issue where, when the GlobalProtect app was installed on macOS devices running macOS Catalina 10.15.4, the GlobalProtect HIP check did not detect Symantec Endpoint Protection 14.3 real-time protection, which caused the device to fail the HIP check.

Fixed an issue where, when the GlobalProtect app was installed on Windows devices, the app performed a second network discovery after gateway authentication was successful. This issue resulted in two authentication prompts (for example, the SAML authentication type) right after waking up from sleep mode.

Fixed an issue where the GlobalProtect app selected the geographically distant gateway instead of the gateway with the faster response time. With this fix, the

Best Available

gateway is now determined by the assigned weight of the gateway.

Fixed an issue where the GlobalProtect HIP check incorrectly detected the

Anti-Malware

information for the

Engine Version

,

Definition Version

, and

Date

for the CrowdStrike Falcon application.

Fixed an issue where portal authentication failed due to the authentication failure during the

GlobalProtect App Config Refresh

configuration, which caused users to be locked out of the RSA device.

Fixed an issue where the GlobalProtect HIP check did not detect Symantec Endpoint Protection 14.3 real-time protection, which caused the device to fail the HIP check.

Fixed an issue where the GlobalProtect app was configured with

On-Demand

mode and continued to stay in connecting state even when manually switching to a different gateway failed. With this fix, the app will now display an error message when switching to a different gateway failed.

Fixed an issue in GlobalProtect for macOS endpoints where installing or upgrading the package using a MDM system such as JAMF Pro resulted in a GlobalProtect app initialization failure.

Fixed an issue where the original DNS suffixes were removed from the client machine and only the DNS suffixes from the gateway were applied.

Fixed an issue where, when the GlobalProtect app was installed on Windows devices, the GlobalProtect service modified the DNS suffix system list even when the gateway pushed an empty DNS suffix list.

Fixed an issue where, when the GlobalProtect app was installed on macOS devices running macOS Catalina, the GlobalProtect service restarted after a system reboot or when users logged out and logged in to the endpoint.

Fixed an issue where, when the GlobalProtect app was installed on Windows endpoints and split tunnel was configured based on the application, handle leaks were observed by the GlobalProtect service.

Fixed an issue on Windows 10 endpoints where the Active Directory Users and Computers (ADUC) application experienced high latency when users established a GlobalProtect connection.

Fixed an issue where when the GlobalProtect app was enabled to

Collect HIP Data

in the GlobalProtect portal agent configuration, the GlobalProtect HIP process activated the subprocess (PanGpHipMp.exe) even when the

Patch Management

category was excluded.

Fixed an issue where, when the GlobalProtect app was installed on Windows endpoints, the app was disconnected from the VPN tunnel after the pre-logon tunnel grace period expired even when users logged in to the endpoint and the pre-logon tunnel was successfully renamed. This issue occurred when two-factor authentication (2FA) was used.

Fixed an issue where when the GlobalProtect app was installed on macOS devices, the network extensions were not loaded successfully after a system reboot.

Fixed an issue where, when the GlobalProtect app was installed on Linux, the GlobalProtect client hangs after the session timed out.

Fixed an issue where, when the GlobalProtect app was installed on macOS devices running macOS Catalina, the app was unable to establish a pre-logon tunnel.

Fixed an issue where, when the GlobalProtect app was installed on Windows endpoints, the pan_gp_event.log file displayed the date in a different format when compared to the GlobalProtect agent and GlobalProtect service logs.

Fixed an issue where the GlobalProtect app failed to connect to the portal or gateway in the Prisma Access network when the client machine was connected only to the IPv6 network.

Fixed an issue where the GlobalProtect app failed to connect to the portal when the client machine was behind the proxy and the DNS server was not able to resolve the fully qualified domain name (FQDN) of the portal.

Fixed an issue where the GlobalProtect HIP check did not detect real-time protection for Traps version 4.2.2.

Fixed an issue where the GlobalProtect driver caused the Blue Screen of Death errors on Windows endpoints when the third-party antivirus software was installed on the system.

Fixed an issue where the GlobalProtect app did not prevent users from dismissing the welcome page even when the

Allow User to Dismiss Welcome Page

option was set to

No

.

Fixed an issue where, when the GlobalProtect app was installed on Linux, users were not able to authenticate through SAML authentication when Microsoft Azure was used as the identity provider (ldP).

Fixed an issue where, when the GlobalProtect app was installed on Windows endpoints, the HIP report did not contain

Anti-Malware

information for the CrowdStrike Falcon application.

Fixed an issue where the GlobalProtect HIP check did not detect the status as “enabled” in the

Firewall

setting for the F-Secure Client Security software.

Fixed an issue where the GlobalProtect app tried to establish a connection without a user initiated connection even when the connect method was set to

Pre-logon then On-demand

.

Fixed an issue where, when the GlobalProtect app was installed on Linux, the domain name of the Linux device was not displayed in the

Domain

field of the HIP report.

Fixed an issue where, when the GlobalProtect app was installed on macOS endpoints and running the Blackberry Workspaces app, the GlobalProtect app stopped running.

Fixed an issue where the GlobalProtect app sometimes displayed the notifications in the system tray even when the

Show System Tray Notifications

option was set to

No

.

Fixed an issue where split tunnel rules based on destination domain was applied to Windows and macOS endpoints even with an invalid GlobalProtect license.

Fixed an issue where, when the GlobalProtect app was installed on Windows 10 endpoints and when users initiated the pre-logon connection, the

GlobalProtect Connect

button did not display in the Windows logon screen.

Fixed an issue where the GlobalProtect app was not able to establish a tunnel because the third-party software delayed enabling the virtual adapter used by GlobalProtect.

Fixed an issue where, when the GlobalProtect app was installed on macOS endpoints, the HIP report included

Disk Backup

information that contained invalid characters in the

version

attribute for the MEGAsync application.

Fixed an issue where, when the GlobalProtect app was installed on Android endpoints, client certificate authentication failed even when a valid client certificate was present.

Fixed an issue where, when the GlobalProtect app was installed on macOS devices running macOS Catalina 10.15.4 or later and split tunnel was configured based on the application, file handle leaks were detected after a few weeks of usage.

Fixed an issue where, when the GlobalProtect app was installed on Linux, connection to the portal went through the proxy server even when the portal address was included in the no proxy list.

Fixed a rare issue where the PanGPS log file was not rotated and it caused the PanGPS.log file to consume a large amount of disk space.

Fixed an issue where, when the

No direct access to local network

option was enabled for split tunnel traffic on macOS Catalina 10.15.4 endpoints, some local network traffic leaked through the physical interface.

Fixed an issue where, when the HIP report incorrectly displayed the

Real-Time Protection

status of the

Heimdal Thor Agent Anti-Malware

as

no

instead of

yes

.

Fixed an issue where the HIP report incorrectly displayed the

Real-Time Protection

status of the ESET Antivirus as

no

instead of

yes

.

Fixed an issue where the GlobalProtect app was not able to authenticate to the internal gateway even when the FQDN specified in the

DHCP Option 43 Code

and associated IP address were resolved correctly.

Fixed an issue where the GlobapProtect app included a default route with a metric that was less than the system default route when split tunnel based on the destination domain was configured as inclusions. This issue caused traffic to leak through the tunnel.

Fixed an issue where, when the GlobalProtect app was installed on Windows and connected to the gateway that had split tunnel configured based on the domain and application, traffic sent through the tunnel stopped for a few minutes even when GlobalProtect was still connected.

Fixed an issue where, when data was not exchanged between the GlobalProtect service and GlobalProtect agent for more than 2 hours because the TCP connection was not validated and blocked. This issue caused GlobalProtect to fail.

Fixed an issue where the

Kaspersky Endpoint Security Virus Definition Date

in the GlobalProtect HIP report did not match the actual date of the definition in the antivirus software.

Fixed an issue where the GlobalProtect app failed to retrieve the client configuration that was defined in the portal using the configuration selection criteria when the Common Name (CN) of the certificate contained special characters.

Fixed an issue where, when the GlobalProtect app was installed on macOS devices running macOS Catalina 10.15.4, the app was unable to connect to the gateway after a reboot of the GlobalProtect client.

Fixed an issue where the GlobalProtect app in pre-logon mode tried to connect to the portal every five seconds when the pre-logon cookie authentication expired. With this fix, the app does not retry the connection to the portal until after 30 minutes.

Fixed an issue where the GlobalProtect client failed to refresh the portal configuration after 1 hour even though the

refresh-config-interval

value was set to 1 hour. This issue occurred when the user tunnel was established after pre-logon with the

Pre-Logon-Tunnel-Rename-Timeout

value was set to 0.

Fixed an issue where, when the GlobalProtect app was installed on Windows, the app did not connect to the preferred gateway after a system reboot.

Fixed an issue where, when the GlobalProtect app was installed on Windows, the app retained the tunnel after switching Windows users even when the

GlobalProtect Tunnel Preservation on User Logout

value was set to 0.

Fixed an issue where the GlobalProtect HIP check did not correctly detect real-time protection and the Windows Defender version on Windows endpoints, which caused the endpoints to fail the HIP check.

Fixed an issue where the GlobalProtect HIP check did not detect real-time protection for Traps version 6.1.x and 7.0.x.

Fixed an issue where, when the GlobalProtect app was installed on iOS endpoints, the app did not automatically reconnect to the external gateway when users moved from the internal network to the external network.

Fixed an issue where, when the GlobalProtect app was installed on macOS devices, the HIP process restarted multiple times.

Fixed an issue where the

Only with User Fingerprint

option was enabled on the GlobalProtect client even though this option was not configured on the portal.

Fixed an issue where authentication to the GlobalProtect gateway failed as the challenge response for multi-factor authentication was sent to the portal and not to the gateway. This issue occurred when the pre-logon tunnel was not renamed to the user tunnel and the user tried to authenticate to the gateway. With this fix, GlobalProtect authentication is now successful.

Fixed an issue where the GlobalProtect client on macOS endpoints did not select the client certificate when the certificate did not have the client authentication enabled for the

Extended Key Usage

.

Fixed an issue where, when the GlobalProtect app was installed on Linux,

domain.com

was sent in the HIP profile instead of the correct domain.

Fixed an issue where, when the GlobalProtect app was installed on macOS, the GlobalProtect client tried to connect to the portal after the installation when the

On-Demand

connect method was defined in the property list (plist).

Fixed an issue where, when the GlobalProtect app was installed on Windows using Security Assertion Markup Language (SAML) authentication and the

Allow user to Sign Out from GlobalProtect App

option was set to

Yes

, the username and

Sign Out

button were not displayed on the app even when the

Save User Credentials

option was set to

No

.

Fixed an issue where, when the GlobalProtect app was installed on Linux, GlobalProtect failed to send an XML compliant HIP report to the firewall.

Fixed an issue where the

GlobalProtect Refresh Connection

window displayed the wrong French characters when the system language was French.

Fixed an issue where, when the GlobalProtect app was installed on Windows, the app failed to download the software from the portal when the proxy auto-configuration files were used.

Fixed an issue where, when the GlobalProtect app was installed on Windows UWP, the app failed to connect to the portal or gateway when multi-factor authentication (MFA) was used.

Fixed an issue where the GlobalProtect client failed to authenticate to the Prisma Access gateway when multi-factor authentication was used.

Fixed an issue where, when the GlobalProtect app was installed on macOS devices running macOS Catalina 10.15.4, the app restarted multiple times and was not able to connect to the gateway.

Fixed an issue where, when the GlobalProtect app was installed on Windows, the

Pre-logon then On-demand

connect method did not work properly. When you set the

Pre-logon Tunnel Rename Timeout

value to 0, GlobalProtect established a user tunnel after users logged in to the endpoint instead of remaining disconnected (On-Demand mode).

Fixed an issue where, when the GlobalProtect app was installed on Linux, the app did not send the complete HIP report due to many missing patch management entries and caused parsing issues on the gateway.

Fixed an issue where, when the GlobalProtect app was installed on Windows in On-Demand mode, the app was disconnected from the tunnel, and the HIP report was not sent to the gateway even when the gateway was selected manually after the device reboot.

Fixed an issue where users were prompted to enter their credentials on the GlobalProtect app 5.0.9 every time their macOS device running macOS Catalina 10.15.3 reboots.

Fixed an issue where the GlobalProtect HIP check did not detect real-time protection for Traps version 7.0.1 on Windows 10 endpoints, which caused the endpoints to fail the HIP check.

Fixed an issue on Windows endpoints where, if the GlobalProtect app is configured with the

Pre-logon (Always On) Connect Method

and users disable the app and reboot their endpoint, the pre-logon tunnel is up after they login.

Fixed an issue where, after you upgraded the GlobalProtect app from 5.0.x release to 5.1.1 release on Windows endpoints, the username displayed Chinese characters instead of English characters.

Fixed an issue where, when a split tunnel based on the destination domain was configured on macOS Catalina 10.15.4 endpoints, all Safari-based traffic and all Mac App Store-based traffic that were defined in the split tunnel configuration were dropped. The same issue also occurred when you configured a split tunnel based on the applications downloaded from the Mac App Store. All traffic that was created for the configured applications were dropped. With this fix, traffic defined in the split tunnel configuration will not be dropped using Safari.

Fixed an issue where the grace period decreased and GlobalProtect is disconnected even after gateway authentication was successful for the switch to the new user.

Fixed an issue where, when the GlobalProtect app was installed on Android devices, the app failed to reconnect and continued to stay in connecting state. Users had to close and launch the app to establish the connection.

Fixed an issue where, when the GlobalProtect app was installed on Windows with a different language other than English (for example, Spanish), the GlobalProtect agent was continuously restarted.

Fixed an issue where, after you upgraded the GlobalProtect app from 5.0.x release to 5.1.1 release on a macOS device, users were prompted to re-enter their password even when the saved password was set to

Yes

. With this fix, users will not be prompted to re-enter their password after the upgrade. For GlobalProtect to access user credentials from the login keychain, the following Keychain Pop-Up message will appear:

Fixed an issue where, when the GlobalProtect app was installed on Windows, two OpenSSL DLL files in 64-bit were not signed by a Palo Alto Networks certificate. This issue caused a problem for some endpoint protection applications.

Fixed an issue where the GlobalProtect app for macOS was disabled and the

Disable Timeout (min)

value expired, GlobalProtect could reconnect and user credentials were not preserved.

Fixed an issue where the GlobalProtect app for macOS version 5.1.1 could not be properly installed because the GlobalProtect service failed to launch.

Fixed an issue where the GlobalProtect app on macOS displayed the following error message when all the gateways were configured as

Manual Only

priority:

Please select a gateway to connect manually

Fixed an issue on Windows endpoints where, after the endpoint woke up from sleep mode, the GlobalProtect app was disconnected and then attempted to reconnect to the portal or gateway.

Fixed an issue where, when the GlobalProtect app was installed on macOS and Windows, cookie authentication was successful even when the wrong password was used and GlobalProtect was still connected after users sign out of the app. With this fix, authentication cookies are now deleted from the system when users sign out of the app.

Fixed an issue where, when GlobalProtect was installed using the Windows Installer (Msiexec) with on-demand as the connect method, GlobalProtect automatically tried to connect to the portal.

Fixed an issue where the GlobalProtect app displayed the customized

Captive Portal Detection Message

in the wrong format when a different language was used other than English.

Fixed a connectivity issue where, when the GlobalProtect app was installed for macOS Catalina, the GlobalProtect connection was periodically lost.

Fixed an issue where the GlobalProtect app detected the presence of a captive portal even though it was not present.

Fixed a periodic issue where the GlobalProtect tunnel failed to be restored after waking up from sleep mode. This issue occurred when on-demand was used as the connect method.

Fixed an issue where, after upgrading to GlobalProtect 5.0.6, the GlobalProtect HIP check did not detect that Symantec Endpoint Protection 14.2 real-time protection was enabled, which caused the device to fail the HIP check.

Fixed an issue where the GlobalProtect app on macOS failed to find the correct certificate for authentication to the gateway, when the object identifier (OID) was specified in the plist.

With this fix, when you provide the Key Usage OID in the plist, the GlobalProtect app uses the correct certificate.

Fixed an issue where the portal configuration selection criteria failed when the certificate was signed with the version 2 template.

Fixed an issue that caused the GlobalProtect app to install a default route with the same metric as the system default route, when split-tunneling based on access route and destination domain was enabled. This issue caused some excluded traffic to go through the tunnel.

Fixed an issue where GlobalProtect failed to connect to the external gateway when the proxy was not reachable outside of the corporate network until the GlobalProtect service or the desktop was restarted.

Fixed an issue with the GlobalProtect app on iOS that occurred when two VPN profiles (one device-level VPN profile and one per-app VPN profile) were pushed from the mobile device management (MDM) server. This issue occurred when users initiated the per-App VPN connection using one iOS app that was on the allow list. The GlobalProtect app displayed the status as “Disconnected” and the app did not respond to

TAP TO CONNECT

. This prevented users from disconnecting from the per-App tunnel and establishing a device-level VPN tunnel.

Fixed an issue where, when GlobalProtect was installed on iOS endpoints, the GlobalProtect app displayed the

Can’t end Background Task

error message from the GlobalProtect agent logs. This issue occurred periodically when

TAP TO CONNECT

was used to establish the GlobalProtect connection from the home screen.

Fixed an issue where, when GlobalProtect was installed on iOS endpoints, the GlobalProtect app failed to perform a successful network discovery when there was a region mismatch between the portal and the gateway.

Fixed an issue where, when the GlobalProtect Android app was installed on Chromebooks, the GlobalProtect app failed to connect to the tunnel because GlobalProtect was not running.

Fixed an issue where, when the GlobalProtect app was installed on Android endpoints, the app hangs and the VPN connection failed to be restored. This issue occurred when users switch from an external network to an internal network after the

Automatic Restoration of VPN Connection Timeout

option was set to

Yes

.

Fixed an issue where client certificate authentication was failing on Android 10 devices even when the certificate was manually selected.

Fixed an issue where, when the GlobalProtect app was upgraded to 5.1.1 on an Android device, the client could no longer connect to the gateway with the custom port configuration.

Fixed a graphical user interface issue with the GlobalProtect app that occurred when the device-level VPN profile and the per-app VPN profile were pushed from the mobile device management (MDM) server. This issue occurred when users initiated the VPN connection from the iOS VPN settings (

Settings

General

VPN

), and the GlobalProtect app automatically transitioned to “Connected”. After a VPN connection was established and the app was launched, the graphical user interface still displayed “Disconnected” even though the VPN connection was actually running in the background.

Fixed an issue where the GlobalProtect app was upgraded to 5.1.0 on an iOS device. This issue occurred because the GlobalProtect was restarted during portal or gateway authentication.

Fixed an issue where, when GlobalProtect was installed for Android 10, the GlobalProtect app was not able to use the client certificate for authentication. This issue occurred when the client certificate was created with an algorithm other than RSA.

Fixed an issue where, when GlobalProtect was installed for Windows UWP, the GlobalProtect app crashed when traffic was sent through the IPSec tunnel.

Fixed an issue where, when GlobalProtect was installed for Android and Security Assertion Markup Language (SAML) was used to authenticate mobile users, the GlobalProtect app did not send the complete information about the mobile device such as the User-Agent string for the web browser. With this fix, the GlobalProtect app can now send the device information while performing SAML authentication.

Fixed an issue where, when GlobalProtect was installed for macOS, the GlobalProtect client used the expired certificate instead of the new certificate for portal authentication. This issue occurred when both expired and new certificates were installed for macOS. With this fix, the GlobalProtect client will no longer use the expired certificate for authentication.

Fixed an issue where, when GlobalProtect was installed on CentOS, the GlobalProtect portal or gateway authentication prompt did not display the customized authentication messages that were configured in the portal configuration. With this fix, the customized authentication messages are now displayed correctly.

Fixed a connectivity issue where GlobalProtect failed to reconnect to the network. This issue occurred when different portal configurations were pushed from a mobile device management (MDM) system one at a time.

Fixed an issue where the GlobalProtect client was not enabled automatically after a reboot even when the duration timer has expired. This issue occurred when the GlobalProtect client was disabled and your system was rebooted. With this fix, the GlobalProtect client will now be enabled automatically even after a reboot.

Fixed an issue where GlobalProtect crashed on macOS devices when the Automatic Proxy Configuration was enabled.

Fixed an issue where, when the GlobalProtect Android app was installed on Chromebooks with

On-Demand

mode, the GlobalProtect app failed to connect to the tunnel after the device was in “sleep” mode.

Fixed an issue where the IPSec connection failed on a dual stack environment. This issue occurred when the IPv6 preferred option was set to

No

.

Fixed an issue where, when the GlobalProtect Android app was installed on Chromebooks with

Always On

mode and managed using the Google Admin console, the device did not reconnect after a reboot.

Fixed an issue where macOS users could not connect to the GlobalProtect gateway during manual gateway selection. This issue occurred because the portal and gateway were configured to authenticate users through Security Assertion Markup Language (SAML) authentication with the On-Demand connect method. With this fix, users can now connect to the manual gateway upon the first attempt.

Fixed an issue where the GlobalProtect App for macOS did overwrite the local DNS search domains with the tunnel DNS search domains. This occurred when the “Append Local Search Domains to Tunnel DNS Suffixes (macOS Only)” app setting was set to “No” in the portal agent configuration. With this fix, the tunnel DNS search domains are now appended with the local DNS search domains when the “Append Local Search Domains to Tunnel DNS Suffixes (macOS Only)” app setting is set to “Yes” in the portal agent configuration.

Fixed an issue where Ubuntu 19.04 did not display the GlobalProtect system tray icon or the app could not be launched by clicking the system tray icon.