GlobalProtect App 6.0 Known Issues

See the list of the known issues in GlobalProtect app 6.0.

The following table lists the known issues in GlobalProtect app 6.0 for Android, iOS, Chrome, Windows, Windows 10 UWP, macOS, and Linux.

Issue	Description
GPC-14820	If you change the setting for Connect with SSL Only in the portal configuration, when the user views the Preferences in the GlobalProtect app, the Connect with SSL setting retains the previous setting.
GPC-14819	The first time end users connect using the GlobalProtect 6.0 app they may see an authentication failed message if their SSO credentials are different from the credentials they used to log in to their computer.
GPC-14705	On macOS endpoints, when connected to an internal gateway the endpoint may not send a HIP report or receive HIP notifications, and the HIP reports are not available on the Host Information Profile tab in the app.
GPC-14640 Fixed in GlobalProtect app 6.0.1	In pre-logon deployments, the GlobalProtect enforcer remains enabled even after disabling GlobalProtect.
GPC-14453 Fixed in GlobalProtect app 6.0.1	In some cases, TCP Option lookup for IP fragmented TCP packets can cause the endpoint to lose access to internal resources.
GPC-14329 Fixed in GlobalProtect app 6.0.1	macOS devices are able to bypass the GlobalProtect tunnel using the physical adapter even when No direct access to local network is enabled.
GPC-14063	In cases where the GlobalProtect gateway does not push a DNS suffix to the endpoint, the endpoint incorrectly pushes the DNS suffix from the physical adapter to the virtual adapter.
GPC-13998	When connected to GlobalProtect with Resolve All FQDNs Using DNS Servers Assigned by the Tunnel (Windows Only) set to Yes in the App Configurations area of the GlobalProtect portal configuration, performance is slow in the Windows Active Directory Users and Computers console. Workaround: Set Resolve All FQDNs Using DNS Servers Assigned by the Tunnel (Windows Only) to No .
GPC-13970 Fixed in GlobalProtect app 6.0.1	DNS queries for excluded domains are sent out on both the GlobalProtect app virtual adapter and the device's physical adapter when Split-Tunnel Option is set to Both Network Traffic and DNS in the App Configurations area of the GlobalProtect portal configuration.
GPC-13774 Fixed in GlobalProtect app 6.0.1	In some cases the GlobalProtect tunnel can not send traffic after the system wakes up from sleep mode.
GPC-13757	In a configuration where the Welcome Page is set to None and Have User Accept Terms Of Use before Creating Tunnel is set to Yes , the endpoint gets stuck in the connecting state. Workaround: Enable the Welcome Page or set Have User Accept Terms Of Use before Creating Tunnel to No .
GPC-13575	When the user is prompted to select a certificate to use to connect to GlobalProtect, if the user instead clicks Cancel without selecting a client certificate the app shows the no network connectivity error message.
GPC-13106	If the end user sets a preferred gateway in the GlobalProtect app and the administrator subsequently disables the manual gateway option in the portal configuration, the app will still display the option to set a gateway as preferred after the end user refreshes the connection even though manual gateway selection is no longer an available option.