You can now configure advanced internal host detection through the portal to add an extra security layer during internal host detection by the GlobalProtect app. Enabling advanced internal host detection stops malicious actors from spoofing the reverse DNS server response during the internal host detection and thereby prevents malicious actors from accessing the enterprise network.

You can now configure and push the URL for your proxy auto-configuration (PAC) files to your endpoints through the GlobalProtect portal. This feature enables you to manage the proxy settings for your endpoints using the GlobalProtect app.

You can now enable and customize end-user notifications about expiry of GlobalProtect app sessions on the gateway. These notifications inform the end users on Windows, macOS and Linux endpoints in advance when their app sessions are about to expire due to inactivity or expiry of the login lifetime and lets them know how much time is left before the app gets disconnected, preventing unexpected and abrupt app logout.

You can now use Jamf Pro, one of the most widely used Apple device management platforms, to deploy the GlobalProtect app to macOS endpoints to support large-scale GlobalProtect app deployments in on-premises and Prisma Access environments. Administrators can also provide a seamless user experience for macOS end users by deploying Jamf configuration profiles that can automatically load system and network extensions, thus preventing the user from having to respond to notifications on the GlobalProtect app.

Administrators can use Jamf Pro to deploy the GlobalProtect mobile app to macOS endpoints and enable system and network extensions on macOS endpoints using Jamf Pro.

GlobalProtect is now supported on endpoints running the following Linux OS versions for Ubuntu: