GlobalProtect
GlobalProtect App 6.2.4 Windows and macOS Addressed Issues
Table of Contents
Expand All
|
Collapse All
GlobalProtect Docs
-
10.1 & Later
- 10.1 & Later
- 9.1 (EoL)
-
- How Does the App Know Which Certificate to Supply?
- Set Up Cloud Identity Engine Authentication
- Configure GlobalProtect to Facilitate Multi-Factor Authentication Notifications
- Enable Delivery of VSAs to a RADIUS Server
- Enable Group Mapping
-
-
- GlobalProtect App Minimum Hardware Requirements
- Download the GlobalProtect App Software Package for Hosting on the Portal
- Host App Updates on the Portal
- Host App Updates on a Web Server
- Test the App Installation
- Download and Install the GlobalProtect Mobile App
- View and Collect GlobalProtect App Logs
-
-
- Deploy App Settings in the Windows Registry
- Deploy App Settings from Msiexec
- Deploy Scripts Using the Windows Registry
- Deploy Scripts Using Msiexec
- Deploy Connect Before Logon Settings in the Windows Registry
- Deploy GlobalProtect Credential Provider Settings in the Windows Registry
- SSO Wrapping for Third-Party Credential Providers on Windows Endpoints
- Enable SSO Wrapping for Third-Party Credentials with the Windows Registry
- Enable SSO Wrapping for Third-Party Credentials with the Windows Installer
- Deploy App Settings to Linux Endpoints
- GlobalProtect Processes to be Whitelisted on EDR Deployments
-
-
- Mobile Device Management Overview
- Set Up the MDM Integration With GlobalProtect
- Qualified MDM Vendors
-
-
- Set Up the Microsoft Intune Environment for Android Endpoints
- Deploy the GlobalProtect App on Android Endpoints Using Microsoft Intune
- Create an App Configuration on Android Endpoints Using Microsoft Intune
- Configure Lockdown Mode for Always On Connect Method on Android Endpoints Using Microsoft Intune
-
- Deploy the GlobalProtect Mobile App Using Microsoft Intune
- Configure an Always On VPN Configuration for iOS Endpoints Using Microsoft Intune
- Configure a User-Initiated Remote Access VPN Configuration for iOS Endpoints Using Microsoft Intune
- Configure a Per-App VPN Configuration for iOS Endpoints Using Microsoft Intune
-
-
-
- Create a Smart Computer Group for GlobalProtect App Deployment
- Create a Single Configuration Profile for the GlobalProtect App for macOS
- Deploy the GlobalProtect Mobile App for macOS Using Jamf Pro
-
- Enable GlobalProtect System Extensions on macOS Endpoints Using Jamf Pro
- Enable GlobalProtect Network Extensions on macOS Big Sur Endpoints Using Jamf Pro
- Add a Configuration Profile for the GlobalProtect Enforcer by Using Jamf Pro 10.26.0
- Verify Configuration Profiles Deployed by Jamf Pro
- Remove System Extensions on macOS Monterey Endpoints Using Jamf Pro
- Non-Removable System Extensions on macOS Sequoia Endpoints Using Jamf Pro
- Uninstall the GlobalProtect Mobile App Using Jamf Pro
-
- Configure HIP-Based Policy Enforcement
- Configure HIP Exceptions for Patch Management
- Collect Application and Process Data From Endpoints
- Redistribute HIP Reports
-
- Identification and Quarantine of Compromised Devices Overview and License Requirements
- View Quarantined Device Information
- Manually Add and Delete Devices From the Quarantine List
- Automatically Quarantine a Device
- Use GlobalProtect and Security Policies to Block Access to Quarantined Devices
- Redistribute Device Quarantine Information from Panorama
- Troubleshoot HIP Issues
-
-
- Enable and Verify FIPS-CC Mode on Windows Endpoints
- Enable and Verify FIPS-CC Mode on macOS Endpoints
- Enable and Verify FIPS-CC Mode Using Workspace ONE on iOS Endpoints
- Enable FIPS Mode on Linux EndPoints with Ubuntu or RHEL
- Enable and Verify FIPS-CC Mode Using Microsoft Intune on Android Endpoints
- FIPS-CC Security Functions
- Resolve FIPS-CC Mode Issues
-
-
- Remote Access VPN (Authentication Profile)
- Remote Access VPN (Certificate Profile)
- Remote Access VPN with Two-Factor Authentication
- GlobalProtect Always On VPN Configuration
- Remote Access VPN with Pre-Logon
- User-Initiated Pre-Logon Connection
- GlobalProtect Multiple Gateway Configuration
- GlobalProtect for Internal HIP Checking and User-Based Access
- Mixed Internal and External Gateway Configuration
- Captive Portal and Enforce GlobalProtect for Network Access
- GlobalProtect on Windows 365 Cloud PC
-
- About GlobalProtect Cipher Selection
- Cipher Exchange Between the GlobalProtect App and Gateway
-
- Reference: GlobalProtect App Cryptographic Functions
-
- Reference: TLS Ciphers Supported by GlobalProtect Apps on macOS Endpoints
- Reference: TLS Ciphers Supported by GlobalProtect Apps on Windows Endpoints
- Reference: TLS Ciphers Supported by GlobalProtect Apps on Android 6.0.1 Endpoints
- Reference: TLS Ciphers Supported by GlobalProtect Apps on iOS 10.2.1 Endpoints
- Reference: TLS Ciphers Supported by GlobalProtect Apps on Chromebooks
- Ciphers Used to Set Up IPsec Tunnels
- SSL APIs
-
- View a Graphical Display of GlobalProtect User Activity in PAN-OS
- View All GlobalProtect Logs on a Dedicated Page in PAN-OS
- Event Descriptions for the GlobalProtect Logs in PAN-OS
- Filter GlobalProtect Logs for Gateway Latency in PAN-OS
- Restrict Access to GlobalProtect Logs in PAN-OS
- Forward GlobalProtect Logs to an External Service in PAN-OS
- Configure Custom Reports for GlobalProtect in PAN-OS
-
6.3
- 6.3
- 6.2
- 6.1
- 6.0
- 5.1
-
- Download and Install the GlobalProtect App for Windows
- Use Connect Before Logon
- Use Single Sign-On for Smart Card Authentication
- Use the GlobalProtect App for Windows
- Report an Issue From the GlobalProtect App for Windows
- Disconnect the GlobalProtect App for Windows
- Uninstall the GlobalProtect App for Windows
- Fix a Microsoft Installer Conflict
-
- Download and Install the GlobalProtect App for macOS
- Use the GlobalProtect App for macOS
- Report an Issue From the GlobalProtect App for macOS
- Disconnect the GlobalProtect App for macOS
- Uninstall the GlobalProtect App for macOS
- Remove the GlobalProtect Enforcer Kernel Extension
- Enable the GlobalProtect App for macOS to Use Client Certificates for Authentication
-
6.1
- 6.1
- 6.0
- 5.1
-
6.2
- 6.3
- 6.2
- 6.1
- 6.0
- 5.1
- Features Introduced
- Changes to Default Behavior
- Associated Software and Content Versions
-
- GlobalProtect App 6.2.8 Windows and macOS Known Issues
- GlobalProtect App 6.2.7 Windows and macOS Known Issues
- GlobalProtect App 6.2.6-c857 Windows and macOS Known Issues
- GlobalProtect App 6.2.1-c31 Linux Known Issues
- GlobalProtect App 6.2.6 Windows and macOS Known Issues
- GlobalProtect App 6.2.5 Windows and macOS Known Issues
- GlobalProtect App 6.2.4 Windows and macOS Known Issues
- GlobalProtect App 6.2.3-c287 Windows and macOS Known Issues
- GlobalProtect App 6.2.3 Windows and macOS Known Issues
- GlobalProtect App 6.2.2 Windows and macOS Known Issues
- GlobalProtect App 6.2.1 Linux Known Issues
- GlobalProtect App 6.2.1 Windows and macOS Known Issues
- GlobalProtect App 6.2.0 Linux Known Issues
-
- GlobalProtect App 6.2.8 Windows and macOS Addressed Issues
- GlobalProtect App 6.2.7 Addressed Issues
- GlobalProtect App 6.2.6-c857 Windows and macOS Addressed Issues
- GlobalProtect App 6.2.1-c31 Linux Addressed Issues
- GlobalProtect App 6.2.6 Windows and macOS Addressed Issues
- GlobalProtect App 6.2.5 Windows and macOS Addressed Issues
- GlobalProtect App 6.2.4 Windows and macOS Addressed Issues
- GlobalProtect App 6.2.3-c287 Addressed Issues
- GlobalProtect App 6.2.3 Windows and macOS Addressed Issues
- GlobalProtect App 6.2.2 Windows and macOS Addressed Issues
- GlobalProtect App 6.2.1 Linux Addressed Issues
- GlobalProtect App 6.2.1 Windows and macOS Addressed Issues
- GlobalProtect App 6.2.0 Linux Addressed Issues
GlobalProtect App 6.2.4 Windows and macOS Addressed Issues
6.2.4 Addressed Issues
The following table lists the issues that are addressed in GlobalProtect app 6.2.4
Windows and macOS.
Issue ID | Description |
---|---|
GPC-20741 | Fixed an issue where the GlobalProtect app intermittently disconnected from the gateway when the user was using the embedded browser for SAML authentication. |
GPC-20640 | Fixed an issue where the GP App graphical interface on macOS does not close on pressing the ESC key. |
GPC-20585 | Fixed an issue where the GlobalProtect app could not connect to the GlobalProtect portal when configured with certificate authentication and SAML authentication using an embedded browser |
GPC-20571 | Fixed an issue where the Report an Issue option was not visible in the GlobalProtect app version 6.2.3. |
GPC-20542 | Fixed an issue where, when the GlobalProtect app was installed on Windows devices, the GlobalProtect logs did not display the username correctly. |
GPC-20537 | Fixed an issue where the Login page got redirected twice and opened two separate tabs for GlobalProtect portal and gateway, when the user tried to connect the GlobalProtect app using the SAML authentication method. |
GPC-20531 | Fixed an issue where, when the user was using Remote Desktop with GlobalProtect, the RDP sessions got disconnected because the GlobalProtect on RDP station got disconnected with a grace period end message. |
GPC-20527 | Fixed an issue where the Conditional Connect method configured for the GlobalProtect app did not work as expected when the user shifted from external network (home) to an internal network (office). Users had to reboot the system to resolve this issue. |
GPC-20514 | Fixed an issue where the remote users using GlobalProtect with Connect Before Logon (CBL) were unable to reset their password when using the app with an embedded browser. |
GPC-20455 | Fixed an issue where the GlobalProtect app intermittently got stuck on the 'Connecting' status when the computer resumed from sleep and a new authentication was needed or authentication cookies had expired. |
GPC-20445 | Fixed an issue where the GlobalProtect app got stuck in Connecting state after upgrading from PAN-OS 10.1.11-h5 version to PAN-OS 10.1.13 |
GPC-20444 | Fixed an issue where, when the GlobalProtect app was used with the SAML authentication method, the app displayed two pop-up messages; one with a successful authentication message and the other with an authentication failure message. |
GPC-20426 | Fixed an issue where a new HIP report was not generated when the user disabled AV on an end-user device. |
GPC-20381 | Fixed an issue where the Windows defender Real Time Protection state and agent version is incorrectly identified in GlobalProtect app version 6.0.8 and 6.2.3. |
GPC-20378 | Fixed an issue where the GlobalProtect app was used with the SAML authentication method with the embedded browser, the app got stuck while redirecting to the SAML authentication page. |
GPC-20374 | Fixed an issue where users were unable to connect to GlobalProtect if they accidentally clicked decline on the Terms of Service page. |
GPC-20370 | Fixed an issue where the Real Time Protection state from SentinelOne was displayed as true even when the app was disabled. |
GPC-20366 | Fixed an issue where, when the GlobalProtect app was installed on Windows devices and the users tried to authenticate to the app, the screen displayed both authentication success and failed message even when the authentication was successful. |
GPC-20320 | GlobalProtect unable to authenticate with SAML IdP using embedded browser (webview2) when "Enforce GlobalProtect for Network Access" is enabled |
GPC-20279 | Fixed an issue where users were presented with suggested user names during SAML authentication after upgrading to GlobalProtect 6.2.3. |
GPC-20263 | Fixed an issue where the correct label was not associated with the GlobalProtect icon so voice over was unable to read the icon name. |
GPC-20262 | Fixed an issue where users were unable to select the GlobalProtect icon from the status bar on macOS. |
GPC-20243 | Fixed an issue where, when the GlobalProtect app was used with an embedded browser, the browser displayed ‘can't reach page’ due to a Windows filter driver issue. |
GPC-20242 | Fixed an issue where the GlobalProtect app displayed gibberish text on the app. |
GPC-20241 | Resolved an issue where the GlobalProtect app did not detect HIP information for HP Wolf Security software. |
GPC-20178 | Resolved an issue where the Certificate Revocation List was sent to a URI that was not an exact match with the URI in the certificate. |
GPC-20163 | Fixed an issue where the GlobalProtect app was unable to connect to the gateway via IPv6. |
GPC-20162 | Fixed an issue where the GlobalProtect enforcer blocked some DHCPv6 packets on Windows computers. |
GPC-20157 | Fixed an issue where the gateway location was not correctly displayed in the Connections panel. |
GPC-20143 | Fixed an issue where the user was redirected to the Authentication page twice on the default browser for both portal and gateway authentication when SAML was configured. |
GPC-20091 | Fixed an issue where pre-logon failed when the computer was rebooted, when the machine store had an expired and active certificate. |
GPC-20080 | Fixed an issue where the GlobalProtect logs displayed different event messages for Windows and macOS devices when the Allow User to Disable GlobalProtect App was set to Allow with Passcode for the GlobalProtect app. |
GPC-20060 | Fixed an issue where it was possible for the GlobalProtect enforcer to be disabled when there was a network change during portal authentication. |
GPC-20040 | Resolved an issue where GlobalProtect did not re-check for internal gateways when using cached portal configuration and an external network was previously detected. |
GPC-20028 | Fixed an issue where macOS users, despite having 'Allow User to Change Portal Address' set to No, were able to choose a different portal from the existing list. |
GPC-20005 | Fixed an issue where, when the GlobalProtect app was installed on Windows devices, users were able to select the manual gateway and connect to the app even when the regional or global fall back gateway was not configured. |
GPC-20004 | Fixed an issue where both certificates with and without the specified OID were incorrectly being selected as potential machine certificates. |
GPC-20003 | Fixed an issue where GlobalProtect users with certificates were unable to connect a gateway on version 6.0.9. |
GPC-19991 | Fixed an issue where client certificate authentication between embedded browser and IdP (SAML) failed. |
GPC-19972 | Fixed an issue where users were unable to connect to Prisma Access after a break and had to reboot their computer. |
GPC-19961 | Fixed an issue where the hamburger menu on the GlobalProtect app was disabled and end users were unable to click on the Report an Issue option when the GlobalProtect app was disabled in Alway-On mode. |
GPC-19930 | Fixed an issue where the HIP check did not detect the BitLocker disk encryption correctly during windows update, causing the device to fail the HIP check. |
GPC-19918 | Fixed an issue where, when the GlobalProtect app was installed on devices running macOS, the HIP check did not detect CrowdStrike antivirus software correctly, causing the device to fail the HIP check. |
GPC-19889 | Fixed an issue where, when the GlobalProtect app was installed on Windows machine and Connect Before Logon (CBL) was configured for the app, the app did not start properly when the user logged on to the device. |
GPC-19878 | Fixed an issue where a typo in the IP address exclusion list was not marked as invalid by the GlobalProtect enforcer, resulting in all IP addresses in the range being allowed. |
GPC-19833 | Fixed an issue where, when the GlobalProtect app was installed on Windows devices, the Smart card (Yubikey) authentication did not work when the device woke up from sleep mode. |
GPC-19829 | Fixed an issue where the manual gateway login failed when users tried to login using their user name and password. |
GPC-19751 | Fixed an issue where the programmatic and visual label for the GlobalProtect form field was not announced. |
GPC-19740 | Fixed an issue where, when the GlobalProtect app was installed on VDI devices running Windows OS, the GlobalProtect app got disconnected without displaying any message. |
GPC-19696 | Fixed an issue where, when the GlobalProtect app was installed on endpoints running macOS and the split tunnel was configured based on the application for Zoom, users were unable to access any sites when the split tunnel was disabled for Zoom and moved to full tunnel. |
GPC-19660 | Fixed an issue where the "Check for Updates" button on GlobalProtect app version 6.2.2 did not work when the activated GlobalProtect version on the firewall was earlier than 6.2.2. |
GPC-19652 | Fixed an issue where, when the GlobalProtect app was installed on devices running macOS, users were unable to access the applications and websites when the app got disconnected and reconnected while switching the medium from wired to wireless and vice versa. |
GPC-19629 | Fixed an issue where, when the GlobalProtect app was installed on devices running macOS, the split tunnel feature did not work as expected when Jamf was used to push the configuration policy rules. |
GPC-19610 | Fixed an issue where, when the GlobalProtect app was installed on devices running macOS, end users were not prompted to enter a password and the app got stuck in Restoring VPN connection state until the cookie was deleted. |
GPC-19603 | Fixed an issue where the GlobalProtect app displayed a generic SAML login page and not the actual login page for authentication and the connection was not established when cached portal configuration was used. |
GPC-19436 | Fixed an issue where the screen reader could not identify the image in the GlobalProtect app tray on the devices running macOS causing accessibility issues. |
GPC-19532 | Fixed an issue where, after upgrading GlobalProtect via the portal prompt, all traffic except DNS was being dropped because the new GlobalProtect extensions were not being loaded. |
GPC-19373 | Fixed an issue where the HIP remediation pop up is displayed even when the user is disconnected. |
GPC-19373 | Fixed an issue where the HIP remediation pop up is displayed even when the user is disconnected. |
GPC-19336 | Fixed an issue where the ADEM portal did not display user information such as User-ID when the ADEM portal was changed from on-premises to Prisma Access. |
GPC-19279 | Fixed an issue where the GlobalProtect client was not displayed during the upgrade from version 6.0.5-35 to 6.0.8-601. |
GPC-19237 | Fixed an issue where the GlobalProtect app did not disconnect when the user used the Disable option on the hamburger menu. The tunnel was still up and connected even when the user disconnected the GlobalProtect app. |
GPC-19138 | Resolved an issue where the exclude for google application was not working for users. |
GPC-19098 | Resolved an issue where pre-logon setup was not working when GlobalProtect 6.2.1 was deployed via Microsoft Intune. |
GPC-19043 | Fixed an issue where the GlobalProtect app did not add all routes configured in the access route to the route table. |
GPC-19011 | Fixed an issue where the GlobalProtect app on a Windows computer was unable to connect to an IPv4 gateway behind a NAT64 device. |
GPC-18933 | Fixed an issue where the GlobalProtect HIP check incorrectly detected Real Time Protection for Cortex XDR, which caused the device to fail the HIP check. |
GPC-18778 | Resolved an issue where devices supporting Modern Standby (Microsoft Learn) crashed when they entered sleep mode while the VPN plugin had an active connection and was sending data over its tunnel. |
GPC-18728 | Fixed an issue where the ‘I Agree’ option on the GlobalProtect app Welcome page did not work as expected when the user selected the option using a keyboard. |
GPC-18702 | Fixed an issue where, when the GlobalProtect app was installed on Windows devices, the “Allow Manually upgrade failed when the user tried to upgrade the GlobalProtect app version from 6.0.5 to 6.0.7 |
GPC-18625 | Fixed an issue where the Zoom app intermittently stopped connecting on macOS and displayed an error message. |
GPC-18385 | Fixed an issue where, when the GlobalProtect app got reconnected after the user changed the network access from Wi-Fi (IPv4 only) to Ethernet connection (Dual Stack IPv4 + IPv6), the IPv6 ip-user mapping was missing on the firewall and only IPv6 ip-user mapping was available. The user had to refresh the connection to resolve this issue. |
GPC-15750 | Fixed an issue where a hyperlink in a HIP notification opened in the GPO-disabled Internet Explorer 11 browser instead of the default browser. |
GPC-14714 | Fixed an error where the screen reader does the announce the status when the radio button is selected for Network configuration, Routing table, Sockets, and "Logs". |