| 
                             Fixed an issue where, when using the GlobalProtect app with an
                                embedded browser, interrupting or canceling the SAML authentication
                                prompt terminated the pre-logon tunnel, potentially allowing full
                                internet access even when enforcer was enabled for the user-logon
                                profile. With default browser, the pre-logon tunnel remained active
                                when the SAML authentication prompt was interrupted. 
                         |