When the GlobalProtect app is installed on Windows, a Microsoft Defender SmartScreen warning is displayed:.

Workaround:Click More Info and then click Run to proceed with the installation.

Users running GlobalProtect client with Enforcer enabled may see an "Internet Blocked message" when performing SAML authentication for the nth time (n>1) via embedded web browser. This happens when Webview2 or Edge browser is updated between previous successful authentication and the current unsuccessful authentication attempt..

Workaround:Disable webview2 auto update via the group policy. If you still see the error message, restart the device.

GlobalProtect can have intermittent connectivity issues on Prisma Access IP optimization enabled tenants.

Workaround: If your Prisma Access tenant is IP Optimization enabled (available starting in Prisma Access 5.0.1), upgrade to GlobalProtect 6.1.4 and later, 6.2.3 and later, or 6.3 and later.

When the GlobalProtect app is upgraded from version 6.1.4-c1 to 6.2.0-c4 on Linux devices, the GlobalProtect web interface displays the upgraded version only after a system reboot.

When the GlobalProtect app is installed on Linux devices and the app is upgraded or downgraded, the GlobalProtect web interface and the command-line interface display the new version only after a system reboot.

The GlobalProtect tunnel disconnects after 10 minutes on app versions 6.0.8 and 6.2.1, when SAML authentication is used and the GlobalProtect app is running on macOS devices.

In 6.2.1, after a refresh connection, the HIP patch exclusion isn't visible on the GlobalProtect UI. However, the HIP patch exclusion logs are visible on the Pangphip.log file.

Firefox is not supported for proxied traffic in Tunnel and Proxy mode or proxy mode.

After entering CIE SAML authentication credentials to refresh an expired explicit proxy token or cookie when connected in Tunnel and Proxy mode or proxy mode, the GlobalProtect app gets stuck while retrieving the portal configuration.

Workaround: Refresh the GlobalProtect connection or disconnect and reconnect the GlobalProtect app.

When the GlobalProtect app is connected in Tunnel and Proxy mode or proxy mode, SSH traffic cannot be sent over the proxy.

When GlobalProtect is configured in Tunnel and Proxy mode or proxy mode, if the admin-defined PAC file has an HTTP URL, the GlobalProtect app will not download the PAC content.

Workaround: Use GlobalProtect in proxy mode for better compatibility with third-party VPNs.

In Tunnel and Proxy mode, the GlobalProtect agent tunnel on macOS does not coexist well with Cisco Anyconnect VPN due to an IP forwarding table issue.

Workaround: Use GlobalProtect in proxy mode for better compatibility with third-party VPNs.

The GlobalProtect app does not prompt the users to extend the login lifetime user session when the device woke up from sleep or hibernation mode.