Split-tunnel exclusion does not support TURN or QUIC protocols (UDP 443). Due to the protocol behavior of TURN, traffic destined for excluded subnets over UDP 443 is still routed through the GlobalProtect tunnel even when matching exclusion routes are configured. This traffic appears in firewall traffic logs as originating from the tunnel interface, confirming that the GlobalProtect agent encapsulates it rather than routing it directly to the destination.

When the GlobalProtect app is installed on Windows, a Microsoft Defender SmartScreen warning is displayed:.

Workaround:Click More Info and then click Run to proceed with the installation.

When the GlobalProtect app is installed on devices running on macOS and the end user enable or disable the system extensions, the GlobalProtect Enforcer feature is not working as expected.

When the GlobalProtect app is upgraded from version 6.1.4-c1 to 6.2.0-c4 on Linux devices, the GlobalProtect web interface displays the upgraded version only after a system reboot.

When the GlobalProtect app is installed on Linux devices and the app is upgraded or downgraded, the GlobalProtect web interface and the command-line interface display the new version only after a system reboot.

Firefox is not supported for proxied traffic in Tunnel and Proxy mode or proxy mode.

When the GlobalProtect app is connected in Tunnel and Proxy mode or proxy mode, SSH traffic cannot be sent over the proxy.

When GlobalProtect is configured in Tunnel and Proxy mode or proxy mode, if the admin-defined PAC file has an HTTP URL, the GlobalProtect app will not download the PAC content.

Workaround: Use GlobalProtect in proxy mode for better compatibility with third-party VPNs.

In Tunnel and Proxy mode, the GlobalProtect agent tunnel on macOS does not coexist well with Cisco Anyconnect VPN due to an IP forwarding table issue.

Workaround: Use GlobalProtect in proxy mode for better compatibility with third-party VPNs.

The GlobalProtect app does not prompt the users to extend the login lifetime user session when the device woke up from sleep or hibernation mode.