GlobalProtect
Changes to Default Behavior
Table of Contents
Expand All
|
Collapse All
GlobalProtect Docs
-
- 10.1 & Later
- 9.1 (EoL)
-
- 6.3
- 6.2
- 6.1
- 6.0
- 5.1
-
- 6.1
- 6.0
- 5.1
-
- 6.3
- 6.2
- 6.1
- 6.0
- 5.1
Changes to Default Behavior
Changes to default behavior in GlobalProtect app 6.3.
Changes to Default Behavior in GlobalProtect App 6.3.3-h3 (6.3.3-c711)
Starting with GlobalProtect App 6.3.3-h3 (6.3.3-c711), the capability to
automatically detect the proxy for the portal connection and reuse it for subsequent
connections is supported on macOS devices in addition to Windows devices.
Changes to Default Behavior in GlobalProtect App 6.3.2
There are no changes in default behavior in GlobalProtect app version 6.3.2
Changes to Default Behavior in GlobalProtect App 6.3.1
The following topics describe changes to default behavior in GlobalProtect app
6.3.1:
- Starting from GlobalProtect 6.3.1, if you set the Enable Intelligent Internal
Host Detection parameter to yes, GlobalProtect is unable to discover the
external network. This triggers the network discovery retry mechanism and
GlobalProtect retries network discovery in 5, 10, 20, and then 30 second
intervals until internal host detection is resolved to an internal gateway (for
example, Cisco AnyConnect). If the parameter is set as no (the default value), the GlobalProtect app first connects to the internal gateway followed by the external gateway upon connection failure.
- Starting from GlobalProtect version 6.3.1, when you configure Tunnel and Proxy mode for the
GlobalProtect app along with Always-on mode as the connect method and you want
to disconnect the Tunnel and Proxy mode, you must perform
the following steps:
- Disconnect the GlobalProtect app to disconnect the tunnel (VPN) connection. When you disconnect the app, the tunnel (VPN) connection gets disconnected and the app will still be connected through the proxy mode.
- Disable the GlobalProtect app to disconnect both the tunnel and proxy mode. When you disable the app, both the tunnel and proxy mode will be disconnected and the app will not be connected anymore.
Changes to Default Behavior in GlobalProtect App 6.3
The following topics describe changes to default behavior in GlobalProtect app
6.3.0:
- (Windows Only) Starting with GlobalProtect app 6.3, the maximum value for User Switch Tunnel Rename Timeout app setting of the GlobalProtect portal configuration is increased from 600 sec to 7200 secs. With this enhancement, you can configure the app to stay connected for a longer period (the range is 0-7200 seconds, the default value is 0) when end users switch the RDP connections. End users are prompted to reenter their credentials and authenticate to the app when they switch the RDP connections. GlobalProtect app will get disconnected if they fail to reenter the credentials before the expiry of the set User Switch Tunnel Rename Timeout.Previously, the time range that you can configure for User Switch Tunnel Rename Timeout in the app settings was 0-600 secs.
- Starting with GlobalProtect app 6.3, the Connect with SSL Only option has been renamed. See the table below information about the changes.
GlobalProtect Release Version Available Options GlobalProtect version earlier than 6.3 Field name: Connect with SSL Only- Yes
- No
- User can ChangeThis is the default value.
GlobalProtect version 6.3 and later Field name: Advanced Control for Tunnel Mode Behavior- No
- Connect with SSL Only
- Connect with SSL Only - User can
Change
This is the default value.
- IPSec Only
If you are using the existing Connect with SSL Only feature, the same options will be available for you with no behavior change. - Starting with Content Release version 8845-8731, the Autonomous DEM endpoint agent for Prisma Access parameter on the App tab of the GlobalProtect portal in Panorama Managed Prisma Access been renamed. The parameter name and available options depend on the GlobalProtect release version in your environment.
GlobalProtect Release Version Configuration Name Configuration Options GlobalProtect 6.3 and later Access Experience (ADEM, App Acceleration, End user coaching) for GP 6.3 and above (Windows & MAC only) - Install the Agent
- Uninstall the Agent
- No action
This is the default value.
GlobalProtect 6.2 and earlier Autonomous DEM endpoint agent for Prisma Access for GP version 6.2 and below - Install and user cannot enable/disable agent from GlobalProtect
- Install and user can enable/disable agent from GlobalProtect
- Do not install
This is the default value.
There is no change if the Content Release version in your environment is earlier than 8845-8731. - The GlobalProtect app now displays the following message when there are network connectivity issues in the user environment:The connection from this device to GlobalProtect Gateway has been interrupted for the keep-alive timeout duration. Please check your network connectivity and re-connect.
- The maximum value for User Switch Tunnel Rename Timeout
has been increased from 600 seconds to 7200 seconds. To set the value for this
parameter, follow the navigation path as follows:
- Select NetworkGlobalProtectPortals.
- Select a portal.
- On the Agent tab, select the agent configuration that you want to modify.
- Select the App tab.
- In the App Configurations area, specify the desired value forUser Switch Tunnel Rename Timeout.