Fixed an issue where the GlobalProtect client displays the error message "The virtual adapter was not set up correctly due to a delay" on Windows endpoints, preventing VPN connectivity until the system is restarted.

Fixed an issue where GlobalProtect users were not automatically prompted for authentication on public Wi-Fi networks with a captive portal

Fixed an issue where GlobalProtect clients using SAML with Ping Federate did not save the SAML token upon reboot or restart of the pangps service, requiring users to re-authenticate even when the token was not expired. This issue affected GlobalProtect client version 6.3.3 when SAML authentication was configured in Prisma Access and not in Cloud Identity Engine.

Fixed an issue where the virtual network adapter retained the static IP address assigned by GlobalProtect even after the GlobalProtect client disconnected. This caused DNS registration conflicts, making workstations unreachable by hostname even after a reboot.

Fixed an issue where new GlobalProtect users were unable to connect to the GlobalProtect app. The app got stuck in 'Connecting" stage and stopped working when redirected to the embedded browser.

Fixed an issue where GlobalProtect HIP reports on MacBooks intermittently failed with an "Invalid client IP" error, preventing users from accessing resources over the GP tunnel. This issue occurred after a system network change when GP attempted to send the HIP report to an external gateway while the tunnel was disconnected. This issue affected MacBooks running GP version 6.2.5.

Fixed an issue where the GlobalProtect app's Connect button did not work as expected preventing users from connecting or changing gateways.

Fixed an issue where Okta FastPass authentication did not work with GlobalProtect 6.3.3 on macOS 15.5 Sequoia, where the Okta Verify app did not open for the additional authentication prompt.

Fixed an issue where the GlobalProtect app version 6.3.3 intermittently got stuck on the "finding best gateway" status

Fixed an issue where the Host Information Profile (HIP) check was unable to accurately identify key details from third-party security products.

Fixed an issue where GlobalProtect app intermittently disconnected on macOS endpoints even with a stable network connection. This was due to a timeout that was too short for the route system command.

Fixed an issue where after upgrading to GlobalProtect app version 6.3.3, the app did not save the username in the embedded browser when "save username" was enabled.

Fixed an issue where, when using the GlobalProtect app with an embedded browser, interrupting or canceling the SAML authentication prompt terminated the pre-logon tunnel, potentially allowing full internet access even when enforcer was enabled for the user-logon profile. With default browser, the pre-logon tunnel remained active when the SAML authentication prompt was interrupted.

Fixed an issue where the hardware token authentication option was intermittently unavailable while using the embedded GlobalProtect browser on Windows machines.

Fixed an issue where portal login failed due to embedded browser not popping up and GlobalProtect remains in connecting state

Fixed an issue where, when a machine was in Modern standby, the GlobalProtect app repeatedly attempted to connect to gateways, even when authentication failed due to SAML timeout. This resulted in GlobalProtect connecting to non-optimal gateway

Fixed an issue where the GlobalProtect app intermittently stopped sending HIP reports while connected to the gateway.

Fixed an issue where, after upgrading to GlobalProtect app version 6.2.6, the PanGPA application got stuck in 'Connecting' state and then got terminated unexpectedly.

Fixed an issue where GlobalProtect users experienced frequent disconnections across various locations.

Fixed an issue where, when using domain-based split tunneling on GlobalProtect clients, expired DNS TTL entries were not removed from the Windows Filtering Platform filter driver. This resulted in incorrect packet routing where traffic for domains not in the exclude list, but resolving to the same IP address as excluded domains, was routed via the physical interface instead of the tunnel.

Fixed an issue where wa_3rd_party_host_xx.exe attempted to connect to Microsoft’s update servers for information and the patch information was not sent in the HIP report. This occured even though HIP Exceptions for patch management were configured to exclude Windows updates agent.

Fixed an issue on Windows 11 where the GlobalProtect app (PanGPA) would stop working when the device was locked. The crash occurred when an expired authentication triggered a persistent smartcard login dialog during sleep, leading to excessive memory swapping and a crypt32.dll failure.

Fixed an issue where users experienced intermittent issues browsing webpages while connected to the GlobalProtect app.

Fixed an issue where GlobalProtect client version 6.3.1 experienced DNS resolution failures for IPv4 addresses, specifically when applications using the io.netty library attempted DNS lookups.

Fixed an issue where Apple software downloads took longer to complete when using GlobalProtect with split tunneling enabled.

Fixed an issue in which IPv6 traffic bypassed the valid route in the rerouting table and instead passed through the physical adapter when the GlobalProtect app was installed on Windows devices.

Fixed an issue where, after upgrading to GlobalProtect version 6.2.5, the app triggered authentication and opened multiple browser tabs when the computer woke from sleep.