(Windows clients only) Fixed an issue where, after waking from Modern Standby in Always-On Hybrid mode with an expired Explicit Proxy (EP) token, GlobalProtect moved to an "Enabled" (proxy-only) state instead of returning to a "Connected" (tunnel) state following successful SAML re-authentication. This occurred because the portal refresh process incorrectly triggered a tunnel teardown while the VPN was already connected. With this fix, GlobalProtect correctly reconnects and reaches the "Connected" state after Modern Standby wake and re-authentication.

Fixed an issue where GlobalProtect portal registration was prevented during SAML authentication hand-off, which caused agents to remain disconnected despite successful authentication with an identity provider. This occurred because an internal data buffer became corrupted during the authentication token hand-off, which led to the loss of session identity. With this fix, the authentication token is correctly processed, allowing agents to register with the portal.

Fixed an issue where GlobalProtect Host Information Profile (HIP) reports had an invalid XML format. With this fix, HIP reports are generated with the correct XML structure.