The GlobalProtect agents on Windows and macOS experience persistent connection loops because of a misconfiguration in the Unified User-ID setup. This occurs when the agent identifies an internal network but connects to an external gateway that lacks a valid routing path back to that internal network. For this feature to function correctly, it is recommended to have at least one internal gateway reachable from the external gateway to ensure stable connectivity and proper network transitions.