---
type: Addressed
product: GlobalProtect
version: 6.3.3-h2
---

## GPC-23654

Fixed an issue where the GlobalProtect client displays the error message "The virtual adapter was not set up correctly due to a delay" on Windows endpoints, preventing VPN connectivity until the system is restarted.

## GPC-23604

Fixed an issue where GlobalProtect users were not automatically prompted for authentication on public Wi-Fi networks with a captive portal

## GPC-23558

Fixed an issue where GlobalProtect clients using SAML with Ping Federate did not save the SAML token upon reboot or restart of the pangps service, requiring users to re-authenticate even when the token was not expired. This issue affected GlobalProtect client version 6.3.3 when SAML authentication was configured in Prisma Access and not in Cloud Identity Engine.

## GPC-23551

Fixed an issue where the virtual network adapter retained the static IP address assigned by GlobalProtect even after the GlobalProtect client disconnected. This caused DNS registration conflicts, making workstations unreachable by hostname even after a reboot.

## GPC-23520

Fixed an issue where new GlobalProtect users were unable to connect to the GlobalProtect app. The app got stuck in 'Connecting" stage and stopped working when redirected to the embedded browser.

## GPC-23519

Fixed an issue where GlobalProtect HIP reports on MacBooks intermittently failed with an "Invalid client IP" error, preventing users from accessing resources over the GP tunnel. This issue occurred after a system network change when GP attempted to send the HIP report to an external gateway while the tunnel was disconnected. This issue affected MacBooks running GP version 6.2.5.

## GPC-23496

Fixed an issue where the GlobalProtect app's Connect button did not work as expected preventing users from connecting or changing gateways.

## GPC-23440

Fixed an issue where Okta FastPass authentication did not work with GlobalProtect 6.3.3 on macOS 15.5 Sequoia, where the Okta Verify app did not open for the additional authentication prompt.

## GPC-23432

Fixed an issue where the GlobalProtect app version 6.3.3 intermittently got stuck on the "finding best gateway" status

## GPC-23404

Fixed an issue where the Host Information Profile (HIP) check was unable to accurately identify key details from third-party security products.

## GPC-23294

Fixed an issue where GlobalProtect app intermittently disconnected on macOS endpoints even with a stable network connection. This was due to a timeout that was too short for the route system command.

## GPC-23263

Fixed an issue where after upgrading to GlobalProtect app version 6.3.3, the app did not save the username in the embedded browser when "save username" was enabled.

## GPC-23218

Fixed an issue where, when using the GlobalProtect app with an embedded browser, interrupting or canceling the SAML authentication prompt terminated the pre-logon tunnel, potentially allowing full internet access even when enforcer was enabled for the user-logon profile. With default browser, the pre-logon tunnel remained active when the SAML authentication prompt was interrupted.

## GPC-23115

Fixed an issue where the hardware token authentication option was intermittently unavailable while using the embedded GlobalProtect browser on Windows machines.

## GPC-23088

Fixed an issue where portal login failed due to embedded browser not popping up and GlobalProtect remains in connecting state

## GPC-23044

Fixed an issue where, when a machine was in Modern standby, the GlobalProtect app repeatedly attempted to connect to gateways, even when authentication failed due to SAML timeout. This resulted in GlobalProtect connecting to non-optimal gateway

## GPC-22989

Fixed an issue where the GlobalProtect app intermittently stopped sending HIP reports while connected to the gateway.

## GPC-22979

Fixed an issue where, after upgrading to GlobalProtect app version 6.2.6, the PanGPA application got stuck in 'Connecting' state and then got terminated unexpectedly.

## GPC-22887

Fixed an issue where GlobalProtect users experienced frequent disconnections across various locations.

## GPC-22870

Fixed an issue where, when using domain-based split tunneling on GlobalProtect clients, expired DNS TTL entries were not removed from the Windows Filtering Platform filter driver. This resulted in incorrect packet routing where traffic for domains not in the exclude list, but resolving to the same IP address as excluded domains, was routed via the physical interface instead of the tunnel.

## GPC-22804

Fixed an issue where the GlobalProtect app remained in a connected state after a network disconnection. As a result, when the network connection was restored, the GlobalProtect app did not recover, and traffic failed to pass until a refresh connection was performed.

## GPC-22764

Fixed an issue where wa_3rd_party_host_xx.exe attempted to connect to Microsoft’s update servers for information and the patch information was not sent in the HIP report. This occured even though HIP Exceptions for patch management were configured to exclude Windows updates agent.

## GPC-22541

Fixed an issue on Windows 11 where the GlobalProtect app (PanGPA) would stop working when the device was locked. The crash occurred when an expired authentication triggered a persistent smartcard login dialog during sleep, leading to excessive memory swapping and a crypt32.dll failure.

## GPC-22365

Fixed an issue where users experienced intermittent issues browsing webpages while connected to the GlobalProtect app.

## GPC-22033

Fixed an issue where GlobalProtect client version 6.3.1 experienced DNS resolution failures for IPv4 addresses, specifically when applications using the io.netty library attempted DNS lookups.

## GPC-22029

Fixed an issue where Apple software downloads took longer to complete when using GlobalProtect with split tunneling enabled.

## GPC-21982

Fixed an issue in which IPv6 traffic bypassed the valid route in the rerouting table and instead passed through the physical adapter when the GlobalProtect app was installed on Windows devices.

## GPC-21961

Fixed an issue where, after upgrading to GlobalProtect version 6.2.5, the app triggered authentication and opened multiple browser tabs when the computer woke from sleep.
