---
type: Known
product: GlobalProtect
version: 6.3.3-h8
---

## GPC-25624

When configuring multiple ports in a comma-separated value (CSV) format for split-tunnel domain exclusions on the firewall (e.g., `domain.com:80,443`), only the first port in the list is honored for exclusion on Windows devices. Subsequent ports configured in the exclusion list are not excluded, leading to unintended routing or policy enforcement for traffic on those ports.

## GPC-25576

When GlobalProtect is configured in Proxy-only or Tunnel + Proxy mode, disconnecting the agent may fail to clear the System Proxy PAC (Proxy Auto-Configuration) settings if the System Preferences (or System Settings) window is open at the time of disconnection. This results in the system attempting to use an invalid or unreachable PAC file while GlobalProtect Proxy is disabled, leading to a loss of internet connectivity.

**Workaround:** Remove the stale configuration entries and restart the system by following the steps below:

1. Ensure the System Preferences and Settings applications are closed.
2. Delete the PAC file entries from the following system files (requires root privileges):
  - /Library/Preferences/SystemConfiguration/preferences.plist
  - /Library/Preferences/SystemConfiguration/preferences.plist.old
3. Restart your system.
