---
type: Addressed
product: GlobalProtect
version: 6.3.1
---

## GPC-21022

Fixed an issue where the GlobalProtect re-authentication prompt appeared in the background instead of the foreground after deploying Okta FastPass.

## GPC-20895

Fixed an issue where a macOS GlobalProtect app user was able to modify or add a new portal even though the portal agent configuration specified Allow User to Change Portal Address = NO and Allow user to Sign Out from GlobalProtect App = No .

## GPC-20864

Fixed an issue where the GlobalProtect embedded browser login window did not stay pinned to the front of all open windows on Windows and MAC computers.

## GPC-20839

Fixed an issue where a macOS user was unable to connect to the GlobalProtect app.

## GPC-20722

Fixed an issue in the GlobalProtect macOS client where the UI incorrectly displayed a "Not Connected" status and a "Connect" button while the user was in the process of connecting to a new gateway.

## GPC-20645

Fixed an issue where the GlobalProtect macOS app was stuck in connecting stage when the macOS computer woke from sleep and the user had to restart the computer.

## GPC-20601

Fixed an issue where users unable to connect to GlobalProtect after upgrading from version 6.2.2 to 6.2.3 via JAMF.

## GPC-20595

Fixed an issue where GlobalProtect users were unable to connect after upgrading to 6.2.3-270 and received a Y our internet access is blocked error during SAML authentication using the embedded browser.

## GPC-20527

Fixed an issue where the Conditional Connect method configured for the GlobalProtect app did not work as expected when the user shifted from external network (home) to an internal network (office). Users had to reboot the system to resolve this issue.

## GPC-20463

Fixed an issue where the GlobalProtect status panel is not disabled at startup when the Display Status Panel at Startup parameter is set to no.

## GPC-20442

Fixed an issue on appliances running PanOS 10.1.11-h1 and GlobalProtect 6.0.10-811 where the tunnel status failed to update to connected immediately after establishment. This problem was specific to IPv4-only clients connecting to dual-stack (IPv4 + IPv6) GlobalProtect gateways or portals.

## GPC-20427

Fixed an issue where the GlobalProtect client on Windows 11 devices displayed an error message "The parameter is incorrect" when attempting to connect to a firewall running PAN-OS 10.1.13 with SAML authentication enabled.

## GPC-20374

Fixed an issue where users were unable to connect to GlobalProtect if they accidentally clicked decline on the Terms of Service page.

## GPC-20157

Fixed an issue where the gateway location was not correctlydisplayed in the Connections panel.

## GPC-20143

Fixed an issue where the user was redirected to the Authentication page twice on the default browser for both portal and gateway authentication when SAML was configured.

## GPC-20114

Fixed an issue where, when the GlobalProtect app was installed on devices running macOS, the certificate information was incorrect during the portal login phase causing authentication failure.

## GPC-20112

Fixed an issue where the GlobalProtect HIP check incorrectly detected Real time protection status for Kaspersky Endpoint Security, which caused the device to fail the HIP check.

## GPC-20091

Fixed an issue where pre-logon failed when the computer was rebooted, when the machine store had an expired and active certificate.

## GPC-20080

Fixed an issue where the GlobalProtect logs displayed different event messages for Windows and macOS devices when the Allow User to Disable GlobalProtect App was set to Allow with Passcode for the GlobalProtect app.

## GPC-20060

Fixed an issue where it was possible for the GlobalProtect enforcer to be disabled when there was a network change during portal authentication.

## GPC-20040

Fixed an issue where GlobalProtect did not re-check for internal gateways when using cached portal configuration and an external network was previously detected.

## GPC-19991

Fixed an issue where client certificate authentication between embedded browser and IdP (SAML) fails.

## GPC-19966

Fixed an issue where the embedded browser was unable to load the Microsoft IdP login page for the users to authenticate to the GlobalProtect app.

## GPC-19901

Fixed an issue where, when the GlobalProtect app was installed on devices running macOS, the app got disconnected and reconnected intermittently.

## GPC-19889

Fixed an issue where, when the GlobalProtect app was installed on Windows machine and Connect Before Logon (CBL) was configured for the app, the app did not start properly when the user logged on to the device.

## GPC-19840

Fixed an issue where Mac computers did not display all gateways in the Search Gateway tab.

## GPC-19833

Fixed an issue where, when the GlobalProtect app was installed on Windows devices, the Smart card (Yubikey) authentication did not work when the device woke up from sleep mode.

## GPC-19753

Fixed an issue where the GlobalProtect icon could not be selected using the keyboard.

## GPC-19751

Fixed an issue where the programmatic and visual label for the GlobalProtect form field was not announced.

## GPC-19686

Fixed an issue where translation errors were observed in the GlobalProtect app for French localization.

## GPC-19659

Fixed an issue where macOS users were connected to the GlobalProtect app before they agreed to their company’s terms of service.

## GPC-19513

Fixed an issue where the GlobalProtect app was trying to use the old portal's authorization cookie to login instead of the newly migrated portal. This happened when the user changed from secondary portal to primary portal or vice versa without signing out.

## GPC-19475

Fixed an issue where users got connection errors in an embedded browser after the computer woke up from sleep or when the user switched gateways.

## GPC-19433

Fixed an issue where a small white blank page randomly popped up on the device screen distracting the users. This issue occurred while the device was connected to GlobalProtect app.

## GPC-19373

Fixed an issue where the HIP remediation pop up is displayed even when the user is disconnected.

## GPC-18991

Fixed an issue where the proxy auto-configuration (PAC) files were not restored as expected after a system reboot or when the user disconnected the GlobalProtect app.

## GPC-18728

Fixed an issue where the ‘I Agree’ option on the GlobalProtect app Welcome page did not work as expected when the user selected the option using a keyboard.

## GPC-18702

Fixed an issue where, when the GlobalProtect app was installed on Windows devices, the “Allow Manually upgrade failed when the user tried to upgrade the GlobalProtect app version from 6.0.5 to 6.0.7.

## GPC-18647

Fixed an issue where the user reported an issue using the Report an Issue option on the GlobalProtect app and the issue was not reported as expected.

## GPC-17820

Fixed an issue where Firefox was not supported for proxied traffic in Tunnel and Proxy mode or proxy mode.

## GPC-17727

Fixed an issue where when the GlobalProtect app was connected in Tunnel and Proxy mode or proxy mode, SSH traffic could not be sent over the proxy.

## GPC-16975

Fixed an issue where, when the GlobalProtect app was installed on devices running macOS, the screen reader did not announce the name of the GlobalProtect gateway when the gateway was marked with the star symbol.

## GPC-15750

Fixed an issue where a hyperlink in a HIP notification opened in the GPO-disabled Internet Explorer 11 browser instead of the default browser.
