aaron.axvig/firewallissues
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Add GP-6.3.3 backcatalog reference files

Browse Source
This commit is contained in:
aaron.axvig
2026-05-21 08:17:21 -05:00
parent 5606966180
commit 8489eab658
9 changed files with 2991 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files
reference/GlobalProtect/addressed/6.3.3-h2.html
+396
View File
@@ -0,0 +1,396 @@
<table class="table colsep rowsep table-striped">
<!--cq:include script="../../common/tablestack.jsp" /-->
<colgroup>
<col style="width: 25%" />
<col style="width: 75%" />
</colgroup>
<thead class="thead">
<tr class="row">
<th class="entry">
<div class="p">Issue ID</div>
</th>
<th class="entry">
<div class="p">Description</div>
</th>
</tr>
</thead>
<tbody class="tbody">
<tr class="row rowsep">
<td class="entry">
<div class="p"><b class="ph b">GPC-23654</b></div>
</td>
<td class="entry relcol">
<div class="p">
Fixed an issue where the GlobalProtect client displays the error
message "The virtual adapter was not set up correctly due to a delay"
on Windows endpoints, preventing VPN connectivity until the system is
restarted.
</div>
</td>
</tr>
<tr class="row rowsep">
<td class="entry">
<div class="p"><b class="ph b">GPC-23604</b></div>
</td>
<td class="entry relcol">
<div class="p">
Fixed an issue where GlobalProtect users were not automatically
prompted for authentication on public Wi-Fi networks with a captive
portal
</div>
</td>
</tr>
<tr class="row rowsep">
<td class="entry">
<div class="p"><b class="ph b">GPC-23558</b></div>
</td>
<td class="entry relcol">
<div class="p">
Fixed an issue where GlobalProtect clients using SAML with Ping
Federate did not save the SAML token upon reboot or restart of the
pangps service, requiring users to re-authenticate even when the token
was not expired. This issue affected GlobalProtect client version
6.3.3 when SAML authentication was configured in Prisma Access and not
in Cloud Identity Engine.
</div>
</td>
</tr>
<tr class="row rowsep">
<td class="entry">
<div class="p"><b class="ph b">GPC-23551</b></div>
</td>
<td class="entry relcol">
<div class="p">
Fixed an issue where the virtual network adapter retained the static
IP address assigned by GlobalProtect even after the GlobalProtect
client disconnected. This caused DNS registration conflicts, making
workstations unreachable by hostname even after a reboot.
</div>
</td>
</tr>
<tr class="row rowsep">
<td class="entry">
<div class="p"><b class="ph b">GPC-23520</b></div>
</td>
<td class="entry relcol">
<div class="p">
Fixed an issue where new GlobalProtect users were unable to connect to
the GlobalProtect app. The app got stuck in 'Connecting" stage and
stopped working when redirected to the embedded browser.
</div>
</td>
</tr>
<tr class="row rowsep">
<td class="entry">
<div class="p"><b class="ph b">GPC-23519</b></div>
</td>
<td class="entry relcol">
<div class="p">
Fixed an issue where GlobalProtect HIP reports on MacBooks
intermittently failed with an "Invalid client IP" error, preventing
users from accessing resources over the GP tunnel. This issue occurred
after a system network change when GP attempted to send the HIP report
to an external gateway while the tunnel was disconnected. This issue
affected MacBooks running GP version 6.2.5.
</div>
</td>
</tr>
<tr class="row rowsep">
<td class="entry">
<div class="p"><b class="ph b">GPC-23496</b></div>
</td>
<td class="entry relcol">
<div class="p">
Fixed an issue where the GlobalProtect app's Connect button did not
work as expected preventing users from connecting or changing
gateways.
</div>
</td>
</tr>
<tr class="row rowsep">
<td class="entry">
<div class="p"><b class="ph b">GPC-23440</b></div>
</td>
<td class="entry relcol">
<div class="p">
Fixed an issue where Okta FastPass authentication did not work with
GlobalProtect 6.3.3 on macOS 15.5 Sequoia, where the Okta Verify app
did not open for the additional authentication prompt.
</div>
</td>
</tr>
<tr class="row rowsep">
<td class="entry">
<div class="p"><b class="ph b">GPC-23432</b></div>
</td>
<td class="entry relcol">
<div class="p">
Fixed an issue where the GlobalProtect app version 6.3.3
intermittently got stuck on the "finding best gateway" status
</div>
</td>
</tr>
<tr class="row rowsep">
<td class="entry">
<div class="p"><b class="ph b">GPC-23404</b></div>
</td>
<td class="entry relcol">
<div class="p">
Fixed an issue where the Host Information Profile (HIP) check was
unable to accurately identify key details from third-party security
products.
</div>
</td>
</tr>
<tr class="row rowsep">
<td class="entry">
<div class="p"><b class="ph b">GPC-23294</b></div>
</td>
<td class="entry relcol">
<div class="p">
Fixed an issue where GlobalProtect app intermittently disconnected on
macOS endpoints even with a stable network connection. This was due to
a timeout that was too short for the route system command.
</div>
</td>
</tr>
<tr class="row rowsep">
<td class="entry">
<div class="p"><b class="ph b">GPC-23263</b></div>
</td>
<td class="entry relcol">
<div class="p">
Fixed an issue where after upgrading to GlobalProtect app version
6.3.3, the app did not save the username in the embedded browser when
"save username" was enabled.
</div>
</td>
</tr>
<tr class="row rowsep">
<td class="entry">
<div class="p"><b class="ph b">GPC-23218</b></div>
</td>
<td class="entry relcol">
<div class="p">
Fixed an issue where, when using the GlobalProtect app with an
embedded browser, interrupting or canceling the SAML authentication
prompt terminated the pre-logon tunnel, potentially allowing full
internet access even when enforcer was enabled for the user-logon
profile. With default browser, the pre-logon tunnel remained active
when the SAML authentication prompt was interrupted.
</div>
</td>
</tr>
<tr class="row rowsep">
<td class="entry">
<div class="p"><b class="ph b">GPC-23115</b></div>
</td>
<td class="entry relcol">
<div class="p">
Fixed an issue where the hardware token authentication option was
intermittently unavailable while using the embedded GlobalProtect
browser on Windows machines.
</div>
</td>
</tr>
<tr class="row rowsep">
<td class="entry">
<div class="p"><b class="ph b">GPC-23088</b></div>
</td>
<td class="entry relcol">
<div class="p">
Fixed an issue where portal login failed due to embedded browser not
popping up and GlobalProtect remains in connecting state
</div>
</td>
</tr>
<tr class="row rowsep">
<td class="entry">
<div class="p"><b class="ph b">GPC-23044</b></div>
</td>
<td class="entry relcol">
<div class="p">
Fixed an issue where, when a machine was in Modern standby, the
GlobalProtect app repeatedly attempted to connect to gateways, even
when authentication failed due to SAML timeout. This resulted in
GlobalProtect connecting to non-optimal gateway
</div>
</td>
</tr>
<tr class="row rowsep">
<td class="entry">
<div class="p"><b class="ph b">GPC-22989</b></div>
</td>
<td class="entry relcol">
<div class="p">
Fixed an issue where the GlobalProtect app intermittently stopped
sending HIP reports while connected to the gateway.
</div>
</td>
</tr>
<tr class="row rowsep">
<td class="entry">
<div class="p"><b class="ph b">GPC-22979</b></div>
</td>
<td class="entry relcol">
<div class="p">
Fixed an issue where, after upgrading to GlobalProtect app version
6.2.6, the PanGPA application got stuck in 'Connecting' state and then
got terminated unexpectedly.
</div>
</td>
</tr>
<tr class="row rowsep">
<td class="entry">
<div class="p"><b class="ph b">GPC-22887</b></div>
</td>
<td class="entry relcol">
<div class="p">
Fixed an issue where GlobalProtect users experienced frequent
disconnections across various locations.
</div>
</td>
</tr>
<tr class="row rowsep">
<td class="entry">
<div class="p"><b class="ph b">GPC-22870</b></div>
</td>
<td class="entry relcol">
<div class="p">
Fixed an issue where, when using domain-based split tunneling on
GlobalProtect clients, expired DNS TTL entries were not removed from
the Windows Filtering Platform filter driver. This resulted in
incorrect packet routing where traffic for domains not in the exclude
list, but resolving to the same IP address as excluded domains, was
routed via the physical interface instead of the tunnel.
</div>
</td>
</tr>
<tr class="row">
<td class="entry">
<div class="p"><b class="ph b">GPC-22804</b></div>
</td>
<td class="entry relcol">
Fixed an issue where the GlobalProtect app remained in a connected state
after a network disconnection. As a result, when the network connection
was restored, the GlobalProtect app did not recover, and traffic failed
to pass until a refresh connection was performed.
</td>
</tr>
<tr class="row rowsep">
<td class="entry">
<div class="p"><b class="ph b">GPC-22764</b></div>
</td>
<td class="entry relcol">
<div class="p">
Fixed an issue where wa_3rd_party_host_xx.exe attempted to connect to
Microsoft’s update servers for information and the patch information
was not sent in the HIP report. This occured even though HIP
Exceptions for patch management were configured to exclude Windows
updates agent.
</div>
</td>
</tr>
<tr class="row rowsep">
<td class="entry">
<div class="p"><b class="ph b">GPC-22541</b></div>
</td>
<td class="entry relcol">
<div class="p">
Fixed an issue on Windows 11 where the GlobalProtect app (PanGPA)
would stop working when the device was locked. The crash occurred when
an expired authentication triggered a persistent smartcard login
dialog during sleep, leading to excessive memory swapping and a
crypt32.dll failure.
</div>
</td>
</tr>
<tr class="row rowsep">
<td class="entry">
<div class="p"><b class="ph b">GPC-22365</b></div>
</td>
<td class="entry relcol">
<div class="p">
Fixed an issue where users experienced intermittent issues browsing
webpages while connected to the GlobalProtect app.
</div>
</td>
</tr>
<tr class="row rowsep">
<td class="entry">
<div class="p"><b class="ph b">GPC-22033</b></div>
</td>
<td class="entry relcol">
<div class="p">
Fixed an issue where GlobalProtect client version 6.3.1 experienced
DNS resolution failures for IPv4 addresses, specifically when
applications using the io.netty library attempted DNS lookups.
</div>
</td>
</tr>
<tr class="row rowsep">
<td class="entry">
<div class="p"><b class="ph b">GPC-22029</b></div>
</td>
<td class="entry relcol">
<div class="p">
Fixed an issue where Apple software downloads took longer to complete
when using GlobalProtect with split tunneling enabled.
</div>
</td>
</tr>
<tr class="row rowsep">
<td class="entry">
<div class="p"><b class="ph b">GPC-21982</b></div>
</td>
<td class="entry relcol">
<div class="p">
Fixed an issue in which IPv6 traffic bypassed the valid route in the
rerouting table and instead passed through the physical adapter when
the GlobalProtect app was installed on Windows devices.
</div>
</td>
</tr>
<tr class="row rowsep">
<td class="entry">
<div class="p"><b class="ph b">GPC-21961</b></div>
</td>
<td class="entry relcol">
<div class="p">
Fixed an issue where, after upgrading to GlobalProtect version 6.2.5,
the app triggered authentication and opened multiple browser tabs when
the computer woke from sleep.
</div>
</td>
</tr>
</tbody>
</table>