aaron.axvig/firewallissues
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Add reference files

Browse Source
This commit is contained in:
aaron.axvig
2026-06-16 08:22:31 -05:00
parent 79550889aa
commit c6e3095f26
21 changed files with 7128 additions and 81 deletions
Download Patch File Download Diff File Expand all files Collapse all files
reference/GlobalProtect/addressed/6.2.8.html
+732
View File
@@ -0,0 +1,732 @@
<table class="table colsep rowsep table-striped">
<!--cq:include script="../../common/tablestack.jsp" /-->
<colgroup>
<col style="width: 50%" />
<col style="width: 50%" />
</colgroup>
<thead class="thead">
<tr class="row">
<th class="entry">
<div class="p">Issue ID</div>
</th>
<th class="entry">
<div class="p">Description</div>
</th>
</tr>
</thead>
<tbody class="tbody">
<tr class="row">
<td class="entry">
<div class="p"><b class="ph b">GPC-22894</b></div>
</td>
<td class="entry relcol">
<div class="p">
Fixed an issue where GlobapProtect did not detect the correct version
of Kaspersky Endpoint Security.
</div>
</td>
</tr>
<tr class="row">
<td class="entry">
<div class="p"><b class="ph b">GPC-22847</b></div>
</td>
<td class="entry relcol">
<div class="p">
Fixed an issue where GlobalProtect did not detect Qualys for patch
management.
</div>
</td>
</tr>
<tr class="row">
<td class="entry">
<div class="p"><b class="ph b">GPC-22764</b></div>
</td>
<td class="entry relcol">
<div class="p">
Fixed an issue where wa_3rd_party_host_xx.exe attempted to connect to
Microsoft’s update servers for information and the patch information
was not sent in the HIP report. This occured even though HIP
Exceptions for patch management were configured to exclude Windows
updates agent.
</div>
</td>
</tr>
<tr class="row">
<td class="entry">
<div class="p"><b class="ph b">GPC-22740</b></div>
</td>
<td class="entry relcol">
<div class="p">
Fixed an issue where macOS computers displayed both the new and old
versions of the GlobalProtect welcome page.
</div>
</td>
</tr>
<tr class="row">
<td class="entry">
<div class="p"><b class="ph b">GPC-22688</b></div>
</td>
<td class="entry relcol">
<div class="p">
Fixed an issue for proxy-only mode where customers were unable to
access websites when the computer woke up from sleep.
</div>
</td>
</tr>
<tr class="row">
<td class="entry">
<div class="p"><b class="ph b">GPC-22638</b></div>
</td>
<td class="entry relcol">
<div class="p">
Fixed an issue where Global Protect HIP did not detect the drive state
when using Trellix Drive Encryption 8.0.
</div>
</td>
</tr>
<tr class="row">
<td class="entry">
<div class="p"><b class="ph b">GPC-22620</b></div>
</td>
<td class="entry relcol">
<div class="p">
Fixed an issue where GlobalProtect was not working correctly and
blocked internet access.
</div>
</td>
</tr>
<tr class="row">
<td class="entry">
<div class="p"><b class="ph b">GPC-22589</b></div>
</td>
<td class="entry relcol">
<div class="p">
Fixed an issue where the Report an Issue functionality did not send
the troubleshooting log to the administrator’s Strata Logging Service
instance.
</div>
</td>
</tr>
<tr class="row">
<td class="entry">
<div class="p"><b class="ph b">GPC-22544</b></div>
</td>
<td class="entry relcol">
<div class="p">
Fixed an issue where the GlobalProtect client did not send the HIP
report causing user-IP mapping to be cleared and resulting in traffic
drop.
</div>
</td>
</tr>
<tr class="row">
<td class="entry">
<div class="p"><b class="ph b">GPC-22542</b></div>
</td>
<td class="entry relcol">
<div class="p">
Fixed an issue where the embedded browser shown as part of SAML
authentication was blank.
</div>
</td>
</tr>
<tr class="row">
<td class="entry">
<div class="p"><b class="ph b">GPC-22487</b></div>
</td>
<td class="entry relcol">
<div class="p">
Fixed an issue where Norton 360 was not compatible with GlobalProtect
causing the device to fail the HIP check.
</div>
</td>
</tr>
<tr class="row">
<td class="entry">
<div class="p"><b class="ph b">GPC-22443</b></div>
</td>
<td class="entry relcol">
<div class="p">
Fixed an issue where the GlobalProtect agent showed as connected even
when the virtual adapter was down.
</div>
</td>
</tr>
<tr class="row">
<td class="entry">
<div class="p"><b class="ph b">GPC-22437</b></div>
</td>
<td class="entry relcol">
<div class="p">
Fixed an issue where the GlobalProtect macOS client experienced a
keep-alive timeout, preventing the tunnel from connecting.
</div>
</td>
</tr>
<tr class="row">
<td class="entry">
<div class="p"><b class="ph b">GPC-22412</b></div>
</td>
<td class="entry relcol">
<div class="p">
Fixed an error where virtual adapter is not set correctly during
tunnel creation.
</div>
</td>
</tr>
<tr class="row">
<td class="entry">
<div class="p"><b class="ph b">GPC-22297</b></div>
</td>
<td class="entry relcol">
<div class="p">
Fixed an issue where the Customer was getting "A valid client
certificate is required for authentication" even though they had a
valid client certificate installed. In order to access the fix, you
must do one of the following:
<ul
id="globalprotect-app-6-2-8-windows-and-macos-known-issues_ul-dg3_rxb_cfc"
class="ul"
>
<li class="li">
uninstall the previous release (to remove all registry entries).
</li>
<li class="li">
manually delete the registry value
"ext-key-usage-oid-for-client-cert" under
"HKEY_LOCAL_MACHINE\SOFTWARE\Palo Alto
Networks\GlobalProtect\Settings" as it may contain a corrupted
value.
</li>
</ul>
</div>
</td>
</tr>
<tr class="row">
<td class="entry">
<div class="p"><b class="ph b">GPC-22264</b></div>
</td>
<td class="entry relcol">
<div class="p">
Fixed an issue where the GlobalProtect HIP report did not detect the
last full scan time for Avast antivirus software.
</div>
</td>
</tr>
<tr class="row">
<td class="entry">
<div class="p"><b class="ph b">GPC-22245</b></div>
</td>
<td class="entry relcol">
<div class="p">
Fixed an issue where transparent upgrade from GlobalProtect version
6.2.4 or 6.2.5 to version 6.2.6 failed on some Windows endpoints with
error 1618.
</div>
</td>
</tr>
<tr class="row">
<td class="entry">
<div class="p"><b class="ph b">GPC-22237</b></div>
</td>
<td class="entry relcol">
<div class="p">
Fixed an issue where GlobalProtect shut down unexpectedly on Windows
11 devices running multiple versions of GlobalProtect 6.3. The issue
was caused by the firewall sending invalid IPv6 packets to
GlobalProtect, which did not have a validation method before
processing.
</div>
</td>
</tr>
<tr class="row">
<td class="entry">
<div class="p"><b class="ph b">GPC-22235</b></div>
</td>
<td class="entry relcol">
<div class="p">
Fixed an issue where users were unable to connect to the app after the
system woke up from sleep mode.
</div>
</td>
</tr>
<tr class="row">
<td class="entry">
<div class="p"><b class="ph b">GPC-22233</b></div>
</td>
<td class="entry relcol">
<div class="p">
Fixed an issue where the users were unable to connect the
GlobalProtect app after performing the resolution of CVE-2024-5921.
The app displayed the following error, “The certificate CN name
mismatch.”
</div>
</td>
</tr>
<tr class="row">
<td class="entry">
<div class="p"><b class="ph b">GPC-22126</b></div>
</td>
<td class="entry relcol">
<div class="p">
Fixed an issue where GlobalProtect version 6.2.6-838 was stuck
intermittently during the connection process.
</div>
</td>
</tr>
<tr class="row">
<td class="entry">
<div class="p"><b class="ph b">GPC-22123</b></div>
</td>
<td class="entry relcol">
<div class="p"></div>
Fixed an issue where the GlobalProtect app got stuck and users faced
connection issues after the system woke up from sleep mode even though
the internet connection was stable.
</td>
</tr>
<tr class="row">
<td class="entry">
<div class="p"><b class="ph b">GPC-22092</b></div>
</td>
<td class="entry relcol">
<div class="p">
Fixed an issue where the GlobalProtect app failed to validate the
server certificate when the portal or gateway sent only the leaf
certificate.
</div>
</td>
</tr>
<tr class="row">
<td class="entry">
<div class="p"><b class="ph b">GPC-22061</b></div>
</td>
<td class="entry relcol">
<div class="p">
Fixed an issue where the GlobalProtect client displayed an error when
using an ECDSA certificate with explicit EC parameters in FIPS mode.
</div>
</td>
</tr>
<tr class="row">
<td class="entry">
<div class="p"><b class="ph b">GPC-22043</b></div>
</td>
<td class="entry relcol">
<div class="p">
Fixed an issue where Okta push notification shows incorrect Windows
OS, when Okta SAML authentication is enabled in GlobalProtect.
</div>
</td>
</tr>
<tr class="row rowsep">
<td class="entry">
<div class="p"><b class="ph b">GPC-22036</b></div>
</td>
<td class="entry relcol">
<div class="p">
Resolved an issue where GlobalProtect did not populate the internal
routes in the user's routing table.
</div>
</td>
</tr>
<tr class="row rowsep">
<td class="entry">
<div class="p"><b class="ph b">GPC-22028</b></div>
</td>
<td class="entry relcol">
<div class="p">
Fixed an issue where the disconnect reason for macOS users was getting
cached.
</div>
</td>
</tr>
<tr class="row">
<td class="entry">
<div class="p"><b class="ph b">GPC-21988</b></div>
</td>
<td class="entry relcol">
<div class="p">
Fixed an issue where the GlobalProtect Client displayed a download
prompt or was updated even with an "upgrade disallow" configuration.
</div>
</td>
</tr>
<tr class="row">
<td class="entry">
<div class="p"><b class="ph b">GPC-21979</b></div>
</td>
<td class="entry relcol">
<div class="p">
Fixed an issue where the included domain traffic was routed through
the physical interface when split tunnel was configured.
</div>
</td>
</tr>
<tr class="row">
<td class="entry">
<div class="p"><b class="ph b">GPC-21961</b></div>
</td>
<td class="entry relcol">
<div class="p">
Fixed an issue where, after upgrading to GlobalProtect version 6.2.5,
the app triggered authentication and opened multiple browser tabs when
the computer woke from sleep.
</div>
</td>
</tr>
<tr class="row">
<td class="entry">
<div class="p"><b class="ph b">GPC-21960</b></div>
</td>
<td class="entry relcol">
<div class="p">
Fixed an issue where the HIP check failed to detect the Norton
anti-malware version 24.11.9615.0.
</div>
</td>
</tr>
<tr class="row">
<td class="entry">
<div class="p"><b class="ph b">GPC-21955</b></div>
</td>
<td class="entry relcol">
<div class="p">
Fixed an issue where the HIP notification pop-up on macOS looked
different from that on Windows.
</div>
</td>
</tr>
<tr class="row">
<td class="entry">
<div class="p"><b class="ph b">GPC-21938</b></div>
</td>
<td class="entry relcol">
<div class="p">
Fixed an issue where, when the GlobalProtect app version 6.3.x was
installed on devices running macOS, the HIP check failed to detect
ESET Endpoint Security version 8.
</div>
</td>
</tr>
<tr class="row">
<td class="entry">
<div class="p"><b class="ph b">GPC-21918</b></div>
</td>
<td class="entry relcol">
<div class="p">
Fixed an issue where, when the patch management category was excluded
for HIP checks, HIP checks were still happening for missing patches
which consumed CPU resources on users' machine.
</div>
</td>
</tr>
<tr class="row rowsep">
<td class="entry">
<div class="p"><b class="ph b">GPC-21938</b></div>
</td>
<td class="entry relcol">
<div class="p">
Fixed an issue where, when the GlobalProtect app version 6.3.x was
installed on devices running macOS, the HIP check failed to detect
ESET Endpoint Security version 8.
</div>
</td>
</tr>
<tr class="row rowsep">
<td class="entry">
<div class="p"><b class="ph b">GPC-21775</b></div>
</td>
<td class="entry relcol">
<div class="p">
Fixed an issue where GlobalProtect users on macOS were disconnected
immediately after sending the HIP report.
</div>
</td>
</tr>
<tr class="row">
<td class="entry">
<div class="p"><b class="ph b">GPC-21771</b></div>
</td>
<td class="entry relcol">
<div class="p">
Fixed an issue where the GlobalProtect HIP check incorrectly detected
Malware Definition Date for Trend Micro Deep Security Agent, which
caused the device to fail the HIP check.
</div>
</td>
</tr>
<tr class="row rowsep">
<td class="entry">
<div class="p"><b class="ph b">GPC-21743</b></div>
</td>
<td class="entry relcol">
<div class="p">
Fixed an issue where a user was randomly prompted with a \"Login
Successful\" message when connecting to GlobalProtect (GP), even
though GP was not connected.
</div>
</td>
</tr>
<tr class="row">
<td class="entry">
<div class="p"><b class="ph b">GPC-21695</b></div>
</td>
<td class="entry relcol">
<div class="p">
Fixed an issue where the GlobalProtect embedded browser could not
utilize a new PIV certificate for SAML authentication if multiple
certificates were available.
</div>
</td>
</tr>
<tr class="row">
<td class="entry">
<div class="p"><b class="ph b">GPC-21677</b></div>
</td>
<td class="entry relcol">
<div class="p">
Fixed an issue where GlobalProtect configured for Always-on Pre-logon
may not display the captive portal page if there is a delay with
network access or Internet connectivity.
</div>
</td>
</tr>
<tr class="row">
<td class="entry">
<div class="p"><b class="ph b">GPC-21653</b></div>
</td>
<td class="entry relcol">
<div class="p">
Fixed an issue where the GlobalProtect virtual adapter was not set up
correctly.
</div>
</td>
</tr>
<tr class="row rowsep">
<td class="entry">
<div class="p"><b class="ph b">GPC-21639</b></div>
</td>
<td class="entry relcol">
<div class="p">
Fixed an issue where the GlobalProtect macOS client did not extend the
session even though the user clicked the Extend Session button.
</div>
</td>
</tr>
<tr class="row rowsep">
<td class="entry">
<div class="p"><b class="ph b">GPC-21627</b></div>
</td>
<td class="entry relcol">
<div class="p">
Fixed an issue where the Report an Issue feature failed to work for a
specific user whose username contained Japanese character.
</div>
</td>
</tr>
<tr class="row rowsep">
<td class="entry">
<div class="p"><b class="ph b">GPC-21615</b></div>
</td>
<td class="entry relcol">
<div class="p">
Fixed an issue where the GlobalProtect agent
(wa_3rd_party_host_64.exe) modified the __PSLockDownPolicy registry
key from 4 (secure language mode) to 0 (full language mode) after a
reboot.
</div>
</td>
</tr>
<tr class="row rowsep">
<td class="entry">
<div class="p"><b class="ph b">GPC-21571</b></div>
</td>
<td class="entry relcol">
<div class="p">
Fixed an issue where the hyperlink in HIP notification opened up in
Webview2 instead of the default browser.
</div>
</td>
</tr>
<tr class="row rowsep">
<td class="entry">
<div class="p"><b class="ph b">GPC-21565</b></div>
</td>
<td class="entry relcol">
<div class="p">
Fixed an issue where the SAML embedded browser did not remember the
username after sign-out, even when the user had selected the check box
“Remember Me" on the SAML embedded browser,
</div>
</td>
</tr>
<tr class="row rowsep">
<td class="entry">
<div class="p"><b class="ph b">GPC-21527</b></div>
</td>
<td class="entry relcol">
<div class="p">
Fixed an issue where the firewall did not exclude the APIPA
(169.254.0.0/16) range from GlobalProtect when the Endpoint Traffic
Policy Enforcement feature was enabled with the exclude option. As a
result, traffic to the APIPA range was sent over GlobalProtect instead
of the local interface.
</div>
</td>
</tr>
<tr class="row rowsep">
<td class="entry">
<div class="p"><b class="ph b">GPC-21467</b></div>
</td>
<td class="entry relcol">
<div class="p">
Fixed an issue where the Transparent Upgrade with Proxy only mode did
not work as expected and no tunnel was established with the gateway.
</div>
</td>
</tr>
<tr class="row rowsep">
<td class="entry">
<div class="p"><b class="ph b">GPC-21453</b></div>
</td>
<td class="entry relcol">
<div class="p">
Fixed an issue where the GlobalProtect app window displayed "static"
instead of the connected gateway name.
</div>
</td>
</tr>
<tr class="row rowsep">
<td class="entry">
<div class="p"><b class="ph b">GPC-21222</b></div>
</td>
<td class="entry relcol">
<div class="p">
Fixed an issue where the GlobalProtect HIP check incorrectly detected
the Real Time Protection Status and Last Full Scan for Avast
application, which caused the device to fail the HIP check.
</div>
</td>
</tr>
<tr class="row rowsep">
<td class="entry">
<div class="p"><b class="ph b">GPC-21090</b></div>
</td>
<td class="entry relcol">
<div class="p">
Fixed an issue where GlobalProtect only displayed ADEM information for
approximately 120 users even though more than 600 ADEM users were
connected to GlobalProtect.
</div>
</td>
</tr>
<tr class="row rowsep">
<td class="entry">
<div class="p"><b class="ph b">GPC-20967</b></div>
</td>
<td class="entry relcol">
<div class="p">
Fixed an issue where, when the GlobalProtect app was installed with
the Conditional Connect method, users had to click the Connect button
twice to connect to an external gateway after a system reboot.
</div>
</td>
</tr>
<tr class="row rowsep">
<td class="entry">
<div class="p"><b class="ph b">GPC-20632</b></div>
</td>
<td class="entry relcol">
<div class="p">
Fixed an issue where GLobalProtect was stuck in connecting mode after
the customer manually selected a gateway that hit the maximum user
limit. This was a multi-gateway environment with SAML/CAS
authentication method.
</div>
</td>
</tr>
<tr class="row rowsep">
<td class="entry">
<div class="p"><b class="ph b">GPC-20621</b></div>
</td>
<td class="entry relcol">
<div class="p">
Fixed an issue where users from overseas locations were disconnected
from GlobalProtect due to the HIP report not being sent with manual
gateway selection.
</div>
</td>
</tr>
<tr class="row rowsep">
<td class="entry">
<div class="p"><b class="ph b">GPC-18587</b></div>
</td>
<td class="entry relcol">
<div class="p">
Fixed an issue where, when the GlobalProtect was installed on Windows
devices and Connect Before Logon was deployed, users were unable to
log in to the device using the User Principal Name (UPN). This issue
occurred when the GlobalProtect credential provider was selected and
the device was offline.
</div>
</td>
</tr>
</tbody>
</table>