369 lines
12 KiB
HTML
369 lines
12 KiB
HTML
<table class="table colsep rowsep table-striped">
|
|
<!--cq:include script="../../common/tablestack.jsp" /-->
|
|
|
|
<colgroup>
|
|
<col style="width: 25%" />
|
|
<col style="width: 75%" />
|
|
</colgroup>
|
|
<thead class="thead">
|
|
<tr class="row">
|
|
<th class="entry">
|
|
<div class="p">Issue ID</div>
|
|
</th>
|
|
<th class="entry">
|
|
<div class="p">Description</div>
|
|
</th>
|
|
</tr>
|
|
</thead>
|
|
|
|
<tbody class="tbody">
|
|
<tr class="row rowsep">
|
|
<td class="entry">
|
|
<div class="p"><b class="ph b">GPC-24332</b></div>
|
|
</td>
|
|
<td class="entry relcol">
|
|
<div class="p">
|
|
Fixed an issue where users on trusted networks were incorrectly
|
|
receiving a captive portal detection message and being redirected to a
|
|
separate browser tab. This occurred because the GlobalProtect app was
|
|
not properly handling captive portal detection response.
|
|
</div>
|
|
</td>
|
|
</tr>
|
|
|
|
<tr class="row rowsep">
|
|
<td class="entry">
|
|
<div class="p"><b class="ph b">GPC-24330</b></div>
|
|
</td>
|
|
<td class="entry relcol">
|
|
<div class="p">
|
|
Fixed an issue where GlobalProtect app got stuck in a connecting state
|
|
when using GlobalProtect version 6.2.8-h4. The issue was seen when
|
|
saml-logout and enforcer was enabled.
|
|
</div>
|
|
</td>
|
|
</tr>
|
|
|
|
<tr class="row rowsep">
|
|
<td class="entry">
|
|
<div class="p"><b class="ph b">GPC-24235</b></div>
|
|
</td>
|
|
<td class="entry relcol">
|
|
<div class="p">
|
|
Fixed an issue where, after upgrading to GlobalProtect agent 6.2.8 on
|
|
macOS, users were unable to select a different portal. Clicking
|
|
"Change Portal" would initiate a reconnection attempt instead of
|
|
displaying the portal selection menu.
|
|
</div>
|
|
</td>
|
|
</tr>
|
|
|
|
<tr class="row rowsep">
|
|
<td class="entry">
|
|
<div class="p"><b class="ph b">GPC-24166</b></div>
|
|
</td>
|
|
<td class="entry relcol">
|
|
<div class="p">
|
|
Fixed an issue where GlobalProtect agents in proxy-only mode would
|
|
intermittently get stuck in a connecting state after upgrading from
|
|
version 6.2.8 to 6.3.3-676. The agent would become stuck in the
|
|
"Discovering external network" phase, and restarting the GlobalProtect
|
|
process would temporarily resolve the issue.
|
|
</div>
|
|
</td>
|
|
</tr>
|
|
|
|
<tr class="row rowsep">
|
|
<td class="entry">
|
|
<div class="p"><b class="ph b">GPC-24086</b></div>
|
|
</td>
|
|
<td class="entry relcol">
|
|
<div class="p">
|
|
Fixed an issue where, when Endpoint Traffic Policy Enforcement was
|
|
enabled with "No Direct Access to Local Network" on GlobalProtect,
|
|
Xcode running on macOS was unable to recognize iPhones connected via
|
|
USB-C. This issue occurred because traffic enforcement blocked
|
|
communication between Xcode and the iPhone.
|
|
</div>
|
|
</td>
|
|
</tr>
|
|
|
|
<tr class="row rowsep">
|
|
<td class="entry">
|
|
<div class="p"><b class="ph b">GPC-24050</b></div>
|
|
</td>
|
|
<td class="entry relcol">
|
|
<div class="p">
|
|
Fixed an issue where GlobalProtect clients prompted a window to select
|
|
a certificate with the error "The parameter is incorrect" because the
|
|
client certificate request originated from a portal or gateway Access
|
|
Control Server (ACS) and was not required.
|
|
</div>
|
|
</td>
|
|
</tr>
|
|
|
|
<tr class="row rowsep">
|
|
<td class="entry">
|
|
<div class="p"><b class="ph b">GPC-24048</b></div>
|
|
</td>
|
|
<td class="entry relcol">
|
|
<div class="p">
|
|
Fixed an issue where GlobalProtect apps installed on on Dell Vostro 15
|
|
3515 laptops were unable to connect to the GlobalProtect service with
|
|
the following error: "Could not connect to the GlobalProtect service.
|
|
If the issue persists, contact your administrator."
|
|
</div>
|
|
</td>
|
|
</tr>
|
|
|
|
<tr class="row rowsep">
|
|
<td class="entry">
|
|
<div class="p"><b class="ph b">GPC-24036</b></div>
|
|
</td>
|
|
<td class="entry relcol">
|
|
<div class="p">
|
|
Fixed an issue where the HIP check did not correctly detect the status
|
|
of the ESET firewall on Windows hosts.
|
|
</div>
|
|
</td>
|
|
</tr>
|
|
|
|
<tr class="row rowsep">
|
|
<td class="entry">
|
|
<div class="p"><b class="ph b">GPC-23990</b></div>
|
|
</td>
|
|
<td class="entry relcol">
|
|
<div class="p">
|
|
Fixed an issue where the captive portal opened in the embedded
|
|
browser, but when the user tried to connect to the internet, it
|
|
redirected to the default browser and was blocked.
|
|
</div>
|
|
</td>
|
|
</tr>
|
|
|
|
<tr class="row rowsep">
|
|
<td class="entry">
|
|
<div class="p"><b class="ph b">GPC-23913</b></div>
|
|
</td>
|
|
<td class="entry relcol">
|
|
<div class="p">
|
|
Fixed an issue where the GlobalProtect app would become unresponsive
|
|
when system extensions and a PAC file were enabled simultaneously.
|
|
</div>
|
|
</td>
|
|
</tr>
|
|
|
|
<tr class="row rowsep">
|
|
<td class="entry">
|
|
<div class="p"><b class="ph b">GPC-23906</b></div>
|
|
</td>
|
|
<td class="entry relcol">
|
|
<div class="p">
|
|
Fixed an issue where GlobalProtect app displayed a "No Network
|
|
Connectivity" error and failed to initiate a network connection,
|
|
preventing access to applications.
|
|
</div>
|
|
</td>
|
|
</tr>
|
|
|
|
<tr class="row rowsep">
|
|
<td class="entry">
|
|
<div class="p"><b class="ph b">GPC-23730</b></div>
|
|
</td>
|
|
<td class="entry relcol">
|
|
<div class="p">
|
|
Fixed an issue where IPv6 traffic on Windows 11 24H2 did not work as
|
|
expected with GlobalProtect app.
|
|
</div>
|
|
</td>
|
|
</tr>
|
|
|
|
<tr class="row rowsep">
|
|
<td class="entry">
|
|
<div class="p"><b class="ph b">GPC-23689</b></div>
|
|
</td>
|
|
<td class="entry relcol">
|
|
<div class="p">
|
|
Fixed an issue where the GlobalProtect app running on macOS devices
|
|
would stuck in a connecting loop indefinitely if the user did not
|
|
complete authentication, requiring manual cancellation of the
|
|
connection.
|
|
</div>
|
|
</td>
|
|
</tr>
|
|
|
|
<tr class="row rowsep">
|
|
<td class="entry">
|
|
<div class="p"><b class="ph b">GPC-23650</b></div>
|
|
</td>
|
|
<td class="entry relcol">
|
|
<div class="p">
|
|
Fixed an issue where the GlobalProtect enforcer blocked network
|
|
traffic on Windows endpoints even after the tunnel was successfully
|
|
connected.
|
|
</div>
|
|
</td>
|
|
</tr>
|
|
|
|
<tr class="row rowsep">
|
|
<td class="entry">
|
|
<div class="p"><b class="ph b">GPC-23549</b></div>
|
|
</td>
|
|
<td class="entry relcol">
|
|
<div class="p">
|
|
Fixed an issue where the GlobalProtect (GP) agent briefly disconnected
|
|
when a user logged on to Windows, even when the 'Pre-Logon Tunnel
|
|
Rename Timeout (sec) (Windows Only)' setting was set to -1, with the
|
|
error "server cert verification failed".
|
|
</div>
|
|
</td>
|
|
</tr>
|
|
|
|
<tr class="row rowsep">
|
|
<td class="entry">
|
|
<div class="p"><b class="ph b">GPC-23546</b></div>
|
|
</td>
|
|
<td class="entry relcol">
|
|
<div class="p">
|
|
Fixed an issue where the SAML authentication window in the
|
|
GlobalProtect client on macOS devices running version 6.2.6 or higher
|
|
would sometimes display an incomplete or blank screen after the device
|
|
woke up from sleep mode. This issue affects devices using the embedded
|
|
browser for SAML authentication and with GlobalProtect set to
|
|
always-on mode with enforcer enabled.
|
|
</div>
|
|
</td>
|
|
</tr>
|
|
|
|
<tr class="row rowsep">
|
|
<td class="entry">
|
|
<div class="p"><b class="ph b">GPC-23525</b></div>
|
|
</td>
|
|
<td class="entry relcol">
|
|
<div class="p">
|
|
Fixed an issue where on macOS Ventura and Sequoia, manually changing
|
|
the portal address using the GlobalProtect app UI would fail and
|
|
revert back to the last connected portal. This issue occurred even
|
|
when "Allow User to Change Portal Address" was enabled in the agent
|
|
configuration.
|
|
</div>
|
|
</td>
|
|
</tr>
|
|
|
|
<tr class="row rowsep">
|
|
<td class="entry">
|
|
<div class="p"><b class="ph b">GPC-23466</b></div>
|
|
</td>
|
|
<td class="entry relcol">
|
|
<div class="p">
|
|
Fixed an issue where, when the GlobalProtect app was installed on
|
|
devices running Windows OS and macOS, the Captive Portal detection
|
|
message briefly appeared and disappeared when the Captive Portal
|
|
exception timeout was set to 0.
|
|
</div>
|
|
</td>
|
|
</tr>
|
|
|
|
<tr class="row rowsep">
|
|
<td class="entry">
|
|
<div class="p"><b class="ph b">GPC-23336</b></div>
|
|
</td>
|
|
<td class="entry relcol">
|
|
<div class="p">
|
|
Fixed an issue where agent disable logs were not being logged to
|
|
Gateway System Logs on the firewall. The GlobalProtect agent reset the
|
|
authentication code, which falsely indicated that the gateway was not
|
|
fully authenticated, and the agent did not send the message.
|
|
</div>
|
|
</td>
|
|
</tr>
|
|
|
|
<tr class="row rowsep">
|
|
<td class="entry">
|
|
<div class="p"><b class="ph b">GPC-22683</b></div>
|
|
</td>
|
|
<td class="entry relcol">
|
|
<div class="p">
|
|
Fixed an issue where tool tips were not available for the Add, Edit,
|
|
and Delete buttons on the GlobalProtect application's settings page on
|
|
Windows devices.
|
|
</div>
|
|
</td>
|
|
</tr>
|
|
|
|
<tr class="row rowsep">
|
|
<td class="entry">
|
|
<div class="p"><b class="ph b">GPC-22572</b></div>
|
|
</td>
|
|
<td class="entry relcol">
|
|
<div class="p">
|
|
Fixed an issue where the hamburger menu button was disabled in the
|
|
Refresh connection screen, which made it inaccessible when using a
|
|
keyboard.
|
|
</div>
|
|
</td>
|
|
</tr>
|
|
|
|
<tr class="row rowsep">
|
|
<td class="entry">
|
|
<div class="p"><b class="ph b">GPC-22522</b></div>
|
|
</td>
|
|
<td class="entry relcol">
|
|
<div class="p">
|
|
Fixed an issue where, after upgrading the GlobalProtect app, external
|
|
users on Windows 11 computers with multiple Azure Entra accounts were
|
|
unable to authenticate to the portal using SAML with Azure Entra as
|
|
the Identity Provider (IdP). The new WebView2 embedded browser
|
|
automatically used the user's default Windows credential for Single
|
|
Sign-On (SSO), preventing them from selecting the correct account for
|
|
authentication.
|
|
</div>
|
|
<div class="p">
|
|
To resolve this issue a new registry key 'entra-sso' has been
|
|
introduced. You can add the registry key using two methods and set it
|
|
to no to disable SSO.
|
|
</div>
|
|
<div class="p">
|
|
1. For pre-deployment, use 'msiexec.exe /i globalprotect64.msi
|
|
ENTRASSO="no"
|
|
</div>
|
|
<div class="p">or</div>
|
|
<div class="p">
|
|
2. Add key "entra-sso" and set it to "no" under
|
|
HKEY_LOCAL_MACHINE\SOFTWARE\Palo Alto Networks\GlobalProtect\Settings.
|
|
If the "entra-sso" key does not exist under this path, the
|
|
GlobalProtect agent's default behavior is to 'Allow' Entra SSO.
|
|
</div>
|
|
</td>
|
|
</tr>
|
|
|
|
<tr class="row rowsep">
|
|
<td class="entry">
|
|
<div class="p"><b class="ph b">GPC-22148</b></div>
|
|
</td>
|
|
<td class="entry relcol">
|
|
<div class="p">
|
|
(GP App 6.3.1 enabled with FIPS-CC only) Fixed an issue where the OCSP
|
|
request did not send the Host header, causing the X509v3 certificate
|
|
validation to fail when accessing the OCSP or CRL.
|
|
</div>
|
|
</td>
|
|
</tr>
|
|
|
|
<tr class="row rowsep">
|
|
<td class="entry">
|
|
<div class="p"><b class="ph b">GPC-22021</b></div>
|
|
</td>
|
|
<td class="entry relcol">
|
|
<div class="p">
|
|
Fixed an issue where, when using conditional-connect on macOS Sequoia
|
|
with GlobalProtect client version 6.2.6, manually switching gateways
|
|
caused the client to display a "Not connected" status for
|
|
approximately 10 seconds while establishing a connection to the second
|
|
gateway.
|
|
</div>
|
|
</td>
|
|
</tr>
|
|
</tbody>
|
|
</table>
|