

GlobalProtect app behavior for the App Configuration.Īs a best practice, use a server certificate from a trusted root certificate authority CA. The name of the GlobalProtect gateway subscription has changed to GlobalProtect subscription.

If you Allow User to Disable GlobalProtect app, the Disable Timeout now applies when the user disables the app using any method passcode, comment, or ticketinstead of just applying when users use the ticket method Network.
GLOBALPROTECT SERVER CERTIFICATE IS INVALID SOFTWARE
In macOS For enterprise deployments where you must distribute software that includes kernel extensions without requiring user approval, there are two options that prevent the user pop-ups when installing GlobalProtect. Previously, the app would connect to a lower priority gateway only if the response time for the higher priority gateway is greater than the average response time across all gateways. To improve the logic the GlobalProtect app uses to select the best gateway, the app now prioritizes the gateways assigned highest, high, and medium priority ahead of gateways assigned a low or lowest priority regardless of response time. For unmanaged devices, if a user sees the popup after upgrading to macOS For additional information on this pop-up and the recommended fixes, see Apple Technical Note TN GlobalProtect can now automatically retry the connection when network disconnects occur due to network instability or endpoint state changes. For new installations of the GlobalProtect app on Windows 8 or 10 endpoints, if you set the value to 1. Changes to Default Behavior in GlobalProtect 4. The following are changes to default behavior that affect GlobalProtect app 4.
