topic Re: MAC Default Web Browser Auth Block in GlobalProtect Discussions

MAC Default Web Browser Auth Block

AlexMcCreery — Tue, 01 Apr 2025 18:32:38 GMT

We are testing GP 6.2.7 always-on with enforcing connection for internet set. Our windows machines work just fine with the embedded browser but we are having an issue with MACs.

Some of our MACs are trying to connect and redirect to the default web browser ( we don't have default browser set in configurations). The page redirects to login.microsoftonline.com (SAML) but promptly gets blocked/says no internet for connection.

This 1 - leaves the connection attempt to spin and 2 - stops users from using their machines unable to disconnect.

I'd rather use the embedded browser for MACs but doesn't look like they use it.

Anyone else run across this?

Re: MAC Default Web Browser Auth Block

reaper — Wed, 02 Apr 2025 09:08:21 GMT

did you add login.microsoftonline.com to the exceptions?

"Allow traffic to specified fqdn when Enforce GlobalProtect Connection for Network Access is enabled and GlobalProtect Connection is not established" in the app settings (network > gp portal > agent > app)

Re: MAC Default Web Browser Auth Block

AlexMcCreery — Wed, 02 Apr 2025 16:17:30 GMT

Yes it has been added. The problem I have with it is that since its used for SAML, there is a whole randomized string to it which GP doesn't allow.

The embedded browser sees the same thing but that connection works.