topic Re: GlobalProtect 6.3.3-1121 connects automatically despite on demand is enable in GlobalProtect Discussions

GlobalProtect 6.3.3-1121 connects automatically despite on demand is enable

A.Azhagesan — Fri, 28 Aug 2026 15:27:54 GMT

Hello Team,

After upgrading GlobalProtect to 6.3.3-1121, we have noticed that Mac devices are automatically connecting to the VPN without any user intervention.

Is anyone else experiencing the same issue after upgrading to this version?

Please let us know if you have observed similar behavior

Re: GlobalProtect 6.3.3-1121 connects automatically despite on demand is enable

EmirMujezinovic — Mon, 31 Aug 2026 11:34:01 GMT

Yes, we are facing the same problem on the new version.

Re: GlobalProtect 6.3.3-1121 connects automatically despite on demand is enable

batuhan.yilmaz — Mon, 31 Aug 2026 12:15:25 GMT

we have the same problem in the 6.3.3-1121

Re: GlobalProtect 6.3.3-1121 connects automatically despite on demand is enable

hbhbhb — Tue, 01 Sep 2026 10:01:25 GMT

same here
we just upgraded yesterday, after testing an older 6.3.3 for a longer amount of time.... 😕

Re: GlobalProtect 6.3.3-1121 connects automatically despite on demand is enable

JeremySchreiner — Thu, 03 Sep 2026 15:12:59 GMT

Has anyone here found a solution to this. So far we've just had to roll back to older version. Only some users however have seen this, but unfortunately too many. All are running Tahoe and are on m1 macs.

Re: GlobalProtect 6.3.3-1121 connects automatically despite on demand is enable

Smolli — Fri, 04 Sep 2026 09:47:39 GMT

Just a quick update for anyone running into this: A clean reinstall did the trick for us.

Running the uninstaller via GlobalProtect-6.3.3-c1121.pkg, followed by a fresh install and a system reboot, resolved the issue on our end.

Worth noting: One user reported seeing a single reconnect right after the initial setup, but after manually disconnecting one more time, it stabilized completely without any further action. The client now stays disconnected as expected.

Re: GlobalProtect 6.3.3-1121 connects automatically despite on demand is enable

J.Davidson963902 — Fri, 04 Sep 2026 18:13:07 GMT

Also seeing this issue. GlobalProtect is not even trying to log in to the portal in this case, it just keeps sending pre-logins directly to the gateway - can anyone else confirm whether this exact behaviour specifically is happening for them?

I'm getting a gateway-prelogin with SAML Request log message on the GlobalProtect logs every few minutes for affected users (which is to say all of them on version 1121 from what I can tell)

Re: GlobalProtect 6.3.3-1121 connects automatically despite on demand is enable

J.Davidson963902 — Fri, 04 Sep 2026 18:14:47 GMT

I've had to tell users to disable GlobalProtect entirely when they don't need it. Just as a workaround (without adding further fuel to the flame by having BYOD users rollback then upgrade again later)

Re: GlobalProtect 6.3.3-1121 connects automatically despite on demand is enable

J.Davidson963902 — Fri, 04 Sep 2026 18:17:55 GMT

Also I'd greatly appreciate if anyone could confirm that this behaviour did not occur in 1046, just in case I have to rollback (as we were on 676 before)