topic Re: GlobalProtect client for macOS 12 Monterey in General Topics

GlobalProtect client for macOS 12 Monterey

remillet — Tue, 09 Nov 2021 21:45:34 GMT

Anyone know if/when there will be support of GlobalProtect running on macOS 12/Monterey?

Re: GlobalProtect client for macOS 12 Monterey

LAYER_8 — Wed, 10 Nov 2021 01:07:15 GMT

As of guidance last week, we are targeting Monterey for late 5.2.10 (ish) release.

That would put you in the end of December early January timeframe. Usual disclaimer applies of this isn't a promise etc.

Re: GlobalProtect client for macOS 12 Monterey

BPry — Wed, 10 Nov 2021 03:00:18 GMT

@remillet,

Outside of it being officially supported by PAN, the current 5.2.8 agent is working on our macOS Monterey clients without any issues.

Re: GlobalProtect client for macOS 12 Monterey

aleksandar.astardzhiev — Wed, 10 Nov 2021 12:37:36 GMT

Agree with @BPry ,

So var we have only one user running MacOS 12, but without issues for 5.2.7 and 5.2.8 - well except for the known bug with HIP report and ARM chips - GPC-13870

Re: GlobalProtect client for macOS 12 Monterey

MarcinSt — Mon, 29 Nov 2021 21:19:14 GMT

Hello mates.

Unfortunately a bunch of my users (and me, too) suffer from sudden lack of connectivity on macOS 12 with GP 5.2.8-23. It seems like the issue occurs after longer period of user inactivity ( > 8 hours). I haven't found any issue on PAN-OS side and the only solution for time being is to reboot a mac 😞 The issue is not permanent and not repeatable.

I created a support ticket with a lot of debug logs, screenshots, etc. I hope support will find a solution 😞

Re: GlobalProtect client for macOS 12 Monterey

BPry — Tue, 30 Nov 2021 02:42:59 GMT

@MarcinSt

Just generally curious, but why do you have situations where you have a tunnel staying inactive for greater than eight hours without being cleared on the firewall or closed by the agent?

Re: GlobalProtect client for macOS 12 Monterey

MarcinSt — Tue, 30 Nov 2021 16:40:56 GMT

@BPry

I meant lack of user's activity on a mac.

BTW a few minutes ago I opened a lid of my macbook and even if I was able to connect to Internet suddenly it suddenly died. However, this time I change of GW was sufficient to bring it to life again.... 😕

I use one of my macs with newest OS however the second one (which is more important) is usually updated long after release. Unfortunately this time I had to reinstall macos and I did it to Monterey, too....**bleep** happens 😞

Re: GlobalProtect client for macOS 12 Monterey

bklotz — Fri, 17 Dec 2021 21:31:46 GMT

5.2.10 has been released. I don't see any explicit statements in the fixes for either Monterey or Windows 11. Any thoughts?

Re: GlobalProtect client for macOS 12 Monterey

bklotz — Fri, 17 Dec 2021 21:40:16 GMT

Nevermind, I answered my own question. The compatibility matrix has been updated. Yay!

Where Can I Install the GlobalProtect App? (paloaltonetworks.com)

Re: GlobalProtect client for macOS 12 Monterey

MarcinSt — Tue, 11 Jan 2022 17:58:06 GMT

Hello everybody.

I wanted to share that even if I migrated to 5.2.10 same issue still occurs. I found a user who is disconnected once-twice daily (win10). Then during chat with another user he was disconnected twice. GP logs collected, support ticket re-opened 😕

Re: GlobalProtect client for macOS 12 Monterey

jmsepulveda — Thu, 24 Feb 2022 21:15:26 GMT

Hello, is there a solution for this?, we have some clients with the same problem in 5.2.10 with monterey

Re: GlobalProtect client for macOS 12 Monterey

MarcinSt — Fri, 25 Feb 2022 08:21:42 GMT

Hello @jmsepulveda

I recently closed a support ticket in this case.

Information I have got from PANW:

- there is no official bug id for this issue,

- the issue is known and affected versions are from 5.2.8 (as I correctly remember),

- it affects not only macOS but Windows machines, too,

- it is connected to packet fragmentation with in certain circumstances and unfortunately is experienced randomly,

- exact triggering events are not known in details,

- a workaround to this is to DISABLE split tunneling for video traffic (and pray it won't happen 😉 ),

- it will be fixed in 5.2.11 which should be released end of March 2022.

In my infrastructure the issue vanished without any specific reasons. Somehow I connect it to macOS update (12.2.1) but I am unable to confirm and say it for sure.

@jmsepulveda I will be happy to share more information in Zoom or other VC solution if you would like to discuss the case. Just send a message to me.

Regards everybody.

Re: GlobalProtect client for macOS 12 Monterey

jmsepulveda — Fri, 25 Feb 2022 13:10:08 GMT

hello thanks for the information, they did not tell you if this was solved in version 6?, I understand that it is not a preferred version yet, but it can be an alternative

Re: GlobalProtect client for macOS 12 Monterey

MarcinSt — Thu, 10 Mar 2022 12:14:46 GMT

Hello mates 🙂

GP 5.2.11 was released. I have just installed this and testing.

After reviewing the release notes I have to say it is sooooo huge release: a lot of important fixes especially for functionality of handling DNS, macos, MFA, SAML, split tunneling, local networking....

And they declare they fixed this:

GPC-14453 Fixed an issue where the TCP Option lookup for IP fragmented TCP packets caused the endpoint to lose access to internal resources.

It is not direct solution to the issue I experienced ("internal" not "any" resources) but I hope it will solve this, too.

Share your opinions, plz.

Regards 🙂