Unable to Connect to Global Protect 6.3.4 iPhone and iPads

[mtruong]

Hello everyone,

We're experiencing an issue with GlobalProtect on managed iPads and iPhones version 6.3.4-23. I'm trying to determine whether anyone else has run into this recently.

Environment

• GlobalProtect VPN deployed via Microsoft Intune
• iPadOS devices
• Authentication through PingID (SAML)
• VPN type: Palo Alto Networks GlobalProtect
• Authentication Method: Username and Password
• Automatic VPN: On-Demand VPN
• Split Tunnel: Disabled

Expected Behavior

1. User opens GlobalProtect.
2. User taps Connect.
3. GlobalProtect redirects to our gateway.
4. User is redirected to PingID/SAML authentication.
5. User completes MFA.
6. VPN connects successfully.

Actual Behavior

1. User taps Connect.
2. GlobalProtect begins opening the login page.
3. Before the PingID login screen appears, GlobalProtect displays:

Connection Failed
GlobalProtect failed to connect to the login server. Contact your IT help desk to resolve the issue.
The Internet connection appears to be offline.

The error is displayed in the embedded browser window directed to our GP portal/gateway.

Additional Findings

• Occurs on both Wi-Fi and cellular networks.
• Issue started recently.
• No Intune VPN profile changes were made.
• Users report normal Internet access before launching GlobalProtect.
• The issue occurs before users reach PingID authentication.
• Browsing directly to the GP portal URL from Safari returns "404 Not Found" but does not present certificate warnings.
• The only reliable workaround so far is connecting the iPad to our corporate network first. Once on the corporate network, the authentication process completes successfully.

Any suggestions ?