06-18-2026 05:49 AM
There are issues connecting to my Employer's VPN using GlobalProtect 6.3.3-1016 application.
Where as an older version which we have (v5.2.10-6) is working fine.
PanGPS.log
P1190-T8523 06/18/2026 17:49:05:145 Debug( 200): WAIT_TIMEOUT P1190-T8523 06/18/2026 17:49:05:145 Debug( 733): HipMonitorThread quits. P1190-T16643 06/18/2026 17:49:13:656 Info ( 565): msgtype = portal P1190-T16643 06/18/2026 17:49:13:656 Info (3519): ProcessServerPortal m_bdisconnect = 0 m_tundisconnect = -1 P1190-T16643 06/18/2026 17:49:13:656 Debug(3534): ----Portal Processing starts---- P1190-T16643 06/18/2026 17:49:13:656 Debug(3542): ProcessServerPortal: szCacheOnly: no bRetrieveCacheOnly: 0 P1190-T16643 06/18/2026 17:49:13:656 Debug(3573): ProcessServerPortal: bRefreshToken = 0, m_stopnetevents = 0 , always on tun state = -1 P1190-T16643 06/18/2026 17:49:13:656 Debug( 270): PASvcMan: Set stop request... P1190-T16643 06/18/2026 17:49:13:657 Debug(3609): User profile type is 0(not roaming) P1190-T12035 06/18/2026 17:49:13:657 Debug( 405): PASvcMan: handle stop request ... P1190-T12035 06/18/2026 17:49:13:657 Debug( 588): PASvcMan: Stopping ProxyAgent service .... P1190-T12035 06/18/2026 17:49:13:657 Debug( 607): PASvcMan: ProxyAgent service stopped! P1190-T16643 06/18/2026 17:49:13:659 Debug(3649): pg, source = 0, old source is 0 P1190-T16643 06/18/2026 17:49:13:659 Debug(3672): pg, preferred gateway not set in message, old prefergateway=:) P1190-T16643 06/18/2026 17:49:13:659 Debug(3729): CheckUpdate is false. )P1190-T16643 06/18/2026 17:49:13:659 Debug(3754): portal-certificate-verification is yes P1190-T16643 06/18/2026 17:49:13:659 Debug(3770): full-chain-cert-verify From saved portal setting is P1190-T16643 06/18/2026 17:49:13:661 Debug(3837): gets saml user name [email protected]. P1190-T16643 06/18/2026 17:49:13:661 Debug(3854): No saml-load-cache tag. P1190-T16643 06/18/2026 17:49:13:661 Debug(3862): saml-auth-error is P1190-T16643 06/18/2026 17:49:13:661 Debug(3890): allow-cached-portal is yes P1190-T16643 06/18/2026 17:49:13:661 Debug(3935): NewWinUser is myUsername, WinUser is , PreviousSwitchOffMsg is false P1190-T16643 06/18/2026 17:49:13:661 Debug(3936): GetPrelogonStatus() 0, m_userName ___empty_username___, m_preUsername myUsername%40env.employerDomain.com, IsVPNConnected 0 P1190-T16643 06/18/2026 17:49:13:661 Debug(4978): Grace period is 0 P1190-T16643 06/18/2026 17:49:13:661 Debug(3947): isNotUserSwitchOrRDP 0, isNotPrelogonFirstLogin 0, hasPreExistingConditions 1 P1190-T16643 06/18/2026 17:49:13:661 Debug(8697): StopThreads starts: P1190-T16643 06/18/2026 17:49:13:661 Debug(8704): There are 5 threads running... P1190-T16643 06/18/2026 17:49:13:661 Debug(1483): Logging out gateway, reason is StopThreads P1190-T25895 06/18/2026 17:49:13:661 Debug(7962): HipReportThread: got exit event. P1190-T25895 06/18/2026 17:49:13:661 Debug(8205): HipReportThread: HipReportThread quits. P1190-T16643 06/18/2026 17:49:13:661 Debug(1522): Logging out gateway over P1190-T16643 06/18/2026 17:49:13:661 Debug(8714): Going to wait all threads exit... P1190-T21803 06/18/2026 17:49:13:661 Debug(7054): NotificationTimerThread: got exit event. P1190-T20511 06/18/2026 17:49:13:661 Debug(8391): NetworkConnectionMonitorThread: got exit event. P1190-T20287 06/18/2026 17:49:13:661 Debug(7137): Received thread quite event while waiting for federal mandate P1190-T20287 06/18/2026 17:49:13:661 Debug(7632): NetworkDiscoverThread: quits. P1190-T19503 06/18/2026 17:49:13:661 Info (1811): Read route socket returns -1 P1190-T19503 06/18/2026 17:49:13:661 Debug(1877): RouteReadThread exited. P1190-T18731 06/18/2026 17:49:13:661 Debug( 213): CaptivePortalDetectionThread: got exit event. P1190-T18731 06/18/2026 17:49:13:661 Debug( 412): CaptivePortalDetectionThread: captive portal detection thread exit status is (failed). P1190-T20511 06/18/2026 17:49:13:661 Debug(8406): NetworkConnectionMonitorThread: quits. P1190-T16643 06/18/2026 17:49:13:799 Debug(8718): threads are gracefully stopped, counter=599. P1190-T16643 06/18/2026 17:49:13:799 Debug(8731): Double check all threads. P1190-T16643 06/18/2026 17:49:13:799 Debug(8782): To reset thread quit event. P1190-T22567 06/18/2026 17:49:13:799 Debug( 244): HipCheckThread: got thread exit event. P1190-T22567 06/18/2026 17:49:13:799 Debug( 290): HipCheckThread: Hip check thread quits. P1190-T20051 06/18/2026 17:49:13:799 Debug( 439): HipMissingPatchThread: got thread exit event. P1190-T20051 06/18/2026 17:49:13:799 Debug( 537): HipMissingPatchThread: Hip check missiing patch thread quits. P1190-T16643 06/18/2026 17:49:13:799 Debug( 134): All hip collect threads quit gracefully. P1190-T16643 06/18/2026 17:49:13:799 Debug(8792): StopThreads ends. P1190-T16643 06/18/2026 17:49:13:799 Debug(3984): Reset user signout flag P1190-T16643 06/18/2026 17:49:13:799 Debug(8661): StartThreads starts: P1190-T22571 06/18/2026 17:49:13:799 Debug(6869): NotificationTimerThread: notification timer thread starts. P1190-T22571 06/18/2026 17:49:13:799 Debug(7047): NotificationTimerThread: wait (-1 ms) for notification timer event. P1190-T20067 06/18/2026 17:49:13:799 Debug( 30): CaptivePortalDetectionThread: captive portal detection thread starts. P1190-T20067 06/18/2026 17:49:13:799 Debug( 210): CaptivePortalDetectionThread: wait (-1 ms) for captive portal detection event. P1190-T20515 06/18/2026 17:49:13:799 Debug(7092): NetworkDiscoverThread: network discover thread starts. P1190-T20515 06/18/2026 17:49:13:799 Debug(7105): Start NetworkDiscoverThread P1190-T16643 06/18/2026 17:49:13:799 Debug(4005): Update GP disable status to false P1190-T18739 06/18/2026 17:49:13:799 Debug(7928): HipReportThread: HipReportThread starts up. P1190-T18739 06/18/2026 17:49:13:799 Debug(7954): HipReportThread: wait for HIP report ready event. P1190-T19507 06/18/2026 17:49:13:799 Debug(8213): NetworkConnectionMonitorThread: network connection monitor thread starts. P1190-T20299 06/18/2026 17:49:13:799 Debug( 169): Start HipCheckThread P1190-T20299 06/18/2026 17:49:13:799 Debug( 212): HipCheckThread started... P1190-T20299 06/18/2026 17:49:13:799 Debug( 218): HipCheckThread: wait for hip check event for 3600000 ms); P1190-T21811 06/18/2026 17:49:13:799 Debug( 178): Start HipMissingPatchThread P1190-T21811 06/18/2026 17:49:13:799 Debug( 413): HipMissingPatchThread started... P1190-T25907 06/18/2026 17:49:13:799 Debug( 188): Start HipMonitorThread P1190-T25907 06/18/2026 17:49:13:799 Info ( 729): HipMonitorThread starts P1190-T8547 06/18/2026 17:49:13:799 Debug(1863): RouteReadThread entered. P1190-T16643 06/18/2026 17:49:13:802 Debug(6012): PanIntelligentPortal: intelligent_portal 0 always_on 1 P1190-T16643 06/18/2026 17:49:13:802 Debug(4112): Skip parsing user because saml user name is not empty P1190-T16643 06/18/2026 17:49:13:802 Debug(14314): Saved password is empty. P1190-T16643 06/18/2026 17:49:13:802 Debug(4226): Portal vpn.****.**********.com, user [email protected], logonDomain , saved user [email protected], path /Users/myUsername/Library/Application Support/PaloAltoNetworks/GlobalProtect/ P1190-T16643 06/18/2026 17:49:13:802 Debug(4292): use proxy is 1 P1190-T16643 06/18/2026 17:49:13:802 Debug(1717): SSO GetSsoCredential starts. P1190-T16643 06/18/2026 17:49:13:812 Debug(14331): SSO password is empty P1190-T16643 06/18/2026 17:49:13:812 Debug(4513): m_preUsername ___empty_username___ P1190-T16643 06/18/2026 17:49:13:812 Debug(14291): Password is empty. P1190-T16643 06/18/2026 17:49:13:812 Debug(10152): User name for cached portal confg: myUsername%40env.employerDomain.com P1190-T16643 06/18/2026 17:49:13:812 Debug(4525): bCheckCachedPortalForPrelogon is 0 P1190-T16643 06/18/2026 17:49:13:812 Debug(4528): nPrelogonStatus is 0 P1190-T16643 06/18/2026 17:49:13:812 Debug(4534): m_bHello: 0, m_isPrelogonEnabled: 0, GetPrelogonStatus(): 0 P1190-T16643 06/18/2026 17:49:13:812 Debug(4546): CheckCachedPortalForPrelogon 0, PrelogonNeedTimeout 0, RenameTimeout -1, userName myUsername%40env.employerDomain.com, preUsername ___empty_username___ P1190-T16643 06/18/2026 17:49:13:812 Info (13511): Portal config does not exist, try registry/plist P1190-T16643 06/18/2026 17:49:13:812 Debug(4799): Use ssl tunnel is no P1190-T16643 06/18/2026 17:49:13:812 Debug(4809): bCheckCachedPortalForPrelogon: 0, m_bOnDemand: 0 P1190-T16643 06/18/2026 17:49:13:812 Debug(8846): --Set state to Retrieving configuration... P1190-T16643 06/18/2026 17:49:13:812 Debug(2051): unknown network type. P1190-T20515 06/18/2026 17:49:13:812 Debug(6012): PanIntelligentPortal: intelligent_portal 0 always_on 1 P1190-T20515 06/18/2026 17:49:13:812 Debug(7108): ProcessIntelligentPortal: NetworkDiscoverThread ChangePortal false P1190-T20515 06/18/2026 17:49:13:812 Debug(7131): NetworkDiscoverThread: wait for fed mandate event. P1190-T16643 06/18/2026 17:49:13:815 Debug(4461): Reachability check for address ***.**.**.** passed P1190-T16643 06/18/2026 17:49:13:843 Debug(17362): Portal's ipv4 address ***.**.**.** P1190-T16643 06/18/2026 17:49:13:843 Debug(10252): SSO enable status is 0, user name is [email protected], domain name is . P1190-T16643 06/18/2026 17:49:13:843 Debug(2313): SetProxyForHost host vpn.****.**********.com m_bUseProxy 1 m_bProxyMultipleAutoDetect 0 P1190-T16643 06/18/2026 17:49:13:843 Debug(2336): Set Proxy for Host vpn.****.**********.com P1190-T16643 06/18/2026 17:49:13:843 Debug(8908): ----Portal Pre-login starts---- P1190-T16643 06/18/2026 17:49:13:843 Debug(8919): Skip portal prelgoin for saml P1190-T16643 06/18/2026 17:49:13:843 Debug(11370): ----Portal Login starts---- P1190-T16643 06/18/2026 17:49:13:843 Debug(11374): m_szSavedUserName is myUsername%40env.employerDomain.com P1190-T20067 06/18/2026 17:49:13:843 Debug( 236): CaptivePortalDetectionThread: IsDetectingCaptivePortal=1, PreLoginIsDone=0 P1190-T20067 06/18/2026 17:49:13:843 Debug( 210): CaptivePortalDetectionThread: wait (2000 ms) for captive portal detection event. P1190-T16643 06/18/2026 17:49:13:843 Debug(3240): Failed to open file /Users/myUsername/Library/Application Support/PaloAltoNetworks/GlobalProtect/PanPUAC_f64f6a605f3e7ac43020aa1cb5553128.dat P1190-T16643 06/18/2026 17:49:13:843 Info ( 624): EVP_DecryptFinal_ex failed P1190-T16643 06/18/2026 17:49:13:843 Debug(11267): Failed to decrypt data P1190-T16643 06/18/2026 17:49:13:843 Debug(11322): Failed to get portal user password. P1190-T16643 06/18/2026 17:49:13:843 Debug(10152): User name for cached portal confg: myUsername%40env.employerDomain.com P1190-T16643 06/18/2026 17:49:13:843 Debug( 619): pan_read_text_from_file(): File does not exist. File: /Users/myUsername/Library/Application Support/PaloAltoNetworks/GlobalProtect/PanPCD_f64f6a605f3e7ac43020aa1cb5553128.dat P1190-T16643 06/18/2026 17:49:13:843 Debug(3450): cannot restore portal config digest /Users/myUsername/Library/Application Support/PaloAltoNetworks/GlobalProtect/PanPCD_f64f6a605f3e7ac43020aa1cb5553128.dat. P1190-T16643 06/18/2026 17:49:13:843 Debug(3240): Failed to open file /Users/myUsername/Library/Application Support/PaloAltoNetworks/GlobalProtect/PanPUAC_f64f6a605f3e7ac43020aa1cb5553128.dat P1190-T16643 06/18/2026 17:49:13:844 Debug( 619): pan_read_text_from_file(): File does not exist. File: /Library/Application Support/PaloAltoNetworks/GlobalProtect/PanPPAC_cd31cc1468fb936ad7ea1489ef3058c9.dat P1190-T16643 06/18/2026 17:49:13:844 Debug(3215): Unserialized empty cookie for portal vpn.****.**********.com and pre-logon user. P1190-T16643 06/18/2026 17:49:13:844 Debug(11460): IsInPrelogon() 0, GetPrelogonStatus() 0 P1190-T16643 06/18/2026 17:49:13:844 Info ( 624): EVP_DecryptFinal_ex failed P1190-T16643 06/18/2026 17:49:13:844 Debug(11267): Failed to decrypt data P1190-T16643 06/18/2026 17:49:13:844 Debug(11487): Failed to get portal login password. P1190-T16643 06/18/2026 17:49:13:844 Debug( 330): ClearHipCustomCheckInfo(): pHipCustomCheckInfo is NULL. P1190-T16643 06/18/2026 17:49:13:844 Debug( 85): ClearHipCustomCheckRegKeyInfo(): pHipCustomCheckRegKeyInfo is NULL. P1190-T16643 06/18/2026 17:49:13:844 Debug( 619): pan_read_text_from_file(): File does not exist. File: /Library/Application Support/PaloAltoNetworks/GlobalProtect/PanPortalCfgCriteria_f64f6a605f3e7ac43020aa1cb5553128.dat P1190-T16643 06/18/2026 17:49:13:844 Debug( 77): Portal config criteria is restored. P1190-T16643 06/18/2026 17:49:13:844 Debug( 619): pan_read_text_from_file(): File does not exist. File: /Library/Application Support/PaloAltoNetworks/GlobalProtect/PanPortalCfgCriteria_f64f6a605f3e7ac43020aa1cb5553128.dat P1190-T16643 06/18/2026 17:49:13:844 Debug(11560): m_szDomainAndUsername is myUsername%40env.employerDomain.com P1190-T16643 06/18/2026 17:49:13:844 Debug(17525): Portal auth method: saml, auth src: IDP P1190-T16643 06/18/2026 17:49:13:844 Debug( 426): Original host vpn.****.**********.com(vpn.****.**********.com) P1190-T16643 06/18/2026 17:49:13:844 Debug( 146): set session proxy to 1-0x1047513f0. P1190-T16643 06/18/2026 17:49:13:844 Debug( 679): Portal or gateway login, set connect timeout to 30.0 P1190-T16643 06/18/2026 17:49:13:844 Info (13511): Portal config does not exist, try registry/plist P1190-T16643 06/18/2026 17:49:13:844 Debug( 721): Cannot get gateway client cert path P1190-T16643 06/18/2026 17:49:13:844 Info ( 472): Timeouts monitor started, LocalDataTask <5EFC5782-526C-480F-8C43-44854E280254>.<2>, connect timeout 30.0, receive timeout 30.0 P1190-T20067 06/18/2026 17:49:15:918 Debug( 77): CPD, reset cp detection history P1190-T20067 06/18/2026 17:49:15:919 Debug(2484): pan_get_gp_user_agent szGpUserAgent ua is PAN GlobalProtect/6.3.3-1016 (Apple Mac OS X 26.5.1). P1190-T20067 06/18/2026 17:49:15:990 Debug( 209): CPD, pan_http_captive_portal_detection: status is 200 P1190-T20067 06/18/2026 17:49:15:990 Debug( 222): CPD, pan_http_captive_portal_detection() - captive portal isn't detected against server. P1190-T20067 06/18/2026 17:49:16:083 Debug( 96): CPD, index=0, iRet=-1, lastError=0 P1190-T20067 06/18/2026 17:49:16:083 Debug( 132): CPD, CaptivePortalDetectionThread: captive portal is not detected for CP server. iStatus = 200 P1190-T20067 06/18/2026 17:49:16:083 Debug(2484): pan_get_gp_user_agent szGpUserAgent ua is PAN GlobalProtect/6.3.3-1016 (Apple Mac OS X 26.5.1). P1190-T19027 06/18/2026 17:49:16:780 Debug(1155): Received challenge NSURLAuthenticationMethodServerTrust, queue [NSOperationQueue 0x126704780 (QOS: USER_INITIATED)] P1190-T19027 06/18/2026 17:49:16:795 Debug(1213): Trust evaluation result { RevocationInfo = ( { ocsp = { }; valid = { ... }; }, { ocsp = { }; valid = { ... }; }, { ocsp = { }; } ); TrustCertificateTransparency = 1; TrustEvaluationDate = "2026-06-18 12:19:16 +0000"; TrustResultDetails = ( { }, { }, { } ); TrustResultValue = 4; } P1190-T19027 06/18/2026 17:49:16:795 Debug(1238): Trust evaluation properties ( { error = "No error."; title = "vpn.****.******.com"; }, { title = "Amazon RSA 2048 M04"; }, { title = "Amazon Root CA 1"; } ) P1190-T19027 06/18/2026 17:49:16:795 Info ( 709): Server is trusted vpn.****.**********.com(vpn.****.**********.com) P1190-T16643 06/18/2026 17:49:17:083 Info ( 584): Finished with vpn.****.**********.com:443 P1190-T16643 06/18/2026 17:49:17:083 Debug( 536): error detail is HTTPS User Authentication failure. P1190-T16643 06/18/2026 17:49:17:083 Debug( 420): received no data P1190-T16643 06/18/2026 17:49:17:083 Debug( 575): m_bUserAuthentication is set to false. P1190-T16643 06/18/2026 17:49:17:083 Debug(18030): Auth failed. Private header is auth-failed-invalid-http-arg P1190-T16643 06/18/2026 17:49:17:083 Debug( 790): portalType: 0 P1190-T16643 06/18/2026 17:49:17:083 Info (13511): Portal config does not exist, try registry/plist P1190-T16643 06/18/2026 17:49:17:083 Debug( 815): GetHttpResponse: m_errorDetails is HTTPS User Authentication failure.. P1190-T16643 06/18/2026 17:49:17:083 Debug(11853): Portal config is NULL. P1190-T16643 06/18/2026 17:49:17:083 Debug(10348): Return false for saml/cas auth P1190-T16643 06/18/2026 17:49:17:083 Debug(10349): m_preUsername ___empty_username___, IsInPrelogon() 0 P1190-T16643 06/18/2026 17:49:17:083 Error(9637): Portal auth failed but SAML/CAS auth is successful P1190-T16643 06/18/2026 17:49:17:086 Debug(2644): Send response to client for request portal P1190-T20067 06/18/2026 17:49:17:109 Debug( 209): CPD, pan_http_captive_portal_detection: status is 204 P1190-T20067 06/18/2026 17:49:17:109 Debug( 215): CPD, no matching string P1190-T20067 06/18/2026 17:49:17:120 Debug( 96): CPD, index=1, iRet=-1, lastError=-1 P1190-T20067 06/18/2026 17:49:17:121 Debug( 132): CPD, CaptivePortalDetectionThread: captive portal is not detected for CP server. iStatus = 204 P1190-T20067 06/18/2026 17:49:17:121 Debug(2484): pan_get_gp_user_agent szGpUserAgent ua is PAN GlobalProtect/6.3.3-1016 (Apple Mac OS X 26.5.1). P1190-T20067 06/18/2026 17:49:17:225 Debug( 209): CPD, pan_http_captive_portal_detection: status is 200 P1190-T20067 06/18/2026 17:49:17:225 Debug( 222): CPD, pan_http_captive_portal_detection() - captive portal isn't detected against server. P1190-T20067 06/18/2026 17:49:17:268 Debug( 96): CPD, index=2, iRet=-1, lastError=-1 P1190-T20067 06/18/2026 17:49:17:268 Debug( 132): CPD, CaptivePortalDetectionThread: captive portal is not detected for CP server. iStatus = 200 P1190-T20067 06/18/2026 17:49:17:268 Debug( 362): CaptivePortalDetectionThread: Didn't detect captive portal currently, and bCaptivePortalDetectedOnce=(0). P1190-T20067 06/18/2026 17:49:17:268 Debug( 210): CaptivePortalDetectionThread: wait (-1 ms) for captive portal detection event. P1190-T25907 06/18/2026 17:49:43:811 Debug( 200): WAIT_TIMEOUT P1190-T25907 06/18/2026 17:49:43:811 Debug( 733): HipMonitorThread quits.
Old version we have that works: 5.2.10-6
New version we are trying to upgrade to which doesn't work: 6.3.3-1016
Things we tried so far:
None of the above options has worked.
Please help.
And I am not alone, there are people who are experiencing the same issue as it can be seen in this reddit thread:
https://www.reddit.com/r/paloaltonetworks/comments/1u2wz9y/globalprotect_6331016_issues_on_macos_265...
