Update: Working well in production - recommended.
One cosmetic caveat: In the OSX client, if you go into the Panel -> Host State tab, you will find that for many categories, the Prod data is not displayed. Its cosmetic only - the correct data does go to the firewalls. Fix is slated for version 2.3.4.
Some good news for the day: The GlobalProtect 2.3.3-5 client with application content 539 (or later) seems to be the magic combination. Both VPN and HIP Checks are working properly on our OSX 10.11.1 test "victim" machines. User testing is scheduled - but so far, so good
Jason
... View more