GlobalProtect 6.3 Released

GlobalProtect 6.3 Released

Am I just being dense or do the release notes list…nothing?

Embedded browser framework upgrade FINALLY!!!

Excited to see that we can finally use FIDO2 and Windows Hello

Did they fix the issue of disable or able to remove the global protect with the pass code is not working? (While on enforcement)

Doesn’t fix bugs that are in 6.2.3

“There are no addressed issues in GlobalProtect app 6.3.0 release.” Well…

From my tests it can finally detect firewall turned on Windows when managed by Cortex XDR.

Super frustrating that this got released before 6.1.5. (The Linux 6.1.5 client is out, but not MacOS or Windows)

Well, we upgraded to 6.3 because our Prisma Engineer advised us and we’ve been having issues with the 2FA OKTA window not rendering correctly and thus not allowing the user to authenticate … and now we have this CVE … (facepalm)

CVE-2024-5915 GlobalProtect App: Local Privilege Escalation (PE) Vulnerability

Versions Affected Unaffected
GlobalProtect App 6.3 < 6.3.1 on Windows >= 6.3.1 (ETA: end of August) on Windows

6.3.1 is officially showing on their website so id presume will begin rolling out shortly

Not just you. Seems like a zero update to me.

Release notes link links to Known issues, go back up on the left pane to look at new features

It’s showing up now on the website, there’s a few new features.

It’s all Prisma Access adds and changes. My bet is they are laying the foundation to push everyone except large environments to Prisma, even more than they already are.

Isn’t the embedded browser update something new? uses WebView2 now?

I see a list of new features in the link provided.

Embedded browser framework upgrade also available in 6.2.3

I tried it, still doesn’t prompt for Security Key when using embedded browser. I’ve only seen this work when using the default browser.

It is working well in Windows but we are struggling to get it functioning in macOS.