When using Symantec Endpoint Protection's (SEP) Location Switching functionality, locations which should match an IP for a Palo Alto Global Protect VPN solution fail on macOS clients. This same criteria works on Windows machines, however.
macOS
The macOS client was unable to properly identify interfaces associated with the Palo Alto Global Protect VPN solution.
This issue is fixed in Symantec Endpoint Protection 14.2 RU1. For information on how to obtain the latest build of Symantec Endpoint Protection, see Download the latest version of Symantec Endpoint Protection.