Known issues
The following issues have been identified in FortiClient (Windows) 7.2.4. For inquiries about a particular bug or to report a bug, contact Customer Service & Support.
Administration
|
Bug ID |
Description |
|---|---|
| 867818 | fortishield.sys and fortimon3.sys are incompatible with HVCI. |
Application Firewall
| Bug ID | Description |
|---|---|
|
814391 |
FortiClient Cloud application signatures block allowlisted applications. |
|
827788 |
Threat ID is 0 on Firewall Events. |
|
834500 |
FortiClient (Windows) fails to block Application Firewall categories when Web Client category is set as Monitor. |
| 842534 | After upgrade, Application Firewall blocks internal webpage. |
| 844997 | FortiClient loses several packets on different internal resources after connecting telemetry. |
|
860062 |
Application Firewall slows down opening of Microsoft Entra ID Users and Computers application. |
| 869671 | FortiClient (Windows) bypasses Application Firewall block after matching detection rule. |
| 879985 | Application Firewall fails to block Web.Client category HTTPS traffic. |
| 884911 | FortiClient detects IntelliJ IDEA Community Edition 2021.2.2 as Java.Debug.Wire.Protocol.Insecure.Configuration. |
| 902866 | Application Firewall does not block Google Drive. |
| 958651 | Application Firewall violation list always shows violated programs as the same as applications, which is not as accurate as Windows. |
| 980803 | Image becomes corrupted or damaged with a green patch when trying to view it from a shared location. |
Avatar and social network login
|
Bug ID |
Description |
|---|---|
|
878050 |
FortiClient avatar does not update on FortiOS dashboards and FortiOS cannot show updated information. |
|
950503 |
FortiClient does not use image that user uploaded as their avatar. |
| 1010145 | FortiClient (Windows) grays out avatar page when using Salesforce login. |
Chromebook
|
Bug ID |
Description |
|---|---|
| 997927 | On Chromebook, fallback action is to override exclusion list, which is unlike FortiClient (Windows). |
Configuration
|
Bug ID |
Description |
|---|---|
|
730415 |
FortiClient backs up configuration that is missing locally configured zero trust network access (ZTNA) connection rules. |
Deployment and installers
Endpoint control
Endpoint management
| Bug ID | Description |
|---|---|
| 916566 | FortiClient reports USB as blocked but user can access the storage files. |
GUI
| Bug ID | Description |
|---|---|
|
888185 |
FortiClient does not minimize after successful VPN connection. |
| 902595 | SAML prompt flashes on autoconnect. |
| 981993 | Remote Access GUI shows an incorrect message when FortiClient (Windows) is unregistered from EMS. |
|
990496 |
FortiClient flickers and opens. |
| 1011345 | GUI has mistranslation in Slovak for Cloud Sandbox. |
Endpoint policy and profile
|
Bug ID |
Description |
|---|---|
| 889517 | EMS fails to assign the correct endpoint policy and shows FortiClient as out-of-sync despite the client syncing. |
| 915678 | FortiClient does not send acknowledged event to EMS if it disconnects and reconnects to EMS immediately after the user acknowledges the one-way message. |
|
989640 |
FortiClient does not follow EMS profile after EMS updates feature selecting setting. |
Endpoint security
|
Bug ID |
Description |
|---|---|
| 975704 | FortiClient does not report most recent completed scan timestamp to EMS and causes last scan time to show incorrectly on EMS dashboard. |
Install and upgrade
|
Bug ID |
Description |
|---|---|
|
955268 |
User can uninstall FortiClient when it is registered to EMS. |
| 960301 | FortiClient fails to install due to orphaned registry key. |
|
982747 |
FortiPAM password filter extension is not removing automatically from Firefox when FortiClient (Windows) is uninstalled. |
|
993353 |
FortiClient is missing telemetry pages after upgrading from 7.2.2 to 7.2.3. |
Malware Protection and Sandbox
Zero Trust tags
| Bug ID | Description |
|---|---|
|
1002079 |
Security Zero Trust tagging rule to tag endpoints where automatic updates are enabled does not work as expected. |
| 1013973 | Host check policy does not work as expected when using OR logic. |
Software Inventory
|
Bug ID |
Description |
|---|---|
| 737970 | Software Inventory on EMS does not properly reflect software changes (adding/deleting) on Windows endpoints. |
| 844392 | Software Inventory shows last installation time in future. |
Performance
|
Bug ID |
Description |
|---|---|
| 1012529 | FortiClient constantly and very frequently writes event files and cause CPU and overheating issues. |
| 1015900 | FortiESNAC has high RAM consumption on Windows servers. |
Quarantine management
|
Bug ID |
Description |
|---|---|
| 1009212 | EMS FCrestorequarant tool does not delete the restored file from quarantine folder. |
RTP
|
Bug ID |
Description |
|---|---|
| 1013796 | Real-time protection (RTP) scans compressed files above maximum file size defined in EMS. |
Remote Access
|
Bug ID |
Description |
|---|---|
| 973808 | On a non-compliant endpoint using a non-English OS, such as Spanish, FortiClient (Windows) fails to show warning prompt when trying to connect to VPN. |
| 992814 | Disclaimer acceptance always pops up when VPN always on is configured. |
| 997718 | When FortiClient enables autoconnect, it behaves like always-up is enabled. |
| 1000706 | VPN before Windows logon requires second attempt -due to CachedLogonsCount issue. |
| 1021770 | Connecting to VPN in FortiTray does not open Remote Access tab when a remote gateway is not reachable. |
Remote Access - IPsec
|
Bug ID |
Description |
|---|---|
| 758424 | Certificate works for IPsec VPN tunnel if put on local computer but fails to work if same certificate is in current user store. |
| 969995 | Autoconnect does not work reliably with IPsec VPN using username/password with one-time password and client certificate. |
| 971554 | FortiClient (Windows) sends access request for IPsec VPN when password renewal is canceled. |
| 986732 | After upgrading, IPsec VPN IKEv2 tunnel stops working. |
| 995970 | FortiClient (Windows) has GUI issues if connecting from FortiTray and the default tab is Remote Access. |
| 997277 | FortiClient autoconnects without autoconnect configured. |
| 1003780 | IPsec VPN IKEv1 with certificate authentication has connection issues when off-net. |
| 1005618 | IPsec VPN fails to connect if R3 Intermediate certificate is NOT imported and ISRG Root X1 issues FortiGate server certificate. |
Remote Access - SSL VPN
Vulnerability Scan
|
Bug ID |
Description |
|---|---|
|
795393 |
Vulnerability events are not removed from EMS after successful patch. |
| 849485 | FortiClient wrongly detects AnyDesk vulnerabilities CVE-2021-44426 and CVE-2021-44425. |
| 869253 | FortiClient (Windows) detects vulnerability when the required KB is installed. |
| 989431 | Vulnerability Scan recognizes Windows 10 as Windows 11. |
| 1010776 | FortiClient detects incorrect vulnerability for Rocket.chat and Rocket.chat.electron. |
| 1011358 | Vulnerability Scan shows no results, but Qualys reports multiple for same endpoints. |
Logs
|
Bug ID |
Description |
|---|---|
| 849043 | SSL VPN add/close action does not show on FortiGate Endpoint Event section. |
| 903480 | FortiClient (Windows) fails to generate log message to FortiAnalyzer or EMS when ZTNA tag prohibits VPN access. |
|
948887 |
FortiClient does not send Windows log of Exchange Server logon failure (Event ID 4625). |
| 965729 | FortiClient (Windows) does not send Web Filter monitor and block categories logs to FortiAnalyzer. |
| 979323 | FortiClient does not send any logs to FortiAnalyzer unless Log All URLs is enabled. |
| 984729 | Traffic logs do not populate on FortiAnalyzer. |
| 985044 | FortiClient log level does not change from debug and user cannot delete log files from "%AppData%". |
| 988706 | Web Filter log in FortiAnalyzer does not have URL information. |
| 993163 | FortiClient (Windows) does not generate fcdblog log file in the trace logs folder. |
| 996345 | Disabling logging from EMS profile still results in it being enabled. |
| 996767 | FortiAnalyzer does not show endpoint logs after endpoint upgrade from 7.0.9 to 7.2.3. |
| 1016539 | Vulnerability reports do not display username information in FortiAnalyzer. |
Web Filter and plugin
| Bug ID | Description |
|---|---|
| 519066 | User cannot print to WSD network printer when FortiProxy is enabled. |
| 836906 | After FortiClient install, extended uptime results in audio cracking. |
| 851700 | Users get popup message from FortiClient: Microsoft Edge extension policy anomaly detected, please restart browser. |
| 871325 | Web Filter breaks DW Spectrum. |
| 875298 | Exclusion list does not work properly with regular expressions. |
|
883568 |
Web Filter causes Docker pull command to fail and connectivity issues afterward. |
| 890433 | Firefox extension is stuck on older version. |
| 903426 |
User cannot access internal application with Web Filter enabled. Workaround: Add a simple rule to allow HTTP/HTTPS server IP addresses. |
| 904840 | When a user is performing a device recovery in iTunes, error 3500 occurs. |
| 909060 | User cannot update information on internal portal with Web Filter active. |
| 911410 | Safe Search restriction level does not apply properly if it is enabled for both Web and Video Filters. |
| 939986 | Web Filter blocks LUXTRUST middleware. |
| 948500 | Video Filter does not block YouTube channel if channel ID case changes in the URL. |
| 962502 | Web Filter does not respect exclusion list when imported from FortiGate with web category overrides. |
| 978252 | Microsoft Edge guest browsing bypasses Web Filter blocked sites. |
| 996420 | Web Filter has issue with resolved IP addresses in multiple ISDB objects such as cloud applications. |
| 997118 | Web Filter extension does not apply DNS restrictions when Safe Search is enabled on Web Filter profile. |
| 998747 | FortiClient does not block Gmail when using Gmail link in Chrome browser. |
| 999256 | FortiClient (Windows) blocks some HTTP exclusions that it should allow. |
| 1002532 | FortiClient does not take exceptions set on Web Filter profile and blocks download of RDP plugin, blocking access to server. |
| 1008112 | Web Filter blocks downloading some files in web.whatsapp.com and always shows block page. |
| 1013487 | Web Filter blocks WebEx as unrated. |
ZTNA connection rules
FSSOMA
|
Bug ID |
Description |
|---|---|
| 900953 | SSOMA does not send SSO sessions information to FortiAuthenticator. |
|
909844 |
FSSO sessions drop earlier than expected. |
|
964769 |
FSSOMA for Entra ID does not send tenant ID to FortiAuthenticator. |
|
995379 |
FSSOMA does not properly install on CIS hardened Windows 10 and 11 image. |
Onboarding
|
Bug ID |
Description |
|---|---|
|
982079 |
FortiClient Cloud invitation with LDAP verification type to Entra ID fails with Azure Token Required error. |
| 1014158 | Telemetry page shows Connecting to EMS continuously when user authentication fails. |
PAM
|
Bug ID |
Description |
|---|---|
| 993068 | Firefox FortiPAM launch secret does not record screen for newly opened tabs. It only records the first tab opened from launch secret. |
|
993164 |
manifest.json needs update in Firefox PAM extension to include autoupdate link. |
| 1001231 | FortiPAM extension does not support Firefox. |
|
1015585 |
FortiClient (Windows) closes entire MobeXterm application when a launched secret reaches the max session duration. |
Other
|
Bug ID |
Description |
|---|---|
| 834389 | FortiClient has incompatibility with Fuji Nexim software. |
| 919017 | FortiClient changes the checksum hash of the installer for Baramundi Management Agent. |
| 984763 | NETIO.SYS/FortiWF2.sys causes blue screen of death (BSOD) on Windows 10. |
| 998183 | FortiESNAC.exe crashes and fails to update signatures. |
| 999139 | Laptop Wi-Fi DNS setting gets stuck in unknown DNS server after FortiClient connects to and disconnects from IPsec or SSL VPN. |
| 1006130 | FortiShield.sys causes BSOD with FortiClient. |
|
1013438 |
FortiClient blocks RADIUS authentication on Arube HPE switch ports. |
|
1015385 |
Redstor Backup Pro causes BSOD when FortiClient (Windows) scans it. |