FortiClient 6.4.9 - B&B Bezpieczeństwo w biznesie

Fortinet udostępnił aktualizację dla produktu FortiClient o numerze wersji 6.4.9. W tej wersji rozwiązano problem z błędnym blokowaniem aplikacji na podstawie „All others unknown applications”, które blokowało dozwolone kategorie w filtrze aplikacji. Rozwiązano problem z agentem SSO Mobility Agent, który nie aktualizował informacji o logowaniu użytkownika lub zmianie adresu IP stacji a następnie nie przekazywał tych informacji do FortiAuthenticatora. Rozwiązano również kilka problemów związanych z czytnikami kart, blokowaniem kart SD, aktualizacją antiexploit.

Aktualnie wspierane systemy:

Desktop operating systems	Microsoft Windows 11 (64-bit) Microsoft Windows 10 (32-bit and 64-bit) Microsoft Windows 8.1 (32-bit and 64-bit) Microsoft Windows 7 (32-bit and 64-bit) FortiClient 6.4.9 does not support Microsoft Windows XP and Microsoft Windows Vista.
Server operating systems	Microsoft Windows Server 2022 Microsoft Windows Server 2019 Microsoft Windows Server 2016 Microsoft Windows Server 2012 R2 Microsoft Windows Server 2012 Microsoft Windows Server 2008 R2 FortiClient 6.4.9 does not support Windows Server Core. For Microsoft Windows Server, FortiClient (Windows) supports the Vulnerability Scan, SSL VPN, Web Filter, and AV features, including obtaining a Sandbox signature package for AV scanning. To use SSL VPN on a Windows Server machine, you must enable your browser to accept cookies. Otherwise, tunnel connection fails.
Embedded system operating systems	Microsoft Windows 10 IoT Enterprise LTSC 2019
Minimum system requirements	Microsoft Windows-compatible computer with Intel processor or equivalent. FortiClient (Windows) does not support ARM-based processors. Compatible operating system and minimum 512 MB RAM 600 MB free hard disk space Native Microsoft TCP/IP communication protocol Native Microsoft PPP dialer for dialup connections Ethernet network interface controller (NIC) for network connections Wireless adapter for wireless network connections Adobe Acrobat Reader for viewing FortiClient documentation Windows Installer MSI installer 3.0 or later
AV engine	6.00258
FortiAnalyzer	7.0.0 and later 6.4.0 and later
FortiAuthenticator	6.3.0 and later 6.2.0 and later 6.1.0 and later 6.0.0 and later
FortiClient EMS	7.0.2 and later 6.4.7 and later
FortiManager	6.4.0 and later
FortiOS	The following FortiOS versions support IPsec and SSL VPN with FortiClient (Windows) 6.4.9: 7.0.0 and later 6.4.0 and later 6.2.0 and later 6.0.0 and later The following FortiOS versions support endpoint control with FortiClient (Windows) 6.4.9: 6.2.0 and later
FortiSandbox	4.0.0 and later 3.2.0 and later 3.1.0 and later

Rozwiązane problemy:

GUI

Bug ID	Description
751299	FortiClient has empty vulnerability detail tab.
752084	GUI for Sandbox exclusion list is not blocked completely and scrolling is impossible.

Install and upgrade

Bug ID	Description
726616	FortiClient cannot upgrade to 6.4.4.
812010	Users can uninstall FortiClient (Windows) if it was installed via .msi from the group policy object.

Application Firewall

Bug ID	Description
654152	All Other Unknown Applications blocks allowed categories in Application Firewall.

Malware Protection and Sandbox

Bug ID	Description
721038	FortiClient (Windows) does not block SD cards when it is configured to block default removable media access.
758665	FortiClient (Windows) does not update antiexploit protection list to have Chrome and Firefox.
784306	FortiClients causes blue screen of death when ACR1281 card reader is plugged in.
820511	Promethean Active Board does not work.

FSSO

Bug ID	Description
683213	FortiClient single sign on mobility agent does not update logon events or IP address changes to FortiAuthenticator and fails to send information intermittently.

Remote Access

Bug ID	Description
634609	Credential provider displays the wrong domain when logging in to Windows 10.
729610	FortiClient (Windows) saves encrypted password incorrectly when save username and password are activated and the password includes special characters.
788765	German characters „” and/or „$” in the end user password activates the SAML button in the GUI.
798044	Using Finnish front vowels [/ ] in the SSL VPN password causes issues when FortiClient (Windows) saves the password.
802323	VPN before login fails to connect with host check rule configured immediately after reboot.
839443	Always up option becomes deselected after user manually disconnects VPN tunnel.
840720	User cannot modify IPsec VPN advanced settings for personal VPN profile.

Web Filter and plugin

Bug ID	Description
804938	All Internet traffic stops when user connects a USB controller (RNDIS).

Deployment and installers

Bug ID	Description
836491	EMS 6.4.8 or later deployments can fail when Require Password to Disconnect from EMS is enabled.

Other

Bug ID	Description
725631	Network interfaces on Windows 10 laptops stay unavailable after hibernation or sleep.

Znane problemy:

Install and upgrade

Bug ID	Description
749331	Windows Security settings show that FortiClient is snoozed when FortiEDR is installed.
773219	FortiClient (Windows) should not allow the user to uninstall it if settings are locked.

Application Firewall

Bug ID	Description
776007	Application Firewall conflicts with Windows firewall, causing issues updating domain group policies.

Endpoint control

Bug ID	Description
693928	After FortiClient migrates to new EMS successfully, it does not remove original EMS from EMS list.
723599	FortiClient uses SASE egress IP address as the public IP address.
789922	FortiClient (Windows) does not reattempt to register to EMS after license assignment until user shuts down or restarts FortiClient (Windows).

Logs

Bug ID	Description
820067	FortiClient forwards logs despide being completely disabled.

Zero Trust Telemetry

Bug ID	Description
683542	FortiClient (Windows) fails to register to EMS if registration key contains special character, such as ” !”#$%&'()*+,-./:;<=>?@[\]^_`{\|}~” .

Malware Protection and Sandbox

Bug ID	Description
606634	FortiClient fails to remove quarantined files after days configured with cullage option.
650383	Number of blocked exploits attempts does not work properly.
760073	FortiClient (Windows) affects USB operation.

Remote Access

Bug ID	Description
743106	IPsec VPN XAuth does not work with ECDSA certificates.
758424	Certificate works for IPsec VPN tunnel if put in current user store but fails to work if it is on the local machine.
762986	If FortiClient (Windows) cannot reach the first remote gateway when connecting to a resilient tunnel from FortiTray, FortiClient does not use the second FortiGate to connect.
780938	SAML connection does not work for international connections.
782393	Application-based split VPN tunnel has issue when using VipWebAppServer.exe application.
786348	FortiClient shows error code -8 or -14 when Limit Users to One SSL-VPN Connection at a Time is enabled on FortiOS with SAML authentication.
790404	GUI is missing SAML button.
795334	Always up feature does not work as expected when trying to connect to VPN form tray.
841970	GUI gets stuck while connecting with SAML to SSL VPN with Azure Active Directory and Duo for multifactor authentication.

Performance

Bug ID	Description
778651	Large downloads and speed tests result in high latency, packet loss, and poor performance.

Web Filter

Bug ID	Description
781874	Website does not load with `ERR_CONTENT_LENGTH_MISMATCH` error.
793017	Web Filter option disconnects an application’s underlying connection.
825633	Error occurs when revoking certificate accessing outlook.office365.com using Web Filter.

Zero Trust tags

Bug ID	Description
704234	Zero Trust tagging rule set syntax to check registry key value is unclear.
731525	FortiClient (Windows) does not properly detect Zero Trust tag for not having antivirus up-to-date.

Other

Bug ID	Description
749458	FortiClient (Windows) displays specific email address related to social network login using Gmail account.

Notatki producenta: FortiClient 6.4.9

Pozdrawiamy,

Zespół B&B
Bezpieczeństwo w biznesie

Post Views: 1 467

FortiClient