FortiClient 6.4.7 - B&B Bezpieczeństwo w biznesie

Producent oprogramowania Fortinet udostępnił aktualizację dla produktu FortiClient o numerze wersji 6.4.7. W aktualizacji dodano kompatybilność z Windows 11 oraz naprawiono błąd funkcji always-on podczas korzystania z uwierzytelniania SSO, które nie działało prawidłowo. Rozwiązano również problem z logowaniem VPN before logon podczas użytkowania IKEv2 i EAP, podczas użytkowania wymienionych protokołów nie można było zalogować się do VPN przed zalogowaniem do systemu. Po więcej ciekawych informacji zachęcamy do dalszej części artykułu.

Aktualnie wspierane systemy:

Desktop operating systems	Microsoft Windows 11 (64-bit) Microsoft Windows 10 (32-bit and 64-bit) Microsoft Windows 8.1 (32-bit and 64-bit) Microsoft Windows 7 (32-bit and 64-bit) FortiClient 6.4.7 does not support Microsoft Windows XP and Microsoft Windows Vista.
Server operating systems	Microsoft Windows Server 2022 Microsoft Windows Server 2019 Microsoft Windows Server 2016 Microsoft Windows Server 2012 R2 Microsoft Windows Server 2012 Microsoft Windows Server 2008 R2 FortiClient 6.4.7 does not support Windows Server Core. For Microsoft Windows Server, FortiClient (Windows) supports the Vulnerability Scan, SSL VPN, Web Filter, and AV features, including obtaining a Sandbox signature package for AV scanning. To use SSL VPN on a Windows Server machine, you must enable your browser to accept cookies. Otherwise, tunnel connection fails.
Embedded system operating systems	Microsoft Windows 10 IoT Enterprise LTSC 2019
Minimum system requirements	Microsoft Windows-compatible computer with Intel processor or equivalent. FortiClient (Windows) does not support ARM-based processors. Compatible operating system and minimum 512 MB RAM 600 MB free hard disk space Native Microsoft TCP/IP communication protocol Native Microsoft PPP dialer for dialup connections Ethernet network interface controller (NIC) for network connections Wireless adapter for wireless network connections Adobe Acrobat Reader for viewing FortiClient documentation Windows Installer MSI installer 3.0 or later
AV engine	6.00258
FortiAnalyzer	7.0.0 and later 6.4.0 and later
FortiAuthenticator	6.3.0 and later 6.2.0 and later 6.1.0 and later 6.0.0 and later
FortiClient EMS	7.0.0 and later 6.4.1 and later
FortiManager	6.4.0 and later
FortiOS	The following FortiOS versions support IPsec and SSL VPN with FortiClient (Windows) 6.4.7: 7.0.0 and later 6.4.0 and later 6.2.0 and later 6.0.0 and later The following FortiOS versions support endpoint control with FortiClient (Windows) 6.4.7: 6.2.0 and later
FortiSandbox	4.0.0 and later 3.2.0 and later 3.1.0 and later

Rozwiązane problemy:

GUI

Bug ID	Description
725854	Antivirus (AV) scan displays scan progress popup.

Install and deployment

Bug ID	Description
742508	FortiClient is uninstalled using CCleaner with Require password for Disconnect enabled.

Endpoint control

Bug ID	Description
675889	Improve endpoint modification management behavior.
728114	Telemetry status gets stuck on syncing.

Malware Protection and Sandbox

Bug ID	Description
516704	AV should recognize Windows- signed files.
674454	FortiClient on Windows 7 does not block USB drive.
689248	After upgrading FortiClient, user cannot create, save, delete, or rename C:\Backup folder.
693565	Chrome cannot rename temporary download files because Sandbox agent locks them.
700298	FortiClient (Windows) does not submit zip files larger than 200 MB to FortiSandbox.
700396	The device driver cannot be loaded (code 38).
705761	FortiClient (Windows) does not block USB drives despite removable media access being configured to block Windows portable devices.
710899	Excel file save fails.
713557	AntiExploit exceptions do not work.
722597	Keyboards and mouses can be allowed or denied based on human interface device rule.
725936	USB key compatibility.
734993	Rule to block removable media such as a USB drive stops working.

Remote Access

Bug ID	Description
599924	Certificate-based IKEv2 cannot connect without enabling the extensible authentication protocol (EAP).
613868	Always up and autoconnect do not work for SAML SSL VPN connection.
637303	Certificate-only SSL VPN tunnel displays Empty username is not allowed. error.
684913	SAML authentication on SSL VPN with realms does not work.
685959	On booting up the operating system, machine IPsec VPN does not connect.
692822	Token popup has six character limit.
692823	Split DNS has resolution time of more than 30 seconds.
693687	FortiClient does not register any interfaces’ IP addresses to the DNS server when SSL VPN tunnel is up.
693913	Username and password become blank on console when connecting to second remote gateway with SSL VPN.
698407	VPN before logon does not work with IKEv2 and EAP.
700440	Application-based split tunnel does not work.
702764	IPsec VPN connection fails with error that certificate was not loaded.
707882	IPsec VPN fails to autoconnect with Failed to launch IPsec service error (ref.0490188,0555131,0550604).
718178	FortiClient does not support always-on connections when using SAML SSO.
718737	FortiClient is intermittently missing SSL VPN user credentials after Windows logon.
719828	FortiClient fails to allow SSL VPN when it does not have prohibit host tag.
724092	`match_type` does not work when using VPN before logon.
732594	SSL VPN `redundant_sort_method` does not work with realms.
750008	FortiClient caches VPN tunnel username when it is configured not to.
751430	Split tunnel, split DNS, and remote DNS server resolution do not work.

Web Filter and plugin

Bug ID	Description
731982	Web rating overrides behavior between FortiClient Web Filter and FortiOS Web Filter differs.

Zero Trust tags

Bug ID	Description
652897	FortiClient (Windows) tags endpoint as vulnerable when EMS has enabled excluding application vulnerabilities requiring manual update from vulnerabilities
726729	Windows Firewall ZTR does not tag FortiClient when Web Filter is enabled via a group policy object.

Other

Bug ID	Description
737917	Windows 11 support.

Znane problemy:

Install and deployment

Bug ID	Description
716597	Installation using `norestart` parameter requests reboot.
726616	FortiClient 6.4.3 cannot upgrade to 6.4.4.

Endpoint control

Bug ID	Description
751728	FortiClient does not automatically connect to EMS after FortiClient upgrade.

Malware Protection and Sandbox

Bug ID	Description
721038	Customized access rule to allow USB, camera, and bluetooth devices fails when default removable media access is blocked.

Remote Access

Bug ID	Description
710877	SSL VPN with SAML (Azure Active Directory (AD)) and two gateways does not work.
731011	FortiClient gets stuck at 98% connecting to SSL VPN tunnel when integrated with SAML (Azure AD) authentication.

Web Filter

Bug ID	Description
657715	FortiProxy fails to start.
729127	Web Filter affects manufacturing execution system software.

Zero Trust tags

Bug ID	Description
759235	Zero Trust Network Access Bitlocker (BL) policy is not matched despite FortiClient (Windows) having BL protection enabled.

Other

Bug ID	Description
725631	Network interfaces on Windows 10 laptops stay unavailable after hibernation or sleep.

Notatki producenta: FortiClient 6.4.7

Pozdrawiamy,

Zespół B&B
Bezpieczeństwo w biznesie

Post Views: 1 835

6.4.7 FortiClient FortiClient 6.4.7