Producent oprogramowania Fortinet udostępnił najnowszą aktualizację dla produktu FortiClient, oznaczoną numerem wersji 7.2.5. Jednym z kluczowych problemów, które zostały rozwiązane w tej wersji, jest problem z synchronizacją Active Directory (AD), która przestała działać po aktualizacji FortiClient EMS (Endpoint Management Server) do wersji 7.2.3. Dzięki najnowszej poprawce użytkownicy mogą ponownie korzystać z funkcji synchronizacji AD, co jest istotne dla zarządzania tożsamościami i autoryzacją w środowiskach korporacyjnych. Aktualizacja naprawia również błąd związany z wyświetlaniem nieprawidłowej nazwy użytkownika powiązanej z punktem końcowym w EMS. Po więcej informacji, zapraszam do dalszej części artykułu.
Rozwiązane problemy:
Administration
| Bug ID | Description |
|---|---|
| 1036509 | EMS does not log administrator out of GUI based on the configured inactivity timeout when specific widgets are added. |
Install and upgrade
| Bug ID | Description |
|---|---|
| 985789 | After upgrade to FortiClient Cloud 7.2.2, user cannot sync domain. |
| 1010309 | AD sync does not work since upgrade from EMS 7.2.3. |
Dashboard
| Bug ID | Description |
|---|---|
| 974187 | Number of endpoints under Out of Sync in EMS dashboard differ from out of sync endpoints under Endpoints pane. |
| 976000 | FortiClient version widget sort order is incorrect due to string comparison. |
| 978588 | EMS widgets in the dashboard never update. |
Endpoint management
Endpoint policy and profile
Fortinet Security Fabric devices
| Bug ID | Description |
|---|---|
| 986035 | EMS /FortiGate API message change causes EMS to no longer support FortiOS 7.2. |
| 990863 | Zero trust network access (ZTNA) tags do not sync correctly between non-default EMS site and FortiGate. |
| 1058260 | Due to FortiClient keepalive and tag worker timing, tag notifications can be missed when FortiClient comes online. |
Remote Access – SSL VPN
| Bug ID | Description |
|---|---|
| 1044769 | FortiClient fails to establish VPN connection if it cannot reach the internet until <disable_internet_check> is enabled. |
Vulnerability Scan
| Bug ID | Description |
|---|---|
| 954584 | EMS reports endpoint vulnerability when Vulnerability Scan feature is disabled or not installed on endpoint. |
Multitenancy
| Bug ID | Description |
|---|---|
| 1052268 | Site disappears from EMS after renaming. |
Onboarding
| Bug ID | Description |
|---|---|
| 989006 | Azure external user SAML authorization has issue with # character in the name. |
| 997697 | EMS denies endpoint registration attempt due to LDAP authentication failure. |
Deployment and installers
| Bug ID | Description |
|---|---|
| 773672 | Disabling installer ID in FortiClient installer does not take effect. |
| 982536 | When Entra ID device belongs to two Entra ID groups, deployment policy cannot match the endpoint. |
| 1029510 | EMS does not remove deployment checkmark when moving endpoints out of deployment groups. |
Zero Trust tagging
| Bug ID | Description |
|---|---|
| 1003279 | ZTNA AD tag evaluated on EMS does not work as expected with hybrid AD environment. |
| 1008496 | AD group zero trust tag rule stops working. |
| 1024820 | Deleting ZTNA tags temporarily unassigns other tags. |
| 1037111 | Zero Trust tagging rules do not allow for custom operating system versions. |
| 1056225 | EMS cannot use domain tag in Azure hybrid domain environment. |
Endpoint control
Performance
| Bug ID | Description |
|---|---|
| 955037 | Searching for an endpoint takes up to five minutes. |
Logs
| Bug ID | Description |
|---|---|
| 956383 | Log files are not rotated based on log settings from the GUI. |
Upgrade
GUI
| Bug ID | Description |
|---|---|
| 987768 | Zero Trust Tag Monitor page has GUI issues. |
| 987926 | Vulnerability Events are not visible on EMS GUI. |
| 1004777 | Invitations page displays error: Server encountered an error. |
System Settings
| Bug ID | Description |
|---|---|
| 864900 | Endpoint alerts send multiple emails for the same alert. |
| 1019744 | Signature and new installer download fails when Enable SSL is enabled in FortiGuard Services. |
| 1045221 | EMS fails to renew ACME certificate due to „Default.fems.fsg-hosting.com”: Domain name contains an invalid character error. |
Zero Trust Telemetry
| Bug ID | Description |
|---|---|
| 1023404 | Classification tags IP address information does not update on FortiGate unless user deletes and readds tag on EMS. |
Other
| Bug ID | Description |
|---|---|
| 872871 | CSV export file is missing some fields. |
| 914170 | Allowlist & Restore option is missing under Quarantine Management. |
| 976654 | User cannot restore EMS from backup for same patch with different interim build number. |
| 1019826 | When a FortiClient switches VPN IP addresses, EMS receives the new IP address, then drops both connection entries in the database. |
Notatki producenta: FortiClient EMS 7.2.5
Pozdrawiamy,
Zespół B&B
Bezpieczeństwo w biznesie