Aktualizacja produktu FortiClient do wersji 6.2.0 wprowadza nową strukturę licencyjną do zarządzania końcówkami z zainstalowanym oprogramowaniem FortiClient 6.2.0! Nowością w tej wersji jest wsparcie dla FortiSandbox Cloud, a konfiguracja, licencjonowanie oraz zarządzane odbywa się z poziomu EMS. Poza tym wersja 6.2.0 umożliwia dynamiczne grupowanie klientów końcowych, same grupy widoczne są z poziomu FortiGate co umożliwia użycie każdej z nich w politykach bezpieczeństwa aby zapewnić dynamiczną kontrolę dostępu. Zachęcamy do lektury!

Co nowego?:

• Fortinet wycofuje darmową wersję próbną FortiClienta która umożliwiała podłączenie do dziesięciu klientów końcowych do FortiGate
• Darmowa wersja FortiClient 6.2.0 oferuje tylko i wyłącznie IPsec oraz SSL VPN jednocześnie nie wymagając rejestracji z poziomu EMS. Wersja ta nie zawiera funkcji centralnego zarządzania, wsparcia technicznego oraz innych zaawansowanych funkcji
• Dynamiczne grupowanie / oznaczanie punktów końcowych
• Punkty końcowe mogą teraz wysyłać log inwentaryzacji oprogramowania do FortiAnalyzer w celu rejestrowania i raportowania w czasie rzeczywistym oraz odtworzenia historii
• EMS 6.2.0 używa nowego interfejsu FortiOS API do automatycznego importowania i synchronizowania profili WebFilter z FortiGate
• FortiClient obsługuje teraz plugin Web Filteru, który poprawia wykrywanie i egzekwowanie reguł Web Filtera na stronach HTTPS. Wtyczka jest obecnie dostępna w przeglądarce Chrome dla punktów końcowych z systemem Windows i będzie dostępna dla innych głównych przeglądarek w przyszłych wersjach. Obecnie nie ma implementacji dla platform macOS lub Linux
• Wcześniejsze wersje FortiClient wspierały wysyłanie plików do urządzeń FortiSandbox. FortiClient 6.2.0 wprowadza obsługę FortiSandbox Cloud. Administrator EMS może teraz skonfigurować FortiClienta do korzystania z maszyny lub urządzenia fizycznego FortiSandbox bądź wskazać FortiSandbox Cloud
• Udoskonalono pulpit skanowania punktów końcowych pod kątem podatności na atak, umożliwiając uzyskanie szczegółowych informacji o klientach końcowych
• EMS ma teraz sekcję Endpoint Policy do zarządzania profilami punktów końcowych. Sekcja ta ułatwia zabezpieczenie i kontrolę punktów końcowych. Możesz teraz tworzyć i zarządzać polityki dotyczące klientów końcowych, uzyskując możliwość przypisania profili lub listy bram telemetrycznych do domen, jednostek organizacyjnych i grup roboczych. Możesz także tworzyć polityki Chromebook i zarządzać nimi, aby przypisać profile do domen Google.
• Ulepszony został kreator instalacji EMS, dzięki któremu administratorzy mogą teraz tworzyć niestandardowe instalatory FortiClient, w zależności od potrzeb dobrać odpowiednie komponenty oprogramowania w sposób podobny do narzędzia konfiguracyjnego FortiClient
• Możesz teraz dostosować uprawnienia administratorów, aby ograniczyć dostęp administratora do określonych grup punktów końcowych lub domen AD
• Nazwa FortiClient EMS została zmieniona na FortiClient Endpoint Management Server

Dla administratorów dostępna jest darmowa wersja FortiClient VPN, która obsługuje podstawowe IPsec i SSL VPN i nie wymaga rejestracji w EMS. Ta wersja nie obejmuje centralnego zarządzania, pomocy technicznej ani reszty zaawansowanych funkcji.

 

Rozwiązane problemy:

Bug ID	Description
413419	FortiClient and EMS should prevent installation and upgrade to unsupported OS versions.
460508	FortiClient (Windows) does not run AV scan on USB insertion after rebooting.
472223	FortiClient (Windows) does not allow certificate selection for SSL VPN.
481003	FortiClient causes longer logon time to terminal server (Citrix) for first user.
481361	VPN before logon does not appear on Windows 10 x64 after enabling even after reboot.
483523	A black screen occurs for a few minutes after login/logoff.
495880	Non-administrator domain users can stop/pause USB media scans that EMS configuration is enforcing.
497132	When a FortiClient (Windows) endpoint is quarantined for the very first time, the pre-established HTTPS connections are not blocked.
505191	Remote Access (IPsec VPN) loses the saved username/password after upgrade.
506548	Vulnerability scan results do not display on EMS.
510748	When FortiClient 5.6 is installed on a different drive, such as E:\, and manually upgraded to 6.0 or later, the upgrade completes but FortiClient fails to launch after reboot.
512247	FortiClient (Windows) does not show full details of onnet/online status.
513213	AntiExploit Engine blocks legitimate applications.
513932	FortiClient (Windows) sends no CERT payload during IKE2 certificate authentication.
514115	FortiClient (Windows) loses the saved password after upgrading from 5.6.x and disconnecting an autoconnected IPsec VPN.
514799	Split DNS does not include news.163.com when configured for 163.com.
515473	Hiding any feature except Application Firewall causes FortiClient (Windows) to report the feature as installed and not enabled.
515937	ipsec.exe crashes in VCRUNTIME140.dll version 14.0.24210.0.
516325	Software Inventory does not show all applications installed on the user PC.
516394	FortiClient (Windows) freezes on the patching progress screen and also causes the host machine to hang up.
516544	The user cannot save a username with a certificate in SSL VPN with a profile that EMS is managing.
516841	FortiClient (Windows) Sandbox still holds files with sizes larger than 200 MB until timeout.
518103	FortiClient (Windows) fails to connect to VPN from task tray with user certification authentication (no username/password).
518691	FSSO FortiClient mobility agent and PC virtual Ethernet interfaces.
518771	FortiShield blocks Forticlient.exe from changing the registry – FA_Scheduler.
519244	fortisniff2.sys crashes on FortiClient (Windows).
520808	FortiClient fails certificate validation due to ignored intermediate CA.
521175	Windows Security Center on Windows 10 shows FortiClient RTP as enabled even if AV is disabled in FortiClient (Windows).
521198	FortiClient (Windows) deletes the IPsec VPN username and password when a profile is changed on EMS.
522022	Quick/full scan causes BSOD on Windows 7.
525417	FortiElevate.exe does not have a digital signature like the other installed files.
525536	FortiClient experiences an assertion fail when clicking the Vulnerability Scan tab.
525542	After laptop bootup or wakeup, FortiClient tries to autoconnect even though it is onnet.
525811	FortiClient (Windows) blocks access to files on mapped home drives.
525990	The FortiClient user avatar agent crashes every time that the user logs in.
526229	FortiClient AV locks Microsoft Office files and does not allow the user to save them.
526286	A complex preshared secret does not work if entered via the GUI.
527471	FortiClient (Windows) GUI displays the content of any text file.
528590	Alert when updates available is on despite the configuration of <auto_patch> and <update_action disable>.
531176	FortiClient does not honor the configured FortiManager signature update port.
531647	FortiClient (Windows) does not restore VPN autoconnect logic after manual connection.
532068	FortiClient cannot see the certificate when the certificate subject contains diacritics.
532942	VPN before logon does not work. FortiClient (Windows) syncs with the EMS profile, but the user cannot see the FortiClient VPN icon on the logon page.
532949	Enabling VPN before logon disables malware scanning.
534146	AV reported placeholder AV events to EMS.
534306	The user can replace the .exe files in the FortiClient installation folder.
534650	<allow_standard_user_use_system_cert> does not work for SSL IPv6.
534786	A prepared package with Security Fabric Agent disabled should not have logging Telemetry enabled.
535114	The user cannot select a user certificate when reconnecting to a managed SSL VPN profile.
535699	FortiClient fails to start an on-demand AV scan.
539387	VPN autodial does not work when using the domain name to register to EMS.
541225	An equal sign (=) in group names breaks SSL VPN FortiClient two-factor authentication.
541420	The user cannot log into Windows after enabling VPN before logon.
542918	Windows 8.1 does not boot after installing FortiClient (Windows).
543362	FortiClient does not register as an AV product on Windows 7 and 8.1.
543624	The user can access files before the configured response timeout.
544288	FortiClient does not scan for vulnerabilities when initiated from EMS.
544632	fortiaptfilter.sys causes BSOD.
546140	The FortiClient (Windows) GUI displays incorrectly when trying to establish VPN connection from FortiTray.
546525	FortiClient (Windows) blocks web traffic due to two FortiProxy services running at the same time.
546648	IPsec VPN autoconnect does not work after re-login.
546658	FortiClient GUI is stuck when connecting to IPSec VPN with password renewal.
547445	VPN offnet autoconnect does not work.
547636	FortiClient Sandbox and Cloud Scan turn upper-case exclusion to lower-case.
547713	FortiClient cannot connect to EMS when the user is a member of many groups with names that are 20 characters long.
547928	FortiClient Sandbox reports network error for a valid Sandbox.
548226	FortiClient can disconnect from EMS when the EMS profile requires a password to disconnect from EMS.
549103	FortiClient should handle switching between a FortiSandbox appliance configuration and FortiSandbox Cloud configuration in EMS.
549589	FortiClient (Windows) retrieves wrong FortiAnalyzer management IDs when registered to EMS with Telemetry.

Znane problemy do rozwiązania:

Bug ID	Description
449330	When network errors cause an installer download to not complete, FortiClient still tries to run the incomplete download.
463956	Diagnostic tool result does not have avscan and realtime_scan logs.
489370	Email alerts are incomplete for AV events.
504191	FortiClient connected via IPsec IKE (IPv4/v6 dual stack) cannot receive IPv6 address from the FortiGate.
504291	FortiClient with IPv6-only configuration fails to connect with remote IKE 2 IPv6 IPsec tunnel.
510597	FortiClient (Windows) fails to patch OS vulnerabilities on Windows 10 x64 platform while an outstanding Windows update exists.
514547	FortiClient (Windows) quick scan fails to move quarantined files to FortiClient quarantine folder.
516092	FortiClient (Windows) cannot block PsExec communication/traffic.
518230	An installer created by EMS should include an uninstall action.
519096	FortiClient fails to log USB block action for Google Pixel 2.
519098	After uninstalling FortiClient (Windows), there is a potential wrong block state for USB access.
543034	FortiClient deployed from EMS fails to show message on active logon user with multiple logon users
544303	FortiClient does not upload logs or diagnostic results to EMS after the action is triggered.
545267	Switching tabs in FortiClient before configuration is successfully restored leads to GUI freeze.
546200	FortiClient creates many folders in the Temp folder.
546375	EMS needs FortiClient to provide service and download from information for Sandbox event.
546487	IPSec IKEv2 error occurs after dis- and reconnect to network.
546884	FortiClient (Windows) should have a configurable AV signature update interval.
547272	When renewing a password, New/Confirm Password disappears when switching tabs in the FortiClient (Windows) GUI.
547456	GUI does not display Bytes Sent/Received when connecting from FortiTray.
547466	After restoring settings, the GUI cannot display preconfigured certificates.
547606	Cloud Sandbox APT dialog should not report file submitting after Sandbox Cloud daily count reaches 0.
547617	When using Microsoft Edge and HTTPS rating server, sometimes Web Filter does not block websites.
547645	SSL VPN should allow certificate-only authentication when using certificate filter.
548517	FortiClient GUI shows host tags as clickable.
548536	On the free VPN-only client, OK and Cancel buttons do not show completely when renewing the LDAP user password.
548540	SSL VPN FTM-push/FortiToken cloud push does not work with password change.
548744	FortiClient should kill the related process for a Sandbox-detected malicious file.
548758	FortiClient (Windows) does not allow reentry of a correct password after entering a wrong password for IPsec VPN.
548919	FortiSandbox does not scan attachments opened from Outlook 2016.
548955	FortiClient Sandbox Cloud is still enabled when registered to a Fabric Agent-only EMS.
549011	When renewing a saved LDAP user password, the GUI does not show the correct tunnel if connecting from FortiTray.
549020	EMS Sandbox Cloud events show scans by realtime scan.
549027	FortiClient (Windows) sends Cloud Scan events as Sandbox events.
549098	FortiClient fails to update threat detected statistics for Cloud Scan when EMS updates the file whitelist.
549120	FortiClient flushes away user-selected vulnerabilities in the vulnerability details page.
549122	Certificate required by an IPv6 tunnel fails to establish a VPN connection with a new PIN.
549289	A new FortiClient (Windows) deployment resets user details.
549311	VPN before logon using only LDAP-integrated certificates does not connect.
549367	On the free VPN-only client, the GUI does not show the username/password after creating a new tunnel until reopening the tunnel.
549374	On the free VPN-only client, the GUI displays a deleted VPN configuration.
549594	FortiClient (Windows) running on Windows 8.1 cannot receive an upgrade notification.
549724	The exclusion list fails for AV scans.
549743	The scheduled scan page displays incorrect information.
549759	FortiTray fails to indicate that RTP is disabled.
549992	Some applications do not send data to EMS, resulting in incorrect application icons.
550021	The Web Filter plugin blocks URLs accessed in incognito mode when the Web Filter is disabled.
550022	RDP disconnects and reconnects when using Application Firewall.
550031	Disclaimer message box should not disappear silently.
550152	The EMS connection status shows a green tickmark when FortiClient (Windows) cannot reach EMS.
550154	FortiClient fails to show the Malware Protection tab when the installer does not contain AV features.
550158	FortiClient (Windows) fails to unregister when EMS is not reachable.
550165	EMS is missing the Cloud Malware Protection feature state.

Więcej informacji znajdą Państwo w notatkach: Release Notes – FortiClient 6.2.0

Pozdrawiamy,

Zespół B&B
Bezpieczeństwo w biznesie

FortiClient