Producent oprogramowania Fortinet, udostępnił najnowszą aktualizację dla FortiClient o oznaczeniu 7.0.2. Nowsza wersja została poprawiona pod względem bezpieczeństwa, dzięki zwiększeniu działania oprogramowania antyransomware, które nie wykrywało plików LockFile. Również zostały skorygowane problemy z synchronizacją FortiClient. Po więcej informacji, zapraszam do dalszej części artykułu.
Wspierane system:
Windows:
- Microsoft Windows 11 (64-bit)
- Microsoft Windows 10 (32-bit and 64-bit)
- Microsoft Windows 8.1 (32-bit and 64-bit)
- Microsoft Windows 7 (32-bit and 64-bit)
MacOs:
- macOS Monterey (version 12)
- macOS Big Sur (version 11)
- macOS Catalina (version 10.15)
Linux:
- Ubuntu 18.04 and later
- CentOS 7.4 and later
- Red Hat 7.4 and later
Rozwiązane problemy:
Endpoint control
| Bug ID | Description |
|---|---|
| 742070 | FortiClient is stuck syncing and cannot be manually reconnected. |
| 748395 | FortiClient (Windows) does not send correct operating system version for Windows 11 and Windows Server 2022. |
Malware Protection and Sandbox
| Bug ID | Description |
|---|---|
| 742383 | Antiransomware fails to detect LockFile ransomware. |
Upgrade
| Bug ID | Description |
|---|---|
| 755174 | FortiClient (Windows) 7.0.2 online installer cannot upgrade FortiClient (Windows) 7.0.1 to 7.0.2. |
Common Vulnerabilities and Exposures
| Bug ID | Description |
|---|---|
| 637256 | FortiClient (Windows) 7.0.2 is no longer vulnerable to the following CVE Reference:
Visit https://fortiguard.com/psirt for more information. |
| 721745 | FortiClient (Windows) 7.0.2 is no longer vulnerable to the following CVE Reference:
Visit https://fortiguard.com/psirt for more information. |
Znane problemy do rozwiązania:
Install and deployment
| Bug ID | Description |
|---|---|
| 716597 | Installation using norestart parameter requests reboot. |
| 737288 | Cannot use FortiClient (Windows) with Microsoft Defender using Windows Defender Application Control policy. |
| 752345 | 'invalid_cert_action' specified in installer is not applied at installation. |
| 756715 | EMS defaults Invalid Cert Action to Warn for created FortiClient installer.Workaround: EMS administrator to select Allow for Invalid Cert Action when creating FortiClient installer. |
Application Firewall
| Bug ID | Description |
|---|---|
| 663024 | Add VMware Horizon Virtual Desktop Infrastructure Agent signature. |
| 717628 | Application Firewall causes issues with Motorola RMS high availability client. |
GUI
| Bug ID | Description |
|---|---|
| 725644 | Google social network login does not work properly. |
| 726911 | GUI cannot show tags if tag name contains character that needs to be escaped. |
| 742425 | Disabling export logs option does not work . |
| 742676 | „the exception illegal Instruction error” occurs. |
| 744542 | FortiClient (Windows) displays blank SAML login window after accepting security warning. |
| 751299 | FortiClient has empty vulnerability details tab. |
| 752349 | Invalid certificates action in Settings does not update after receiving updated Endpoint Control profile. |
| 752356 | Invalid Certificate Detected alert disappears after 20 seconds without clicking Accept or Deny . |
Zero Trust Network Access (ZTNA) connection rules
| Bug ID | Description |
|---|---|
| 730459 | FortiClient certificate serial number in endpoint is incorrect. |
| 733255 | FortiClient (Windows) must disconnect and reconnect to EMS to fix access issue when visiting a ZTNA-enabled site. |
| 742103 | ZTNA connection rule deletion does not take effect immediately. |
Zero Trust Telemetry
Malware Protection and Sandbox
| Bug ID | Description |
|---|---|
| 693565 | Chrome cannot rename temporary download files because Sandbox agent locks them. |
| 700396 | Device driver cannot be loaded (code 38). |
| 709729 | realtime_scan log disappears after ten seconds. |
| 729499 | Endpoints fail to update AV signatures, causing EMS to consistently send AV out-of-date email notifications. |
| 730054 | Allow Admin Users to Terminate Scheduled and On-Demand Scans from FortiClient Console feature does not work as expected. |
| 734012 | FortiClient does not respect exclusions if malicious file is detected as riskware. |
| 747481 | Antivirus right-click on-demand scan fails. |
| 749331 | FortiClient is snoozed in Windows Security in Windows settings due to conflict with FortiEDR. |
| 749348 | Performance issues after upgrade. |
Remote Access
Vulnerability Scan
| Bug ID | Description |
|---|---|
| 741459 | Vulnerability Scan detects Python as critical/high vulnerability after removal. |
Web Filter and plugin
| Bug ID | Description |
|---|---|
| 657715 | FortiProxy fails to start. |
| 734400 | Proxy service fails to process HTTPS connections. |
| 740802 | Web Filter displays unknown category for many entries in blocklist. |
| 743738 | FortiClient should avoid sending delimiter characters inside events. |
| 748250 | FortiClient does not detect that Web Filter plugin is stalled and blocks navigation. |
Logs
| Bug ID | Description |
|---|---|
| 704611 | FortiClient does not send logs to FortiAnalyzer. |
| 720388 | FortiClient fails to provide log for secure Remote Access compliance enforcement. |
| 746181 | FortiClient does not generate logs when VPN is blocked due to compliance tag. |
Notatki producenta: FortiClient 7.0.2
Pozdrawiamy,
Zespół B&B
Bezpieczeństwo w biznesie
