Resolved issues

The following issues have been fixed in version 6.4.7. For inquiries about a particular bug, contact Customer Service & Support.

GUI

Bug ID	Description
725854	Antivirus (AV) scan displays scan progress popup.

Install and deployment

Bug ID	Description
742508	FortiClient is uninstalled using CCleaner with Require password for Disconnect enabled.

Endpoint control

Bug ID	Description
675889	Improve endpoint modification management behavior.
728114	Telemetry status gets stuck on syncing.

Malware Protection and Sandbox

Bug ID	Description
516704	AV should recognize Windows- signed files.
674454	FortiClient on Windows 7 does not block USB drive.
689248	After upgrading FortiClient, user cannot create, save, delete, or rename C:\Backup folder.
693565	Chrome cannot rename temporary download files because Sandbox agent locks them.
700298	FortiClient (Windows) does not submit zip files larger than 200 MB to FortiSandbox.
700396	The device driver cannot be loaded (code 38).
705761	FortiClient (Windows) does not block USB drives despite removable media access being configured to block Windows portable devices.
710899	Excel file save fails.
713557	AntiExploit exceptions do not work.
722597	Keyboards and mouses can be allowed or denied based on human interface device rule.
725936	USB key compatibility.
734993	Rule to block removable media such as a USB drive stops working.

Remote Access

Bug ID	Description
599924	Certificate-based IKEv2 cannot connect without enabling the extensible authentication protocol (EAP).
613868	Always up and autoconnect do not work for SAML SSL VPN connection.
637303	Certificate-only SSL VPN tunnel displays Empty username is not allowed. error.
684913	SAML authentication on SSL VPN with realms does not work.
685959	On booting up the operating system, machine IPsec VPN does not connect.
692822	Token popup has six character limit.
692823	Split DNS has resolution time of more than 30 seconds.
693687	FortiClient does not register any interfaces' IP addresses to the DNS server when SSL VPN tunnel is up.
693913	Username and password become blank on console when connecting to second remote gateway with SSL VPN.
698407	VPN before logon does not work with IKEv2 and EAP.
700440	Application-based split tunnel does not work.
702764	IPsec VPN connection fails with error that certificate was not loaded.
707882	IPsec VPN fails to autoconnect with Failed to launch IPsec service error (ref.0490188,0555131,0550604).
718178	FortiClient does not support always-on connections when using SAML SSO.
718737	FortiClient is intermittently missing SSL VPN user credentials after Windows logon.
719828	FortiClient fails to allow SSL VPN when it does not have prohibit host tag.
724092	match_type does not work when using VPN before logon.
732594	SSL VPN redundant_sort_method does not work with realms.
750008	FortiClient caches VPN tunnel username when it is configured not to.
751430	Split tunnel, split DNS, and remote DNS server resolution do not work.

Web Filter and plugin

Bug ID	Description
731982	Web rating overrides behavior between FortiClient Web Filter and FortiOS Web Filter differs.

Zero Trust tags

Bug ID	Description
652897	FortiClient (Windows) tags endpoint as vulnerable when EMS has enabled excluding application vulnerabilities requiring manual update from vulnerabilities
726729	Windows Firewall ZTR does not tag FortiClient when Web Filter is enabled via a group policy object.

Other

Bug ID	Description
737917	Windows 11 support.

Common Vulnerabilities and Exposures

Bug ID	Description
755593	FortiClient (Windows) 6.4.7 is no longer vulnerable to the following CVE Reference: CVE-2021-41031 Visit https://fortiguard.com/psirt for more information.