Fortinet white logo
Fortinet white logo

Known issues

Known issues

The following issues have been identified in FortiClient (Windows) 7.0.7. For inquiries about a particular bug or to report a bug, contact Customer Service & Support.

Install and upgrade

Bug ID

Description

749331 Windows Security setting in Windows displays FortiClient is snoozed when FortiEDR is installed.

769639

FortiDeviceGuard is not installed on Windows Server 2022.

820672 ZTNA driver FortiTransCtrl.sys fails to start up on Windows Server 2016.

Application Firewall

Bug ID Description
717628 Application Firewall causes issues with Motorola RMS high availability client.

776007

Application Firewall conflict with Windows firewall causes issues updating domain group policies.

814391

FortiClient Cloud application signatures block allowlisted applications.

817932

Application Firewall fails to allow application signatures added under Application Overrides as allow.

823292

FortiClient cannot connect to JVC wireless display.

827788

Threat ID is 0 on Firewall Events.

GUI

Bug ID Description
767998 Free VPN-only client includes Action for invalid EMS certificate in settings.

811742

FortiClient (Windows) does not hide software update options when registered to EMS (regression).

826895

FortiClient ignores the listing order of the configured VPN connections in the GUI and tray.

827394

FortiClient does not report profile change update in Notifications.

Zero Trust tags

Bug ID Description

704234

Zero Trust tagging rule set syntax does not check registry key values.

782394 ZTNA user identity tags do not work.

819120

Zero trust tag rule for Active Directory group does not work when registering FortiClient to EMS with onboarding user.

831981

On-Fabric detection rule for local IP address/subnet) fails to identify secondary Ethernet adapter IPv4 address.

Endpoint control

Bug ID Description

753151

Updating endpoint status from endpoint notified to deployed takes a long time.

765686 When autoconnect only when offnet is enabled, VPN autoconnects when endpoint shifts from off-Fabric to on-Fabric.

798090

FortiClient (Windows) incorrectly recognizes on-fabric status.

804552

FortiClient shows all feature tabs without registering to EMS after upgrade.

808880

FortiClient fails to synchronize with EMS on Windows 7 x86 platform for long time.

815037

After administrator selects Mark All Endpoints As Uninstalled, FortiClient (Windows) connected with verified user changes to unverified user.

815384

FortiClient (Windows) delays starting Web Filter service after status is off-fabric.

816751

Administrator cannot restore a quarantined file through EMS quarantine management if FortiClient (Windows) registered as onboarding user.

817061

Redeploying from another EMS server causes FortiClient (Windows) to not reconnect to EMS automatically.

819552

After upgrading FortiClient with EMS local onboarding user with LDAP, FortiClient (Windows) prompts for registration authentication.

821024

FortiClient fails to send username to EMS, causing EMS to report it as different users.

827200

EMS displays no user for some devices.

833717

EMS shows endpoints as offline, while they show their own status as online.

833848

FortiClient reports incorrect Windows version to EMS.

834162

LDAP query for Active Directory group check does not execute.

836239

FortiClient does not update off-Fabric features automatically.

Endpoint management

Bug ID Description
760816 Group assignment rules based on IP addresses do not work when using split tunnel.

Configuration

Bug ID

Description

730415

FortiClient backs up configuration that is missing locally configured ZTNA connection rules.

Endpoint policy and profile

Bug ID

Description

774890 FortiClient (Windows) does not receive updated profile after syncing imported Web Filter profile from EMS.

Performance

Bug ID

Description

749348 Performance issues after upgrade.

778651

Large downloads and speed tests result in high latency, packet loss, and poor performance.

Zero Trust Telemetry

Bug ID

Description

683542 FortiClient (Windows) fails to register to EMS if registration key contains a special character: " !"#$%&'()*+,-./:;<=>?@[\]^_`{|}~".

792703

FortiClient (Windows) cannot connect to FortiClient Cloud.

837859 FortiClient does not use invitation code to register after upgrade.

Malware Protection and Sandbox

Bug ID

Description

606634

FortiClient fails to remove quarantined files after number of days configured with cullage option.

650383

Number of blocked exploits attempts does not work properly.

730054

Allow Admin Users to Terminate Scheduled and On-Demand Scans from FortiClient Console feature does not work as expected.

760073 FortiClient (Windows) compatibility with USB.
762125 fortimon3.sys causes blue screen of death during Slack calls.

777582

Antiransomware kills FCBLog.exe when exporting debug logs.

793926 FortiShield blocks spoolsv.exe on Citrix virtual machine servers.

820098

Sandbox does not release blocked file.

825732

SIM-card-slot UEFI feature slows down Windows logon when connected to VPN.

828862

FortiClient does not allow virtual CD-ROM device.

831560

GUI shows ransomware quarantined files after restoration via EMS.

Remote Access

Bug ID

Description

727695

FortiClient (Windows) on Windows 10 fails to block SSL VPN when it has a prohibit host tag applied.

728240

SSL VPN negate split tunnel IPv6 address does not work.

728244

Negate split tunnel IPv4 address does not work for dual stack mode using IPv6 access.

730756

For SSL VPN dual stack, GUI only shows IPv4 address.

736353 Multigateway failover does not go back to check previous gateways when failing over to see if they are up.
743106 IPsec VPN XAuth does not work with ECDSA certificates.
744544 FortiClient (Windows) always saves SAML credentials.

744597

SSL VPN disconnects and returns hostcheck timeout after 15 to 20 minutes of connection.

755105

When VPN is up, changes for IP properties-> Register this connection's IP to DNS are not restored after VM reboot from power off.

755482

Free VPN-only client does not show token box on rekey and GUI open.

758424

Certificate works for IPsec VPN tunnel if put it in current user store but fails to work if in local machine.

762986

FortiClient (Windows) does not use second FortiGate to connect to resilient tunnel from FortiTray if it cannot reach first remote gateway.

764863 Dialup IPsec VPN over IPv6 drops packets on inbound direction once FortiClient (Windows) establishes tunnel.
767947 SMS verification code/answer code overwrites IPsec VPN saved password.

772108

When no_dns_registration=1,Register This Connection's Address in DNS of NW IP properties is not selected after VPN is up.

773060 When connected to VPN on wireless connection, Surface Pro cannot access SSRS report (software hosted on internal server).

775633

Priority based IPSec resiliency tunnel, auto failover to second remote gateway doesn't work

789821

IPsec VPN failover to SSL VPN does not work when remote gateway is unreachable due to an invalid FQDN.

790021 Multifactor authentication using Okta with email notification does not work.
792131 FortiClient (Windows) users report issues with the Save Password feature for SSL VPN.

793893

FortiClient search domains transfer incorrectly to endpoints.

794110

VPN before logon does not work with Okta multifactor authentication and enforcing acceptance of the disclaimer message.

795334

Always up feature does not work as expected when trying to connect to VPN from tray.

797816

SAML connection with external browser authentication and single sign on port 8020 is busy, with FortiClient returning a JavaScript error.

800453 SSL VPN with certificate authentication fails to connect on OS start.

801674

SAML internal browser authentication prompt does not show up when redirection to external browser is disabled.

801875

FortiClient cannot connect to VPN when there are two gateways listed using SAML.

802957

Dialup IPsec VPN does not come up and shows NAT-T inconsistency.

811458

FortiClient (Windows) cannot connect to SSL VPN after installing Windows update KB5013942.

814488

SSL VPN with <on_os_start_connect> enabled does not work when the machine is put into sleep mode and changes networks.

815528

If allow_local_lan=0 and per-application split tunnel with exclude mode and full tunnel are configured, FortiClient (Windows) should block local RDP/HTTPS traffic.

816826

FortiClient (Windows) has issue with SAML with ErrorCode=-6005 when it reaches 31%.

818155

FortiClient (Windows) sends SAML response to a different IP address than the request it received from.

821879

VPN autoconnect does not work with IKEv2 IPsec VPN and user certificates.

822763

Remote access Connect button does not work.

823350

Autoconnect works intermittently.

824298

SSL VPN with certificates cannot connect to VPN on Elitebook 850 G5/Elitebook 850 G3 laptops.

825365

Disconnecting from VPN does not restore Register this connection's IP to DNS.

825442

ZScaler Client Connector does not work with application-based split tunnel.

826170

FortiClient removes the SSL VPN password from the GUI if the network interface is disconnected and reconnected.

829763

With host check enabled, SAML login does not show proper warning message when it fails to connect.

830899

FortiClient (Windows) becomes unlicensed when connected to SSL VPN.

830944

SAML SSL VPN fails when Duo is the multifactor authentication provider.

834604

Upgrading FortiClient (Windows) free VPN-only client to the latest build removes VPN tunnels.

834883

On-fabric rule for VPN tunnel name does not work when the tunnel name uses special characters.

835042

After upgrading FortiClient (Windows), OpenVPN connection fails while FortiClient (Windows) VPN runs with application-based split tunnel enabled.

835436

FortiClient (Windows) does not save or reuse SAML credentials and shows credentials prompt when VPN autoconnects.

836148 FortiClient does not try to connect to the realm https://X.Y:10443/Z if X and Z have the same name.

837479

FortiClient ignores secure remote access feature if used with VPN before logon.

837861 Always up fails to keep SSL VPN connection up when endpoint is left idle overnight.

838030

Citrix application shows blank pages on SSL VPN tunnel.

838380

FortiClient removes autoconnect VPN tunnel user credentials after a couple system restarts.

Vulnerability Scan

Bug ID

Description

741241 FortiClient (Windows) finds vulnerabilities for uninstalled software.

795393

EMS does not remove vulnerability events after successful patch.

811796

FortiClient (Windows) does not exclude Python vulnerability for all applications from vulnerability compliance check.

Logs

Bug ID

Description

820067 FortiClient forwards logs despite being completely disabled.

Web Filter and plugin

Bug ID Description

776089

FortiClient (Windows) does not block malicious sites when Web Filter is disabled.

812207

Blocked web client shows dropped connection message instead of URL blocked message.

825633

Error revokes certificate accessing outlook.office365.com using Web Filter.

826697 Web Filter affects ConnectWise Automate.

829164

Security risk websites violation list is not on Web Filter tab.

829674 Web Filter does not work with Only when endpoint is off-fabric option.

833506

FortiClient (Windows) registry does not update restriction level value when Web Filter is disabled and reenabled.

834135

FortiClient does not remove Web Filter plugin from browser when Web Filter is disabled.

834751

Registry policy value fails to update to new value if Web Filter plugin is enabled on EMS.

Avatar and social network login

Bug ID

Description

802471 <enable_manually_entering> parameter does not work.

805153

FortiClient (Windows) does not save user-specified Submit User Identity Information.

830117

EMS fails to update email address for endpoint from personal information form in FortiClient (Windows).

831366

EMS does not show correct username if user logs in with Google or Linkedin cloud service or chooses user input.

Multitenancy

Bug ID

Description

780308 EMS automatically migrates endpoints to default site.

ZTNA connection rules

Bug ID

Description

735494

Windows 7 does not support TCP forwarding feature.

773956

FortiClient (Windows) cannot show normal webpage of Internet real server (Dropbox) with ZTNA.

814953

Using an external browser for SSH ZTNA requires restarting FortiClient on Windows 11.

830135 Hosts file becomes empty after disconnecting/reconnecting to EMS multiple times and with fresh install of FortiClient (Windows).

831943

ZTNA client certificate is not removed from user certificate store after FortiClient uninstall.

836246

Going from off-Fabric to on-Fabric does not stop the ZTNA service and keeps endpoint from connecting.

Onboarding

Bug ID

Description

766311

FortiClient (Windows) does not send Windows user information to EMS after user account switching.

811976

FortiClient (Windows) may prioritize using user information from authentication user registered to EMS.

819989

FortiClient (Windows) does not show login prompt when installed with installer using LDAP/local verification.

Other

Bug ID

Description

780651 FortiClient (Windows) does not update signatures on expected schedule.
812778 FortiShield fails to prevent user from killing FortiClient running processes.

Known issues

Known issues

The following issues have been identified in FortiClient (Windows) 7.0.7. For inquiries about a particular bug or to report a bug, contact Customer Service & Support.

Install and upgrade

Bug ID

Description

749331 Windows Security setting in Windows displays FortiClient is snoozed when FortiEDR is installed.

769639

FortiDeviceGuard is not installed on Windows Server 2022.

820672 ZTNA driver FortiTransCtrl.sys fails to start up on Windows Server 2016.

Application Firewall

Bug ID Description
717628 Application Firewall causes issues with Motorola RMS high availability client.

776007

Application Firewall conflict with Windows firewall causes issues updating domain group policies.

814391

FortiClient Cloud application signatures block allowlisted applications.

817932

Application Firewall fails to allow application signatures added under Application Overrides as allow.

823292

FortiClient cannot connect to JVC wireless display.

827788

Threat ID is 0 on Firewall Events.

GUI

Bug ID Description
767998 Free VPN-only client includes Action for invalid EMS certificate in settings.

811742

FortiClient (Windows) does not hide software update options when registered to EMS (regression).

826895

FortiClient ignores the listing order of the configured VPN connections in the GUI and tray.

827394

FortiClient does not report profile change update in Notifications.

Zero Trust tags

Bug ID Description

704234

Zero Trust tagging rule set syntax does not check registry key values.

782394 ZTNA user identity tags do not work.

819120

Zero trust tag rule for Active Directory group does not work when registering FortiClient to EMS with onboarding user.

831981

On-Fabric detection rule for local IP address/subnet) fails to identify secondary Ethernet adapter IPv4 address.

Endpoint control

Bug ID Description

753151

Updating endpoint status from endpoint notified to deployed takes a long time.

765686 When autoconnect only when offnet is enabled, VPN autoconnects when endpoint shifts from off-Fabric to on-Fabric.

798090

FortiClient (Windows) incorrectly recognizes on-fabric status.

804552

FortiClient shows all feature tabs without registering to EMS after upgrade.

808880

FortiClient fails to synchronize with EMS on Windows 7 x86 platform for long time.

815037

After administrator selects Mark All Endpoints As Uninstalled, FortiClient (Windows) connected with verified user changes to unverified user.

815384

FortiClient (Windows) delays starting Web Filter service after status is off-fabric.

816751

Administrator cannot restore a quarantined file through EMS quarantine management if FortiClient (Windows) registered as onboarding user.

817061

Redeploying from another EMS server causes FortiClient (Windows) to not reconnect to EMS automatically.

819552

After upgrading FortiClient with EMS local onboarding user with LDAP, FortiClient (Windows) prompts for registration authentication.

821024

FortiClient fails to send username to EMS, causing EMS to report it as different users.

827200

EMS displays no user for some devices.

833717

EMS shows endpoints as offline, while they show their own status as online.

833848

FortiClient reports incorrect Windows version to EMS.

834162

LDAP query for Active Directory group check does not execute.

836239

FortiClient does not update off-Fabric features automatically.

Endpoint management

Bug ID Description
760816 Group assignment rules based on IP addresses do not work when using split tunnel.

Configuration

Bug ID

Description

730415

FortiClient backs up configuration that is missing locally configured ZTNA connection rules.

Endpoint policy and profile

Bug ID

Description

774890 FortiClient (Windows) does not receive updated profile after syncing imported Web Filter profile from EMS.

Performance

Bug ID

Description

749348 Performance issues after upgrade.

778651

Large downloads and speed tests result in high latency, packet loss, and poor performance.

Zero Trust Telemetry

Bug ID

Description

683542 FortiClient (Windows) fails to register to EMS if registration key contains a special character: " !"#$%&'()*+,-./:;<=>?@[\]^_`{|}~".

792703

FortiClient (Windows) cannot connect to FortiClient Cloud.

837859 FortiClient does not use invitation code to register after upgrade.

Malware Protection and Sandbox

Bug ID

Description

606634

FortiClient fails to remove quarantined files after number of days configured with cullage option.

650383

Number of blocked exploits attempts does not work properly.

730054

Allow Admin Users to Terminate Scheduled and On-Demand Scans from FortiClient Console feature does not work as expected.

760073 FortiClient (Windows) compatibility with USB.
762125 fortimon3.sys causes blue screen of death during Slack calls.

777582

Antiransomware kills FCBLog.exe when exporting debug logs.

793926 FortiShield blocks spoolsv.exe on Citrix virtual machine servers.

820098

Sandbox does not release blocked file.

825732

SIM-card-slot UEFI feature slows down Windows logon when connected to VPN.

828862

FortiClient does not allow virtual CD-ROM device.

831560

GUI shows ransomware quarantined files after restoration via EMS.

Remote Access

Bug ID

Description

727695

FortiClient (Windows) on Windows 10 fails to block SSL VPN when it has a prohibit host tag applied.

728240

SSL VPN negate split tunnel IPv6 address does not work.

728244

Negate split tunnel IPv4 address does not work for dual stack mode using IPv6 access.

730756

For SSL VPN dual stack, GUI only shows IPv4 address.

736353 Multigateway failover does not go back to check previous gateways when failing over to see if they are up.
743106 IPsec VPN XAuth does not work with ECDSA certificates.
744544 FortiClient (Windows) always saves SAML credentials.

744597

SSL VPN disconnects and returns hostcheck timeout after 15 to 20 minutes of connection.

755105

When VPN is up, changes for IP properties-> Register this connection's IP to DNS are not restored after VM reboot from power off.

755482

Free VPN-only client does not show token box on rekey and GUI open.

758424

Certificate works for IPsec VPN tunnel if put it in current user store but fails to work if in local machine.

762986

FortiClient (Windows) does not use second FortiGate to connect to resilient tunnel from FortiTray if it cannot reach first remote gateway.

764863 Dialup IPsec VPN over IPv6 drops packets on inbound direction once FortiClient (Windows) establishes tunnel.
767947 SMS verification code/answer code overwrites IPsec VPN saved password.

772108

When no_dns_registration=1,Register This Connection's Address in DNS of NW IP properties is not selected after VPN is up.

773060 When connected to VPN on wireless connection, Surface Pro cannot access SSRS report (software hosted on internal server).

775633

Priority based IPSec resiliency tunnel, auto failover to second remote gateway doesn't work

789821

IPsec VPN failover to SSL VPN does not work when remote gateway is unreachable due to an invalid FQDN.

790021 Multifactor authentication using Okta with email notification does not work.
792131 FortiClient (Windows) users report issues with the Save Password feature for SSL VPN.

793893

FortiClient search domains transfer incorrectly to endpoints.

794110

VPN before logon does not work with Okta multifactor authentication and enforcing acceptance of the disclaimer message.

795334

Always up feature does not work as expected when trying to connect to VPN from tray.

797816

SAML connection with external browser authentication and single sign on port 8020 is busy, with FortiClient returning a JavaScript error.

800453 SSL VPN with certificate authentication fails to connect on OS start.

801674

SAML internal browser authentication prompt does not show up when redirection to external browser is disabled.

801875

FortiClient cannot connect to VPN when there are two gateways listed using SAML.

802957

Dialup IPsec VPN does not come up and shows NAT-T inconsistency.

811458

FortiClient (Windows) cannot connect to SSL VPN after installing Windows update KB5013942.

814488

SSL VPN with <on_os_start_connect> enabled does not work when the machine is put into sleep mode and changes networks.

815528

If allow_local_lan=0 and per-application split tunnel with exclude mode and full tunnel are configured, FortiClient (Windows) should block local RDP/HTTPS traffic.

816826

FortiClient (Windows) has issue with SAML with ErrorCode=-6005 when it reaches 31%.

818155

FortiClient (Windows) sends SAML response to a different IP address than the request it received from.

821879

VPN autoconnect does not work with IKEv2 IPsec VPN and user certificates.

822763

Remote access Connect button does not work.

823350

Autoconnect works intermittently.

824298

SSL VPN with certificates cannot connect to VPN on Elitebook 850 G5/Elitebook 850 G3 laptops.

825365

Disconnecting from VPN does not restore Register this connection's IP to DNS.

825442

ZScaler Client Connector does not work with application-based split tunnel.

826170

FortiClient removes the SSL VPN password from the GUI if the network interface is disconnected and reconnected.

829763

With host check enabled, SAML login does not show proper warning message when it fails to connect.

830899

FortiClient (Windows) becomes unlicensed when connected to SSL VPN.

830944

SAML SSL VPN fails when Duo is the multifactor authentication provider.

834604

Upgrading FortiClient (Windows) free VPN-only client to the latest build removes VPN tunnels.

834883

On-fabric rule for VPN tunnel name does not work when the tunnel name uses special characters.

835042

After upgrading FortiClient (Windows), OpenVPN connection fails while FortiClient (Windows) VPN runs with application-based split tunnel enabled.

835436

FortiClient (Windows) does not save or reuse SAML credentials and shows credentials prompt when VPN autoconnects.

836148 FortiClient does not try to connect to the realm https://X.Y:10443/Z if X and Z have the same name.

837479

FortiClient ignores secure remote access feature if used with VPN before logon.

837861 Always up fails to keep SSL VPN connection up when endpoint is left idle overnight.

838030

Citrix application shows blank pages on SSL VPN tunnel.

838380

FortiClient removes autoconnect VPN tunnel user credentials after a couple system restarts.

Vulnerability Scan

Bug ID

Description

741241 FortiClient (Windows) finds vulnerabilities for uninstalled software.

795393

EMS does not remove vulnerability events after successful patch.

811796

FortiClient (Windows) does not exclude Python vulnerability for all applications from vulnerability compliance check.

Logs

Bug ID

Description

820067 FortiClient forwards logs despite being completely disabled.

Web Filter and plugin

Bug ID Description

776089

FortiClient (Windows) does not block malicious sites when Web Filter is disabled.

812207

Blocked web client shows dropped connection message instead of URL blocked message.

825633

Error revokes certificate accessing outlook.office365.com using Web Filter.

826697 Web Filter affects ConnectWise Automate.

829164

Security risk websites violation list is not on Web Filter tab.

829674 Web Filter does not work with Only when endpoint is off-fabric option.

833506

FortiClient (Windows) registry does not update restriction level value when Web Filter is disabled and reenabled.

834135

FortiClient does not remove Web Filter plugin from browser when Web Filter is disabled.

834751

Registry policy value fails to update to new value if Web Filter plugin is enabled on EMS.

Avatar and social network login

Bug ID

Description

802471 <enable_manually_entering> parameter does not work.

805153

FortiClient (Windows) does not save user-specified Submit User Identity Information.

830117

EMS fails to update email address for endpoint from personal information form in FortiClient (Windows).

831366

EMS does not show correct username if user logs in with Google or Linkedin cloud service or chooses user input.

Multitenancy

Bug ID

Description

780308 EMS automatically migrates endpoints to default site.

ZTNA connection rules

Bug ID

Description

735494

Windows 7 does not support TCP forwarding feature.

773956

FortiClient (Windows) cannot show normal webpage of Internet real server (Dropbox) with ZTNA.

814953

Using an external browser for SSH ZTNA requires restarting FortiClient on Windows 11.

830135 Hosts file becomes empty after disconnecting/reconnecting to EMS multiple times and with fresh install of FortiClient (Windows).

831943

ZTNA client certificate is not removed from user certificate store after FortiClient uninstall.

836246

Going from off-Fabric to on-Fabric does not stop the ZTNA service and keeps endpoint from connecting.

Onboarding

Bug ID

Description

766311

FortiClient (Windows) does not send Windows user information to EMS after user account switching.

811976

FortiClient (Windows) may prioritize using user information from authentication user registered to EMS.

819989

FortiClient (Windows) does not show login prompt when installed with installer using LDAP/local verification.

Other

Bug ID

Description

780651 FortiClient (Windows) does not update signatures on expected schedule.
812778 FortiShield fails to prevent user from killing FortiClient running processes.