Special notices
SAML IdP configuration for Save Password
FortiClient provides an option to the end user to save their VPN login password with or without SAML configured. When using SAML, this feature relies on persistent sessions being configured in the identity provider (IdP), discussed as follows:
If the IdP does not support persistent sessions, FortiClient cannot save the SAML password. The end user must provide the password to the IdP for each VPN connection attempt.
The FortiClient save password feature is commonly used along with autoconnect and always up features.
FortiGuard Web Filtering category v10 update
Fortinet has updated its web filtering categories to v10, which includes two new URL categories for AI chat and cryptocurrency websites. To use the new categories, customers must upgrade their Fortinet products to one of the following versions:
- FortiManager - Fixed in 6.0.12, 6.2.9, 6.4.7, 7.0.2, 7.2.0, 7.4.0
- FortiOS - Fixed in 7.2.8 and 7.4.1
- FortiClient - Fixed in Windows 7.2.3, macOS 7.2.3, Linux 7.2.3
- FortiClient EMS - Fixed in 7.2.1
- FortiMail - Fixed in 7.0.7, 7.2.5, 7.4.1
- FortiProxy - Fixed in 7.4.1
Read the following CSB for more information to caveats on the usage in FortiManager and FortiOS: https://support.fortinet.com/Information/Bulletin.aspx
Nested VPN tunnels
FortiClient does not support parallel independent VPN connections to different sites. However, FortiClient may still establish VPN connection over existing third-party (for example, AT&T Client) VPN connection (nested tunnels).