FortiClient v5.0 Patch Release 5 (Windows) Release Notes
Contents
1. 197228 Unable to synchronize the FortiClient registration database between 32 bit and 64 bit FortiOS platforms 213749 On Microsoft Windows XP systems with Trend Micro installed web filtering does not work after upgrading FortiClient Connect v4 0 MR3 Patch Release 5 to FortiClient v5 0 Patch Release 5 Page 15 FortiClient Windows v5 0 Patch Release 5 Release Notes Firmware Image Checksums The MD5 checksums for all Fortinet software and firmware releases are available at the Customer Service amp Support portal located at https support fortinet com After logging in click on Download gt Firmware Image Checksum enter the image file including the extension and select Get Checksum Code Figure 1 Firmware image checksum tool RATINET CUSTOMER SERVICE amp SUPPORT Welcome My Profle Log Out Home AssetManagement Assistance Center Download FAM Support Programs Doils Resources For Guasrd Center Feedback FIRMWARE IMAGE CHECKSUMS FileName FGT_10004 v400 bulld0185 FORTINET ot Example FGT_1000A 400 OulidO 1SSFORTINET out Get Crecksum Code Checksum Code od 7ESEMDOSOEECOSOR0D1ODESISed7C Firmware Image Checksums Page 16 FortiClient Windows v5 0 Patch Release 5 Release Notes2. F sRTIMNET FortiClient Windows v5 0 Patch Release 5 Release Notes FortiClient Windows v5 0 Patch Release 5 Release Notes August 07 2013 04 505 211527 20130807 Copyright 2013 Fortinet Inc All rights reserved Fortinet FortiGate and FortiGuard are registered trademarks of Fortinet Inc and other Fortinet names herein may also be trademarks of Fortinet All other product or company names may be trademarks of their respective owners Performance metrics contained herein were attained in internal lab tests under ideal conditions and performance may vary Network variables different network environments and other conditions may affect performance results Nothing herein represents any binding commitment by Fortinet and Fortinet disclaims all warranties whether express or implied except to the extent Fortinet enters a binding written contract signed by Fortinet s General Counsel with a purchaser that expressly warrants that the identified product will perform according to the performance metrics herein For absolute clarity any such warranty will be limited to performance in the same ideal conditions as in Fortinet s internal lab tests Fortinet disclaims in full any guarantees Fortinet reserves the right to change modify transfer or otherwise revise this publication without notice and the most current version of the publication shall be applicable Technical Documentation docs fortinet com Knowledge Base kb forti
3. ation and Support s ssssssnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnn nnna 11 Operating system SUpport Succ cat cicecetanecusdi cen ccatahndenlacndanccexenlsadenstencemusdveuecostnecuaiaas 11 Minimum SYSTEM requirements sii cccseaeiececeisse ads sneenineeresneueavaderdeauwaseeneaeunemcuudads 11 ForntiOS S PER oe Nera yon ener r ree 11 FOrtiAnalyZer SUPPOML icsa vccced vectacectcdectienctban a cee cceacdacusnuedaatieadevereaveraaceetenteeaanees 11 FortiManager support ccccccecceseceeeceeeceeceeeceeeceeeceeeceneceneceeeceeceneceeeceeeeeeeseneeneas 11 Web browser SUPPO aieccictigeetiessicasdecasdevsadssleiecdasssisesdeealsecsadecdedeeleiacdvasdesast ene EA 12 Bea A 5 ES UM iinis nnat ee bate crac ep apc AAEE tae aed aa OERA Ei 12 Conflicts with third party antivirus PrOdUCTS c ccseccceeeceeseeeeeeeeeeeeeeesseeneeeeeeees 13 Resolved ISSu 6S sisiiscisiiiisnncsasneseuncannicnsaceciienvnninwnsnietaccsransnivanavasinensndamunieneneuien 14 KNOWN ISSUES siinne Ria aoai oesatebnaticdennaimeeecim 15 Firmware Image CheckSUMS sss unssnnnnnnnnnnnnnnunnnnnnnnnnnnnnnnnnnnnnnnnnn nnmnnn nnna 16 Page 3 Change Log Date Change Description 2013 08 07 Initial release Page 4 Introduction This document provides a summary of enhancements support information and installation instruction to upgrade your client to FortiClient Windows v5 0 Patch Release 5 build 0308 Please review all sec
4. e FortiClientSetup_5 0 5 0308_x64 exe Standard installer for 64 bit Windows e FortiClientSetup_5 0 5 0308_x64 zip A zip package containing FortiClient msi and language transforms for 64 bit Windows Some properties of the MSI package can be customized with FortiClient Configurator tool e FortiClientTools_5 0 5 0308 zip A zip package containing miscellaneous tools including the FortiClient Configurator tool and Onlinelnstaller When upgrading on a Windows XP system a warning dialog box is displayed indicating that one of the files to be updated is currently in use Please select the Ignore button to continue with the upgrade Users with newer Windows OS versions will receive a different warning dialog box It warns that a reboot will be required to complete the installation Please click the OK button to continue with the installation Upgrading from FortiClient v5 0 0 or later FortiClient Windows v5 0 Patch Release 5 supports direct upgrade from FortiClient v5 0 0 or later along with the regular manual upgrade method Please review the Introduction Product Integration and Support and Known Issues chapters prior to upgrading For more information on upgrading FortiClient see the FortiClient v5 0 Patch Release 5 Administration Guide at http docs fortinet com Upgrading from FortiClient Lite v4 0 MR3 FortiClient Windows v5 0 Patch Release 5 supports manual upgrade from FortiClient Lite v4 0 MR3 Patch Release 5 Upgrade In
5. e Microsoft Internet Explorer version 8 or later e Windows compatible computer with Pentium processor or equivalent e Compatible operating system and minimum RAM 512MB e 600 MB free hard disk space e Native Microsoft TCP IP communication protocol e Native Microsoft PPP dialer for dial up connections e Ethernet NIC for network connections e Wireless adapter for wireless network connections e Adobe Acrobat Reader for user manual e MSI installer 3 0 or later FortiOS support FortiClient Windows v5 0 Patch Release 5 is supported by FortiOS v5 0 0 or later Some FortiClient features are dependent on specific FortiOS versions For more information see Summary of enhancements FortiAnalyzer support FortiClient Windows v5 0 Patch Release 5 is supported by FortiAnalyzer v5 0 Patch Release 2 or later for the logging feature See the FortiClient v5 0 Patch Release 5 Administration Guide for more information FortiManager support FortiClient Windows v5 0 Patch Release 5 is supported by FortiManager v5 0 Patch Release 2 or later for the logging and FDS update features See the FortiClient v5 0 Patch Release 5 Administration Guide for more information Product Integration and Support Page 11 FortiClient Windows v5 0 Patch Release 5 Release Notes Web browser support The FortiClient console is supported by Microsoft Internet Explorer version 8 or later Language support The following table lists FortiClient language support in
6. formation Table 2 Language support Language Graphical User Interface XML Configuration Documentation English v v v French France v German v Portuguese Brazil v Spanish Spain v Korean v z Chinese Simplified v 7 Chinese Traditional v Japanese v The FortiClient language setting defaults to the regional language setting configured on the client workstation unless configured in the XML configuration file If the client workstation is configured to a regional language setting that is not supported by FortiClient it defaults to English The XML configuration language setting overrides the regional language setting on the client workstation If your users require the FortiClient language to reflect their workstation setting do not configure the XML configuration setting Product Integration and Support Page 12 FortiClient Windows v5 0 Patch Release 5 Release Notes Conflicts with third party antivirus products The antivirus feature in FortiClient Windows is known to conflict with other similar products in the market Consider removing other antivirus programs before installing FortiClient During a new installation of FortiClient the installer will search for other registered third party software and if any is found warn users to uninstall them before proceeding with the installation There is also the option to disable FortiClient Real Time Protect
7. formation Page 8 FortiClient Windows v5 0 Patch Release 5 Release Notes Upgrading from FortiClient Connect v4 0 MRS FortiClient Windows v5 0 Patch Release 5 supports manual upgrade from FortiClient Connect v4 0 MR3 Patch Release 5 FortiClient Windows v5 0 Patch Release 5 does not support upgrading from older patch releases of FortiClient v4 0 MR3 Patch Release 1 to 4 Upgrading from FortiClient v4 0 MR2 FortiClient Windows v5 0 Patch Release 5 supports manual upgrade upgrade through FortiGuard Distribution Servers FDS and upgrade through FortiManager v4 0 MR3 from FortiClient v4 0 MR2 A successful software upgrade will convert and update all existing v4 0 MR2 configurations to FortiClient v5 0 Patch Release 5 formats See the Known Issues section before starting an upgrade for information on exceptions An Internet connection is required for both manual and FDS software upgrades Manual upgrade FortiClient v4 0 MR2 may be upgraded to FortiClient v5 0 Patch Release 5 by running the FortiClient v5 0 Patch Release 5 installation file on the client computer The installation file can be downloaded from the following sites e Fortinet Customer Service amp Support https support fortinet com Requires a support account with a valid support contract e FortiClient homepage www forticlient com Upgrade through FDS Fortinet may in the future push a FortiClient update through the FDS Existing FortiClient v4 0 MR2 users
8. ion RTP When upgrading from an older version of FortiClient which does not have the antivirus feature installed a similar search is done Product Integration and Support Page 13 FortiClient Windows v5 0 Patch Release 5 Release Notes Resolved Issues Resolved Issues The resolved issues table listed below does not list every bug that has been corrected with FortiClient Windows v5 0 Patch Release 5 build 0308 For inquires about a particular bug please contact Customer Service amp Support Table 3 Resolved issues Bug ID Description 196564 Failed to block Gmail when using a Google Chrome web browser with FortiClient web filtering Parental Control enabled 209196 Display more information on VPN connected page 209198 FortiClient Windows console does not support Japanese after upgrading 211577 from v5 0 Patch Release 3 to v5 0 Patch Release 4 209772 Phase 1 negotiation fails when using SmartCard and a certificate with AT_SIGNATURE keySpec 210039 The Cisco vendor registry key is deleted by configuration restore 210429 Token with email does not work for SSL VPN login before Windows logon 212624 An IPsec pre shared key with the percent character does not function 212941 After upgrading from FortiClient Connect v4 0 MR to FortiClient v5 0 Patch Release 4 the host computer may experience performance issues or freeze 213374 FortiClient has a false positive on Microsoft digi
9. ities Licensing Licensing on the FortiGate is based on the number of registered clients FortiGate 40C and higher models support ten 10 free managed FortiClient licenses For additional managed clients an upgraded license must be purchased The maximum number of managed clients varies per device model Client limits The following table shows client limits per FortiGate model series Table 1 FortiClient license upgrade FortiGate Series Free registrations FortiClient license upgrade SKU FortiGate FortiWiFi 30D 40C series 10 No upgrade license FortiGate FortiWiFi 60C 60D 80C 10 200 client registrations 90D series FCC C0102 LIC FortiGate 100 200 300 600 800 10 2000 client registrations series VM01 VM01 XEN FCC C0103 LIC VM02 VM02 XEN FortiGate 1000 3000 5000 series 10 8000 client registrations VM04 VM04 XEN VM08 VM08 XEN FCC C0105 LIC In high availability HA configurations all cluster members require an upgrade license key For more information go to www forticlient com Introduction Page 7 FortiClient Windows v5 0 Patch Release 5 Release Notes Upgrade Information Firmware images and tools e FortiClientSetup_5 0 5 0308 exe Standard installer for 32 bit Windows e FortiClientSetup_5 0 5 0308 zip A zip package containing FortiClient msi and language transforms for 32 bit Windows Some properties of the MSI package can be customized with FortiClient Configurator tool
10. ministrators may choose to display these two features on FortiClient for users registered to the FortiGate Enhanced how the list and status of FortiGates are displayed for Endpoint Control registration FortiClient Windows v5 0 Patch Release 3 Enhancements to FortiProxy Improved VPN usability with FortiToken Page 5 FortiClient Windows v5 0 Patch Release 5 Release Notes Introduction FortiClient Windows v5 0 Patch Release 2 Customizable console for registered clients Endpoint control registration with redundant gateways maximum 20 Enables roaming clients Enhancement to the remembered FortiGates feature FortiClient uploads traffic event and vulnerability scan logs to FortiAnalyzer FortiManager Requires a FortiAnalyzer FortiManager running v5 0 Patch Release 2 or later and a FortiGate running FortiOS v5 0 Patch Release 2 or later SSL VPN realm support command line Synchronize VPN elements save password autoconnect and always up with the FortiGate Requires a FortiGate running FortiOS v5 0 Patch Release 2 or later Web category filtering safe search support For popular search sites or portals including Google Bing Yahoo and Yandex FortiClient Windows v5 0 Patch Release 1 Endpoint Control registration over SSL VPN or IPsec VPN Remember multiple FortiGates for Endpoint Control registrations FortiClient console improvements FortiClient Windows v5 0 0 Antivirus and Antimalware Protection against
11. net com Customer Service amp Support support fortinet com Training Services training fortinet com FortiGuard fortiguard com Document Feedback techdocs fortinet com Table of Contents Ghange BOG csaa EEE Eees 4 INGFOGUCUION sis iissitinesvnceiecnsntseneastbendsnnsiantnadsisneuncvessnessiastanudendinnernisininiansiecueenouNenD 5 S mmary OF GMA CSNMSMES yet isectatwastontiduendiuderditutclnasdmeetianldatauucasruiiadsdadenmn aides 5 MG SI hit se psec cheaa cmc pte tat ewe nn ee cect ate ieee uote E E S 7 Client NGC Sicscr aan cts casnaigusa bcuicasteadaateila a 7 Upgrade Information sisisi a aa anea ae ara aS EEES 8 Firmware images and 1G Soha csctnccniamnacccicatncna aacvacueninannacunnatoumantnactnsonmatonaancmntavenauss 8 Upgrading from FortiClient v5 0 0 or later ccceessseeeeeesseeeeeeeeeeeeeeeeaeeeeeeseeaeeetees 8 Upgrading from FortiClient Lite v4 0 MR3 ccceessseeeeesseeeeeeeeeeeeeeeeeaeeeeeeseeeeeeneees 8 Upgrading from FortiClient Connect V4 0 MRS eccceeeeeeeeeeeeeneeeeeeeneeeeeeeeaeeeeeees 9 Upgrading trom FortiClient v4 0 MP2 sisccicccectecertsecteanuuieecuaddawentveusanduetaieeinatieaeeeass 9 Manual upgr d esiseina aa a a aaa aa aa 9 Upgrade thro gh FDS esei reana a aa aaa aSa Eea aa Eea TESA 9 Upgrade through FortiManager sie deds s otasivndet Sacinmncin asada waenaaoenannensaudeeierta naaeeds 10 Downgrading to previous Versions wiicaiedeseieineceauecnecenneemaancnedcuuunnivenauedenuins 10 Product Integr
12. tally signed system driver files ending in sys located in the Windows System32 drivers directory The files were detected if the antivirus signature database had matching signatures for the files 213825 FortiClient Windows is not able to authenticate users with special characters in the password Page 14 FortiClient Windows v5 0 Patch Release 5 Release Notes Known Issues Known Issues The known issues table listed below does not list every bug that has been reported with FortiClient Windows v5 0 Patch Release 5 build 0308 For inquires about a particular bug or to report a bug please contact Customer Service amp Support Table 4 Known issues Bug ID Description 181072 The FortiGate IP and port cannot be specified on the command line installer 188367 The welcome page should display a warning when installing FortiClient on a server platform 196405 SSL VPN tunnels are not imported when upgrading from FortiClient v4 0 MR2 Patch Release 8 Workaround If the existing installation has only the SSL VPN standalone client a manual upgrade will be successful However an upgrade pushed by FortiManager will result in a loss of any existing SSL tunnel configurations These tunnel configurations cannot be transferred into FortiClient v5 0 Patch Release 4 Users in this scenario should manually save their existing SSL VPN tunnel configurations and recreate them in FortiClient v5 0 Patch Release 4
13. the latest virus grayware adware riskware threats Client antivirus is free and auto updates every three hours Application firewall Block allow and monitor applications that send traffic to the network Bring Your Own Device BYOD Diagnostic tool Enhancements to the FortiClient console Endpoint Management using FortiGate including Automatic endpoint registration User initiated endpoint registration Deploy VPN IPsec SSL configuration Enable disable antivirus real time protection Manage deploy web filtering and application firewall configuration Localization support Parental Control Web Filter Block allow warn and monitor web traffic based on category Remote Access IPsec and SSL VPN Secure Virtual Private Network access to your network Supports multiple gateways for a single tunnel Rootkit detection and removal Single Sign On Mobility agent support with FortiAuthenticator FSSO collector agent Support automatic executing of a custom batch script via an IPsec VPN tunnel Support multiple maximum 10 gateway IP FQDN in a single IPsec VPN configuration Support XML configuration Page 6 FortiClient Windows v5 0 Patch Release 5 Release Notes e VPN from system tray e VPN auto connect always up Supports the ability to automatically connect to a VPN tunnel without user interaction Supports the ability to configure the VPN to always be connected e Vulnerability scan Identify system and application vulnerabil
14. tions prior to upgrading For more information see the FortiClient v5 0 Patch Release 5 Administration Guide at http docs fortinet com felnt html This document includes the following sections Introduction Upgrade Information Product Integration and Support Resolved Issues Known Issues Firmware Image Checksums Summary of enhancements Introduction The following is a list of enhancements in FortiClient Windows v5 0 FortiClient Windows v5 0 Patch Release 5 Enhanced file copy performance Customized installation Users may choose to install the entire FortiClient feature set or only the VPN features Scan for viruses on the target system before installing FortiClient Enhanced GUI performance FortiClient Windows v5 0 Patch Release 4 Assign endpoint control profiles based on Active Directory group Requires a FortiGate running FortiOS v5 0 Patch Release 3 or later On a system using Active Directory AD for user account verification FortiClient will send the AD user name and group to the FortiGate during Endpoint Control EC registration The FortiGate may be configured to select the correct EC profile by user or group Display endpoint control profile details in registration dialog box Requires a FortiGate running FortiOS v5 0 Patch Release 3 or later Removed Vulnerability Scan VCM and Application Firewall for standalone clients Requires a FortiGate running FortiOS v5 0 Patch Release 2 or later FortiGate ad
15. upgrade Push update from FortiManager to managed FortiClient agents 1 Obtain the FortiClient Windows v5 0 Patch Release 5 installation files from the Fortinet support website https support fortinet com To download firmware images you require a support account with a valid support contract 2 Configure the IP address of the FortiGate that will be used for managing the clients after the upgrade is completed Create a custom MSI installer file 3 4 Configure Endpoint Control on your FortiGate device 5 Upload the customized MSI installer file to FortiManager 6 Distribute the MSI installer file to registered clients FortiClient will register to the FortiGate device after the update For more information on the FortiClient Configurator tool see the FortiClient MSI configuration tool chapter in the FortiClient v5 0 Patch Release 5 Administration Guide Downgrading to previous versions Upgrade Information FortiClient Windows v5 0 Patch Release 5 does not support downgrading to previous FortiClient versions Page 10 FortiClient Windows v5 0 Patch Release 5 Release Notes Product Integration and Support Operating system support FortiClient Windows v5 0 Patch Release 5 supports the following operating systems e Microsoft Windows 8 32 bit and 64 bit e Microsoft Windows 7 32 bit and 64 bit e Microsoft Windows Vista 32 bit and 64 bit e Microsoft Windows XP 32 bit Minimum system requirements
16. will receive an update notification They may choose to accept or reject the update If the user accepts the update FortiClient will proceed to complete the installation of FortiClient v5 0 Patch Release 5 If the update notice is rejected the notification may be repeated at regular intervals Some users may have configured to run updates automatically For such users the upgrade will proceed without a prompt Upgrade Information Page 9 FortiClient Windows v5 0 Patch Release 5 Release Notes Upgrade through FortiManager FortiClient v4 0 MR2 client computers that are managed by FortiManager may be upgraded to FortiClient v5 0 Patch Release 5 by pushing the update from the FortiManager FortiClient v5 0 Patch Release 5 does not support use of FortiManager for central management FortiGate devices running FortiOS v5 0 may be used for endpoint control After a successful upgrade previously managed FortiClient systems will no longer be managed from FortiManager The administrator should consider the impact of this on FortiClient distribution A software upgrade may be initiated by the administrator by manually uploading the FortiClient v5 0 Patch Release 5 MSI installation package to FortiManager v4 0 MR3 The end user receives a notification requesting permission to proceed with the upgrade The manual package upload allows the administrator to configure the IP address of a FortiGate that will manage the clients upon completion of the
Download Pdf Manuals
Related Search