FortiClient (Mac OS X) Release Notes VERSION

(1)

FortiClient (Mac OS X) Release Notes

(2)

FORTINET DOCUMENT LIBRARY http://docs.fortinet.com FORTINET VIDEO LIBRARY http://video.fortinet.com FORTINET BLOG https://blog.fortinet.com CUSTOMER SERVICE & SUPPORT https://support.fortinet.com FORTIGATE COOKBOOK http://cookbook.fortinet.com FORTINET TRAINING SERVICES http://www.fortinet.com/training FORTIGUARD CENTER http://www.fortiguard.com END USER LICENSE AGREEMENT http://www.fortinet.com/doc/legal/EULA.pdf FEEDBACK Email:[email protected] January 28, 2015

FortiClient 5.0.10 Release Notes

(3)

Change Log

4 Introduction

5 What’s new in FortiClient version 5.0

5 Licensing

7 Client limits

7 Upgrade Information

9 FortiClient tools

9 Upgrading from FortiClient version 5.0.0 or later

9 Downgrading to previous versions

9 Uninstall FortiClient

9 Firmware image checksums

10 Product Integration and Support

11 FortiClient version 5.0.10 support

11 Language support

12 Resolved Issues

13

(4)

Change Log

Date Change Description

2015-01-28 Initial release.

4 Release Notes

(5)

Introduction

This document provides the following information for FortiClient version 5.0.10 build 0143:

l What’s new in FortiClient version 5.0 l Licensing

l Upgrade Information

l Product Integration and Support l Resolved Issues

l Known Issues

For more information, see theFortiClient 5.0.10 Administration Guide available in theFortinet Document Library.

What’s new in FortiClient version 5.0

The following is a list of enhancements in FortiClient version 5.0:

FortiClient version 5.0.10

l Added support for Mac OS X 10.10 (Yosemite)

l The OpenSSL library has been updated to the latest version 1.0.1k.

l There are no new features or enhancements in this release.

l Improvements to the Endpoint Control GUI

l Option to drop IPv6 traffic when an IPsec VPN connection is established. IPv4 traffic is sent through the tunnel or

otherwise, depending on whether split tunnel is used

l Customized Installation: Users may choose to install the entire FortiClient feature set, or just the VPN.

5 Release Notes

(6)

What’s new in FortiClient version 5.0 Introduction

l Assign endpoint control profiles based on Active Directory group

Requires a FortiGate running FortiOS version 5.0.3 or later.

On a system using Active Directory (AD) for user account verification, FortiClient will send the AD user name and group to the FortiGate during endpoint control (EC) registration. The FortiGate may be configured to select the correct EC profile by user or group.

l Display endpoint control profile details in registration dialog box

l Removed Vulnerability Scan (VCM) and Application Firewall for standalone clients

FortiGate administrators may choose to display these two features (on FortiClient) for users registered to the FortiGate.

l Enhanced how the list and status of FortiGates are displayed for Endpoint Control registration

l Improved VPN usability with FortiToken

l Customizable console for registered clients

l Endpoint control registration with redundant gateways (maximum 20)

Enables roaming clients.

l Enhancements to the remembered FortiGates feature

l FortiClient uploads traffic and vulnerability scan logs to FortiAnalyzer/FortiManager

Requires a FortiAnalyzer/FortiManager device running version 5.0.10 or later and a FortiGate device running version 5.0.10 or later.

l FortiClient console improvements l FortiClient traffic logging

l Improved VPN controller reliability

l Silent registration element added to the endpoint_control section in the XML configuration file. l Synchronize VPN elements; save password, auto connect, and always up; with the FortiGate.

l Web category filtering safe search support

For popular search sites or portals including: Google, Bing, Yahoo, and Yandex.

l Remember multiple FortiGates for Endpoint Control registrations l Endpoint Control registration over SSL VPN and IPsec VPN l Improvements to the FortiClient Console

l Splash screen l VPN resiliency

l AntiVirus and Antimalware

Protection against the latest virus, grayware (adware/riskware) threats.

Release Notes

Fortinet Technologies Inc.

(7)

Introduction Licensing

Client antivirus is free and auto updates every three hours.

l Application Firewall

Block, allow, and monitor applications that send traffic to the network.

l Bring Your Own Device (BYOD) l Diagnostic Tool

l Enhancements to the FortiClient dashboard l Endpoint Management using FortiGate, including:

l Automatic endpoint registration. User initiated endpoint registration. l Deploy VPN (IPsec/SSL) configuration

l Enable/disable AntiVirus real-time protection.

l Manage/deploy Web Filtering and Application Firewall configuration. l Localization support

l Parental Control/Web Filter

Block, allow, warn, and monitor web traffic based on category.

l Remote Access (IPsec and SSL VPN)

Secure Virtual Private Network access to your network. Supports multiple gateways for a single tunnel.

l Single Sign-On Mobility Agent support with FortiAuthenticator/FSSO Collector Agent l Support automatic executing of a custom batch script via an IPsec VPN tunnel

l Support multiple (maximum 10) gateway IP/FQDN in a single IPsec VPN configuration l Support XML configuration

l VPN from system tray l VPN auto connect/always up

Supports the ability to automatically connect to a VPN tunnel without user interaction Supports the ability to configure the VPN to always be connected

l Vulnerability Scan

l Identify system and application vulnerabilities.

Licensing

Licensing on the FortiGate is based on the number of registered clients. FortiGate 30D and higher models support ten (10) free managed FortiClient licenses. For additional managed clients, an upgraded license must be purchased. The maximum number of managed clients varies per device model.

Client limits

The following table shows client limits per FortiGate model series.

FortiClient license upgrade

FortiGate Series Free registrations FortiClient license upgrade SKU

FortiGate/FortiWiFi 30 to 40 series 10 No upgrade license.

7 Release Notes

(8)

Licensing Introduction

FortiGate Series Free registrations FortiClient license upgrade SKU

FortiGate/FortiWiFi 60 to 90 series 10 200 client registrations FCC-C0102-LIC

FortiGate 100 to 800 series and VM01 to VM02

10 2000 client registrations FCC-C0103-LIC

FortiGate 1000 to 5000 series and VM04 to VM08

10 8000 client registrations FCC-C0105-LIC

In high availability (HA) configurations, all cluster members require an upgrade license key.

For more information, go towww.forticlient.com.

Release Notes

(9)

Upgrade Information

FortiClient tools

FortiClient includes various utility tools and files to help with installations. The following tools and files are available in the FortiClient Tools .tar file:

l OnlineInstaller

l FortiClient_5.0.10.143_Installer.dmg

This is an installer which when run on a Mac OS X client, will connect to the FortiGuard Distribution Server (FDS) to download and install the full FortiClient application.

l Repackager

l FortiClientRepackager_5.0.10.143.dmg

An installer repackaging tool that is used to create customized installation packages.

An Endpoint License for FortiGate is required to use the FortiClient Repackager tool.

Upgrading from FortiClient version 5.0.0 or later

FortiClient version 5.0.10 build 0143 supports upgrade from version 5.0.0 or later. To upgrade follow these steps:

1. In the menu-bar, shutdown FortiClient..

2. Download the online installer from theCustomer Service & Supportportal. 3. Run the online installer to upgrade to FortiClient version 5.0.10.

Downgrading to previous versions

FortiClient version 5.0.10 does not support downgrading to previous versions.

Uninstall FortiClient

To uninstall FortiClient version 5.0.10, use theApplication > FortiClient > Uninstaller application.

9 Release Notes

(10)

Firmware image checksums Upgrade Information

Firmware image checksums

The MD5 checksums for all Fortinet software and firmware releases are available at the Customer Service & Support portal,https://support.fortinet.com. To verify the integrity of the download, select theChecksum link next to the HTTPS download link. A dialog box will be displayed with the image file name and checksum code. Compare this

checksum with the checksum of the firmware image.

Release Notes

(11)

Product Integration and Support

FortiClient version 5.0.10 support

The following table lists FortiClient version 5.0.10 product integration and support information.

Desktop operating systems lMac OS X v10.8 Mountain Lion lMac OS X v10.9 Mavericks lMac OS X v10.10 Yosemite

Support for Mac OS X v10.7 Lion has been removed in FortiClient version 5.0.10. Users are encouraged to upgrade their operating systems to at least Mac OS X v10.8 Mountain Lion before upgrading to FortiClient ver-sion 5.0.10.

Minimum system requirements lIntel processor l256MB of RAM

l20MB of hard disk drive (HDD) space lTCP/IP communication protocol lEthernet NIC for network connections

lWireless adapter for wireless network connections lAdobe Acrobat Reader for FortiClient documentation

FortiOS l5.0.0 and later

Some FortiClient features are dependent on specific FortiOS versions.

FortiAnalyzer l5.0.2 and later

l5.2.0 and later

FortiManager l5.0.2 and later

l5.2.0 and later

FortiAuthenticator l3.0.0 and later l3.1.0 and later l3.2.0 and later

11 Release Notes

(12)

Language support Product Integration and Support

Language support

The following table lists FortiClient version 5.0.10 language support.

Language support

Language Graphical User Interface XML Configuration Documentation

English a a a Chinese (Simplified) a Chinese (Traditional) a French a German a Japanese a Korean a Portuguese (Brazil) a Spanish (Spain) a

The FortiClient language setting defaults to the regional language setting configured on the client workstation unless configured in the XML configuration file.

If the client workstation is configured to a regional language setting that is not supported by FortiClient, it defaults to English.

Release Notes

(13)

Resolved Issues

There are no resolved issues in FortiClient version 5.0.10. For inquires about a particular bug or to report a bug, please contactFortinet Customer Service & Support.

13 Release Notes

(14)

Known Issues

There are no known issues reported in FortiClient version 5.0.10. For inquires about a particular bug or to report a bug, please contactFortinet Customer Service & Support.

14 Release Notes

(15)

Copyright© 2015 Fortinet, Inc. All rights reserved. Fortinet®, FortiGate®, FortiCare® and FortiGuard®, and certain other marks are registered trademarks of Fortinet, Inc., in the U.S. and other jurisdictions, and other Fortinet names herein may also be registered and/or common law trademarks of Fortinet. All other product or company names may be trademarks of their respective owners. Performance and other metrics contained herein were attained in internal lab tests under ideal conditions, and actual performance and other results may vary. Network variables, different network environments and other conditions may affect performance results. Nothing herein represents any binding commitment by Fortinet, and Fortinet disclaims all warranties, whether express or implied, except to the extent Fortinet enters a binding written contract, signed by Fortinet’s General Counsel, with a purchaser that expressly warrants that the identified product will perform according to certain expressly-identified performance metrics and, in such event, only the specific performance metrics expressly identified in such binding written contract shall be binding on Fortinet. For absolute clarity, any such warranty will be limited to performance in the same ideal conditions as in Fortinet’s internal lab tests. In no event does Fortinet make any commitment related to future deliverables, features, or development, and circumstances may change such that any forward-looking statements herein are not accurate. Fortinet disclaims in full any covenants, representations,and guarantees pursuant hereto, whether express or implied. Fortinet reserves the right to change, modify, transfer, or otherwise revise this publication without notice, and the most current version of the publication shall be applicable.

FortiClient (Mac OS X) Release Notes VERSION