FortiClient (macos) - Release Notes. Version 6.4.1

(1)

FortiClient (macOS) - Release Notes

Version 6.4.1

(2)

FORTINET DOCUMENT LIBRARY https://docs.fortinet.com

FORTINET VIDEO GUIDE https://video.fortinet.com

FORTINET BLOG https://blog.fortinet.com

CUSTOMER SERVICE & SUPPORT https://support.fortinet.com

FORTINET TRAINING & CERTIFICATION PROGRAM https://www.fortinet.com/support-and-training/training.html

NSE INSTITUTE

https://training.fortinet.com

FORTIGUARD CENTER https://fortiguard.com/

END USER LICENSE AGREEMENT https://www.fortinet.com/doc/legal/EULA.pdf

FEEDBACK

Email:[email protected]

(3)

Change log 4

Introduction 5

Licensing 5

Special notices 6

FortiClient on macOS Catalina (version 10.15) 6

FortiClient Web Filter 7

DHCP over IPsec VPN not supported 8

macOS Catalina (version 10.15) reboot prompt 8

IKEv2 not supported 8

What’s new in FortiClient (macOS) 6.4.1 9

Installation information 10

Firmware images and tools 10

Upgrading from previous FortiClient versions 10

Downgrading to previous versions 10

Uninstalling FortiClient 10

Firmware image checksums 11

Product integration and support 12

Language support 12

Resolved issues 14

GUI 14

Application Firewall 14

Malware Protection 14

Sandbox Detection 14

Remote Access 15

Vulnerability Scan 15

Web Filter 15

Endpoint control 15

Performance 15

Known issues 17

Endpoint control 17

Malware Protection 17

Remote Access 17

Sandbox 18

Web Filter 18

EMS deployment 18

Performance 18

(4)

Change log

Date Change description

2020-08-24 Initial release.

2020-09-11 Added Common Vulnerabilities and Exposures on page 16.

(5)

Introduction

This document provides a summary of enhancements, support information, and installation instructions for FortiClient (macOS) 6.4.1 build 1267.

This document includes the following sections:

^l Special notices on page 6

l What’s new in FortiClient (macOS) 6.4.1 on page 9 l Installation information on page 10

^l Product integration and support on page 12 l Resolved issues on page 14

^l Known issues on page 17

Review all sections prior to installing FortiClient. For more information, see the FortiClient Administration Guide.

Licensing

FortiClient 6.2.0, FortiClient EMS 6.2.0, and FortiOS 6.2.0 introduce a new licensing structure for managing endpoints running FortiClient 6.2.0+. See Upgrading from previous FortiClient versions on page 10 for more information on how the licensing changes upon upgrade to 6.2.0+. Fortinet no longer offers a free trial license for ten connected FortiClient endpoints on any FortiGate model running FortiOS 6.2.0+. EMS 6.4.1 supports a trial license. With the EMS free trial license, you can provision and manage FortiClient on ten Windows, macOS, and Linux endpoints and ten Chromebook endpoints indefinitely.

FortiClient 6.4.1 offers a free VPN-only version that can be used for VPN-only connectivity to FortiGate devices running FortiOS 5.6 and later versions. You can download the VPN-only application from FortiClient.com.

(6)

Special notices

FortiClient on macOS Catalina (version 10.15)

You can install FortiClient (macOS) 6.4.1 on macOS 10.15 Catalina. With this macOS release, however, FortiClient works properly only when you grant permissions to access the full disk in the Security & Privacy pane for the following services:

^l fcaptmon l fctservctl l fmon ^l fmon2 l FortiClient

You may have to manually add fmon2 to the list, as it may not be in the list of applications to allow full disk access to.

Click the + icon to add an application. Browse to /Library/Application Support/Fortinet/FortiClient/bin/ and select fmon2.

(7)

Special notices

FortiClient Web Filter

The FortiClient (macOS) Web Filter feature works properly only when you allow system software from Fortinet to load in Security & Privacy settings. Go to System Preferences > Security & Privacy and click the Allow button beside System software from developer "Fortinet, Inc" was blocked from loading. You must have administrator credentials for the macOS machine to configure this change.

FortiClient (macOS) does not support Web Filter for websites using TLS 1.3.

(8)

Special notices

DHCP over IPsec VPN not supported

FortiClient (macOS) does not support DHCP over IPsec VPN.

macOS Catalina (version 10.15) reboot prompt

When using macOS Catalina (version 10.15), you must reboot the macOS device after installing FortiClient (macOS).

FortiClient (macOS) displays the following prompt after installation:

IKEv2 not supported

FortiClient (macOS) does not support IPsec VPN IKEv2.

(9)

What’s new in FortiClient (macOS) 6.4.1

For information about what's new in FortiClient (macOS) 6.4.1, see the FortiClient & EMS 6.4 New Features.

(10)

Installation information

Firmware images and tools

The following file is available from the Fortinet support site:

File Description

FortiClientTools_6.4.1.1267_macosx.tar.gz Includes utility tools and files to help with installation.

The following file is available from FortiClient.com:

File Description

FortiClientVPNSetup_6.4.1.1267_

macosx.dmg

Free VPN-only installer.

FortiClient EMS 6.4.1 includes the FortiClient (macOS) 6.4.1 standard installer.

Review the following sections prior to installing FortiClient version 6.4.1: Introduction on page 5, Special notices on page 6, and Product integration and support on page 12.

Upgrading from previous FortiClient versions

FortiClient version 6.4.1 supports upgrade from FortiClient 6.2.

FortiClient (macOS) 6.4.1 features are only enabled when connected to EMS 6.4.

See the FortiClient and FortiClient EMS Upgrade Paths for information on upgrade paths.

Downgrading to previous versions

(11)

Installation information

Firmware image checksums

The MD5 checksums for all Fortinet software and firmware releases are available at the Customer Service & Support portal. After logging in, click on Download > Firmware Image Checksums, enter the image file name including the extension, and select Get Checksum Code.

(12)

Product integration and support

The following table lists FortiClient (macOS) 6.4.1 product integration and support information:

Desktop operating systems l macOS Catalina (version 10.15). You must restart macOS 10.15.4 after FortiClient (macOS) installation.

l macOS Mojave (version 10.14) ^l macOS High Sierra (version 10.13) Minimum system requirements ^l Intel processor

l 256 MB of RAM

l 20 MB of hard disk drive (HDD) space ^l TCP/IP communication protocol ^l Ethernet NIC for network connections

l Wireless adapter for wireless network connections

l Adobe Acrobat Reader for viewing FortiClient documentation

AV engine ^l 6.00244

FortiAnalyzer ^l 6.4.0 and later FortiAuthenticator l 6.1.0 and later l 6.0.0 and later FortiClient EMS ^l 6.4.1

FortiManager ^l 6.4.0 and later

FortiOS The following versions support IPsec and SSL VPN:

l 6.4.0 and later ^l 6.2.0 and later ^l 6.0.0 and later

The following versions support endpoint control:

l 6.2.0 and later FortiSandbox ^l 3.2.0 and later

^l 3.1.0 and later l 3.0.0 and later

(13)

Product integration and support

Language GUI XML configuration Documentation

English Yes Yes Yes

Chinese (simplified) Yes

Chinese (traditional) Yes

French (France) Yes

German Yes

Japanese Yes

Korean Yes

Portuguese (Brazil) Yes

Russian Yes

Spanish (Spain) Yes

The FortiClient language setting defaults to the regional language setting configured on the client workstation unless configured in the XML configuration file.

If the client workstation is configured to a regional language setting that FortiClient does not support, it defaults to English.

(14)

Resolved issues

The following issues have been fixed in FortiClient (macOS) 6.4.1. For inquiries about a particular bug, contact Customer Service & Support.

GUI

Bug ID Description

650443 User cannot change GUI language with <culture_code>.

Application Firewall

578810 FortiClient blocks traffic between Xcode software and Apple TV.

Malware Protection

572620 Real-time protection detection prompt detail section is blank in macOS 10.14.6.

Sandbox Detection

(15)

Resolved issues

Remote Access

642914 If Save Password is disabled, Autoconnect remains enabled.

646090 When connected to an SSL VPN tunnel, GUI is missing the username.

650268 Username is blank for IPsec VPN.

Vulnerability Scan

614425 EMS fails to remotely patch critical and high vulnerabilities.

Web Filter

634667 Web Filter slows down performance of Resilio file share application on macOS.

Endpoint control

600524 FortiClient (macOS) incorrectly or incompletely imports a profile.

603171 After deregistering from EMS or if internal EMS is unreachable, GUI shows license expiry date as 24 hours remaining.

620102 FortiClient (macOS) loses features.

Performance

(16)

Resolved issues

Common Vulnerabilities and Exposures

618242 FortiClient (macOS) 6.4 running AV engine version 6.00243 or later no longer vulnerable to the following CVE Reference

l CVE-2020-9295

Visit https://fortiguard.com/psirt for more information.

(17)

Known issues

The following issues have been identified in FortiClient (macOS) 6.4.1. For inquiries about a particular bug or to report a bug, contact Customer Service & Support.

Endpoint control

605831 FortiClient (macOS) does not become quarantined when it is dually registered to EMS and FortiOS.

609245 FortiClient cannot register to EMS if a registration key is enabled.

651097 Unable to sync profile if registering to a new or second EMS due to previous EMS FQDN/IP address in configuration.

Malware Protection

628153 macOS device fails to detect plugged in iOS device when real-time protection is enabled.

Remote Access

600690 EMS provisioning shows invalid configuration for VPN.

605438 FortiClient (macOS) does not save the username for an SSL VPN tunnel.

614371 SSL VPN does not connect after waking the computer from sleep.

626322 FortiClient (macOS) does not use DNS suffixes configured in OS.

627962 FortiClient IP address shows local address instead of tunnel address on EMS while connected via tunnel.

(18)

Known issues

Sandbox

597278 EMS shows incorrect rating for FortiSandbox result for macOS devices.

618427 EMS cannot open detailed report of malware that FortiSandbox Cloud has quarantined.

Web Filter

643707 Web Filter affects browsing and Internet usage.

EMS deployment

449330 Verifying FortiClient (macOS) installer downloads during deployment from EMS.

Performance

615633 macOS freezes when FortiClient and Google File Stream are installed.

Install

(19)

FortiClient (macos) - Release Notes. Version 6.4.1