FortiClient 6.0.0 (Windows)

ForgottenSeer 58943 said:
Unrated sites should never be blocked or that setting will cause major grief.

The setting is there for restrictive corporate/enterprise/govt. systems that restrict access to unknown/unquantified entities. A consumer should never do this as illustrated above. It can block everything, even Windows Updates at times. Since a corporate network probably pushes from WSUS anyway.
Click to expand...
But is that blocked by default? I was running default settings + blocked p2p sites
 
Moonhorse said:
But is that blocked by default? I was running default settings + blocked p2p sites
Click to expand...

I believe it is on by default for the client and fortigate appliances. It's generally shipped for better settings for corporate. Which is why the default firewall policy of deny/deny/all is shipped by default. Can't have folks plugging things in and getting exposed. So yes, by default it could be fairly aggressive and may need to be adjusted.
 
  • Like
Reactions: Handsome Recluse, simmerskool and Moonhorse
No sandbox functionality was ever in FortiClient Free. Regardless of what it says, enabling it does nothing unless you can pair it with a Sandbox. So it never worked, regardless. I think I have mentioned that a few times around these parts.
 
  • Like
Reactions: AtlBo, simmerskool, Moonhorse and 2 others
ForgottenSeer 58943 said:
No sandbox functionality was ever in FortiClient Free. Regardless of what it says, enabling it does nothing unless you can pair it with a Sandbox. So it never worked, regardless. I think I have mentioned that a few times around these parts.
Click to expand...

Yes you have. They may have missed it.
 
  • Like
Reactions: AtlBo, simmerskool and Moonhorse
Its kinda weird how forticlient firewall service is taking the most ram there, and av module is 'sleeping' currently taking only 4mb of ram

Is next gen firewall used to play like this?
forticient.png
 
  • Like
Reactions: AtlBo, Gandalf_The_Grey and oldschool
Don't even install the firewall module.

It's not a firewall in the true sense of a firewall, it's an application firewall that ties into the Fortigate Appliance on the network to help offer L7 management/control/security of application use on a system. Without an appliance, that module is pointless and actually serves no purpose at all.
 
  • Like
Reactions: AtlBo, Gandalf_The_Grey, Handsome Recluse and 3 others
But the weird thing is that ram usage is less than without firewall module
Normally forticlient av module sits around 100mb? But with the application firewall its at 4mb and firewall at 50

Thats less ram, but still having the av working as intended?
 
  • Like
Reactions: AtlBo and Gandalf_The_Grey
ForgottenSeer 58943 said:
No sandbox functionality was ever in FortiClient Free. Regardless of what it says, enabling it does nothing unless you can pair it with a Sandbox. So it never worked, regardless. I think I have mentioned that a few times around these parts.
Click to expand...

Yes, you made that clear. Until recently it was possible (thanks to suggestions of you and other forum members) to enable sandbox signatures. When enabled it showed in the GUI/monitor that those signatures were updated also. So people using Forticlient free could
l benefit from the detection of other users with sandbox/fortiguard functionality.

With the sandbox signatures enabled in the XML configuration file, Forticlient Free flagged downloads from VX-Vault/Malc0de/etc as malware. Without the sandbox signatures not a beep. The big benefit of Forticlient free with Sandbox sigantures was that it blocked all recently found suspicious executables.

A while ago Forticlient stopped updating sandbox signatures and it sadly allowed all new malware samples from VX-Vault/Malc0de/etc. This is the problem @Tume reported and I confirmed (same observation, helas no sandbox signatures for free forticlient anymore).
 
Last edited:
  • Like
Reactions: AtlBo, oldschool, simmerskool and 5 others
I have a weird issue with FC were I simply can't enable Dynamic Threat Detection feature. If I try to enable it in the settings after exiting settings page the feature automatically get disabled. On my previous try on FC I remember successfully enabling this feature. Now I can't.
 
  • Like
Reactions: AtlBo and oldschool
kuttan said:
I have a weird issue with FC were I simply can't enable Dynamic Threat Detection feature. If I try to enable it in the settings after exiting settings page the feature automatically get disabled. On my previous try on FC I remember successfully enabling this feature. Now I can't.
Click to expand...
You need to have ATP installed, during installation phase
 
  • Like
Reactions: AtlBo and Kuttz
I am confused. When I click on the Forticlient link above and go to their site, I see a download button. When I click on that and chose Windows, I am taken to the Microsoft store. At the store there is no download, only an install button. I click that and it installs a version 1 something that has no GUI.

EDIT: My brain dead self had installed the Windows app for phone LOL. Got the right download now.
 
  • Like
Reactions: AtlBo and Moonhorse
Anyone have fix for the forticlient web filter restricting youtube, making it completely unusable
 
  • Like
Reactions: AtlBo
Stupid question, but how? im getting dizzle
asdt.png


ticklemefeet said:
If you are using the free version like me, you can not add it to the exclusion list.
Click to expand...
Sorry just did mislead your post.....seems i have to either remove forticlient or stay with the filtering:cry:
 
Last edited:
  • Like
Reactions: AtlBo
Moonhorse said:
Anyone have fix for the forticlient web filter restricting youtube, making it completely unusable
Click to expand...
No problem here. Upon installing, the log showed youtube/googlevideo blocked, but it still worked, nevertheless after updating, it does not show as blocked. The web filter works otherwise, based on the selected categories, so maybe reinstalling and updating would help.

ticklemefeet said:
If you are using the free version like me, you can not add it to the exclusion list.
Click to expand...
You have to Unlock Settings to be able to change them.
 

Attachments

  • capture_11242018_223439.jpg
    capture_11242018_223439.jpg
    156.5 KB · Views: 583
  • capture_11242018_223622.jpg
    capture_11242018_223622.jpg
    56.1 KB · Views: 594
  • capture_11242018_223750.jpg
    capture_11242018_223750.jpg
    70.8 KB · Views: 483
  • Like
Reactions: AtlBo, simmerskool and Gandalf_The_Grey

You may also like...