New known issues | (Windows) Release Notes (2025)

Table of Contents

Application Firewall Chromebook Configuration Endpoint control Endpoint management FSSOMA GUI Logs Malware Protection and Sandbox Onboarding Real-time protection Security posture tags Quarantine management Performance Remote Access Remote Access - IPsec VPN Remote Access - SSL VPN Web Filter and plugin ZTNA connection rules PAM Other

7.4.0

7.2.5

7.2.4

7.2.3

7.2.2

7.2.1

7.2.0

7.0.13

7.0.12

7.0.11

7.0.10

7.0.9

7.0.8

7.0.7

7.0.6

7.0.5

7.0.4

Application Firewall

Bug ID	Description
979330	FortiClient (Windows) does not present Microsoft Loop in Application Firewall signatures list.
1020282	Application Firewall blocks some applications in the exclusion list.

Chromebook

Bug ID	Description
997927	On Chromebook, fallback action is to override exclusion list, which is unlike FortiClient (Windows).

Configuration

Bug ID	Description
1028865	If FortiClient (Windows) loses connectivity to EMS Telemetry, VPN profile sent to FortiClient PC does not show single sign on (SSO) settings.

Endpoint control

Bug ID	Description
996850	FortiClient sends different username to EMS when user logs on to computer with SmartCard.
1016378	FortiClient (Windows) does not prompt for user verification when other Entra ID user is logged in.
1016952	FortiClient telemetry gets stuck at syncing state after enabling zero trust network access.
1023356	FortiClient endpoint loses EMS connection when PC changes network connection.

Endpoint management

Bug ID	Description
1034892	EMS cannot download diagnostic logs for FortiClient (Windows) from EMS.

FSSOMA

Bug ID	Description
995379	FSSOMA does not properly install on CIS hardened Windows 10 and 11 image.
1033466	FSSOMA.exe stops running after upgrading SSO standalone agent from 7.2.4 to 7.4.0.

GUI

Bug ID	Description
1011345	GUI has mistranslation in Slovak for Cloud Sandbox.

Logs

Bug ID	Description
948887	FortiClient does not send Windows log for Exchange Server logon failure(Event ID 4625).
1016539	Vulnerability reports do not display username information in FortiAnalyzer.
1033630	FortiClient Sandbox events are not replicated on FortiAnalyzer.

Malware Protection and Sandbox

Bug ID	Description
965730	System drive as a USB-connected NVMe drive with Windows 10 fails to boot after installing FortiClient (Windows) with Malware Protection.
996431	FortiClient (Windows) cannot block remote NDIS device when the net class device is set to block in removable media access function.
1012083	If Antiexploit is enabled on EMS, it blocks certificates on DocuSign.
1012531	Antiexploit blocks applications defined in the Excluded Applications list.
1034857	FortiClient does not send the file to FortiSandbox for analysis if the hashes are the same.

Onboarding

Bug ID	Description
982079	FortiClient Cloud invitation with LDAP verification type to Entra ID fails with Azure Token Required error.
1018839	FortiClient console fails to open automatically upon clicking SAML notification.

Real-time protection

Bug ID	Description
1036535	FortiClient (Windows) detects C:\PublishedSites\ files as threats and quarantines them.

Security posture tags

Bug ID	Description
988510	Windows OS tag with latest update within 30 days does not work reliably.
1013973	Host check policy does not work as expected using OR logic.
1027851	FortiClient (Windows) sometimes loses security posture tag based on combined rules and the only way to fix the issue is reinstalling FortiClient.
1030469	EMS does not match endpoint for User in AD Group security posture tag when the user is in the local AD but missing in the EMS database.
1034875	AD group security posture tag is not calculated correctly when multiple users are logged in.

Quarantine management

Bug ID	Description
1009212	EMS FCrestorequarant tool does not delete the restored file from quarantine folder.

Performance

Bug ID	Description
1015900	FortiESNAC has high RAM consumption on Windows Servers.
1022885	FortiClient (Windows) causes bootup delay on Windows 10 and 11.

Remote Access

Bug ID	Description
1010271	When VPN connection name has more than 10 Japanese characters, VPN connection fails

Remote Access - IPsec VPN

Bug ID	Description
973544	IPsec VPN IKEv2 with SAML login does not support using external browser as user agent for authentication.
1036306	IPsec VPN fails to autoconnect after installing EMS-repackaged FortiClient installer when `autoconnect_on_install` is enabled.
1037063	IKEv2 SAML login fails to work if Electron is used as the SAML authentication framework and FortiClient fails to validate server certificate.

Remote Access - SSL VPN

Bug ID	Description
909244	SSL VPN split DNS name resolution stops working.
950787	Domain filter cannot block access to specific server FQDN.
964036	Gateway selection (e.g. saml-login) based on ping speed or TCP round trip does not work.
997010	If first defined FortiGate is unreachable, FortiClient (Windows) does not try to establish connection with the secondary gateway.
1002456	After upgrade, customize host check fail warning does not appear when tag is on device.
1006295	FortiClient fails to consistently connect (40%) with DNS round robin of FortiGates (SASE).
1012434	FortiClient (Windows) does not save SAML VPN username when user closes internal SAML authentication window deliberately with `<use_gui_saml_auth>` enabled.
1018817	User must click Save Password to save SAML username.
1019876	User gets stuck at 40% connectivity when connecting to any VPN.
1029584	FortiClient (Windows) does not apply FortiOS SSL VPN custom host check error message and always uses the default one.
1038155	SSL VPN always up fails when `tunnel-connect-without-reauth` and`vpn-ems-sn-check` are enabled.

Web Filter and plugin

Bug ID	Description
975694	FortiClient blocks Outlook and multiple destinations due unknown category error.
978252	Microsoft Edge guest browsing bypasses Web Filter blocked sites.
996420	Web Filter has issue with resolved IP addresses in multiple ISDB objects such as cloud applications.
1019249	Web Filter applies wrong categorization for artificial intelligence technology.
1022851	FortiClient (Windows) does not automatically disable Web Filtering after endpoint becomes on-fabric when configured for only off-fabric endpoints.

ZTNA connection rules

Bug ID	Description
1001116	FortiClient requests SAML credentials after network change in ZTNA connections.

PAM

Bug ID	Description
1015585	FortiClient completely closes MobaXterm application when a launched secret session reaches max duration.

Other

Bug ID	Description
984763	NETIO.SYS/FortiWF2.sys causes BSODs on Windows 10.
1013438	FortiClient blocks RADIUS authentication on Aruba HPE switch ports.
1013910	Installing FortiClient causes blue screen of death (BSOD).
1018650	FortiShield.sys causes BSOD with FortiClient.
1021271	BSOD issue occurs after connecting to VPN due to fortisniff2.sys and fortiwf2.sys.
1022847	FCDBLog.exe has memory leak.