Troubleshooting Tip: FortiClient signature updates failing due to trusted host configuration

Description

This article describes an issue where FortiClient cannot fetch signature updates from FortiManager when all administrator accounts are configured with trusted hosts that do not include the FortiClient subnet.

In this scenario, FortiManager does not respond to FortiClient update requests at all. This is a known bug, fixed in FortiManager v7.6.8 and v8.0.1.

Scope

FortiClient, FortiManager.

Solution

Option 1 - workaround.

Add the FortiClient subnet to an administrator trusted host list:

1. In FortiManager, go to System Settings -> Administrators.

2. Either edit an existing administrator or create a new administrator account (a no-permission account can be used for this purpose).

3. Add the FortiClient subnet to the administrator's Trusted Hosts fields.

4. Verify that FortiClient signature updates now succeed - check the FortiClient update logs or the FortiManager dashboard.

Option 2 - permanent fix.

Upgrade FortiManager to v7.6.8 or v8.0.1, which includes the fix for this bug.

Related documentation:
For more information on configuring trusted hosts in FortiManager, see Trusted hosts.