Forticlient - Web Filtering

Forum|Forum|25 days ago
September 14, 2026
3 replies
89 views

Hey everyone,

We use FortiClient for VPN and web filtering, managed by EMS across a few hundred endpoints. On one workstation, the FortiClient Web Filter extension shows in Edge as "Managed by your organization" and can't be removed. No other endpoint has it — our own devices don't show it at all.
Same FortiClient version, same EMS group and profile as the others, and there's no GPO pushing it.
What causes FortiClient to force-install that extension on its own, and where would I look to find what triggered it on just that one machine?
Thank you.

scitlak

Staff

What about below settings in your EMS webfilter profile?

funkylicious

SuperUser

i have seen the same behaviour when the extension was installed on Edge manually from FortiClient from here ( pic below in FortiClient > Web&Video Filter > Install Edge Web Filter Extension. ) and having also Enable Web Browser Plugin for Web Filtering enabled from EMS.

you will find in the registry at the following path HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Edge, a entry like here and the only way to remove it from Edge is to attach to the computer a profile with Enable Web Browser Plugin disabled and it will delete it.

"jack of all trades, master of none"

funkylicious

SuperUser

another thing you could do is the following:

as per edge://policy you will find the same reg entry which will be forced every time even if you delete it to reinstall the plugin/extension.

in the same registry location from my previous post/link, you can edit ExtensionSettings and change the installation_mode to allowed ( which i tested and works, meaning it will remove it ) or to blocked ( havent tested this ) and this will remove the extension from Edge ( edge://extensions to verify ) and at the same time allows you to keep the Enable Web Browser Plugin enabled in the policy applied from EMS.

"jack of all trades, master of none"

Sign up

Login with SSO

Login to the community

Login with SSO