Forticlient Webfilter

Hi,

The behavior which you are observing could probably be because of the profile that they are using and that working is only applying when off net. When onnet, it may be hitting the default profile.

We might need to check this with logs since you are also using FMG.

You may follow the below steps for collecting the logs:

EMS logs:

Please set the EMS log level to debug (System Settings -> Log) and the run the EMS diagnostic tool located in C:\Program Files (x86)\Fortinet\FortiClientEMS\EMSDiagnostool.exe.

Once the tool completes, please share the output file with us.

Output - %temp% folder

It has "*.cab" extension on it - it should be something like this: "EMS-version-numbers.cab"

Note: It will take some time, so please be patient.

FCT logs:

Can you please set the client log level to debug in EMS profile, reproduce the issue and provide Diagnostic Tool output .cab file from the affected client?

The diagnostic tool can be executed from the FortiClient About page. 

BR,
Manosh

Hi Huva,

I was not able to access the logs which you have attached. 

You may also like to refer to this link and understand the behaviour:

https://community.fortinet.com/t5/FortiClient/Technical-Note-FortiClient-and-Web-Filter-behavior-when/ta-p/192883?cmd=displayKC&docType=kc&externalId=FD41700

BR,

Manosh