Hi,
Forticliente EMS 7.0.7 license ZTNA. Since yesterday I have this message in the dashboard but if I click on it no host appears.
Another question: I have had ForticlientEMS for months but in the "FortiGuard Outbreak Detection" section I always see only these four signatures:
Signatures
Hi FortiMax_it,
The first issue is likely a bug
| 781654 | EMS does not remove dashboard outbreak alerts when endpoint disconnects. |
https://docs.fortinet.com/document/forticlient/7.0.7/ems-release-notes/310815/known-issues
To elaborate, the root cause of this bug is that the dashboard widget is not filtering endpoints that historically have had the tag, meaning it is showing current and historical in the widget. However, when you drill down it only shows the endpoints that currently have the tag.
An endpoint can lose that tag if the endpoint is disconnected from EMS, or if the endpoint is no longer infected.
The fix for this bug is included in 7.0.8
-------------------------------------------------
For the second issue, it appears your Outbreak Alerts Signatures are not updating. As you can see here, the version is up to 1.00073.
It is possible you are encountering bug 813928 (found in the same release notes linked above). You may try the listed workaround of restarting fcems service on the server hosting EMS.
If that fails, I would troubleshoot why it is not receiving updates. Try increasing your logging level to debug and attempting the update. Please open a ticket with support if you require further guidance or assistance.
Enter your E-mail address. We'll send you an e-mail with instructions to reset your password.
