| Description |
This article describes how to resolve a continuous FortiClient alert message prompt that appears while using a web browser in private or incognito mode.
The message shows that the web browser plugin for the web filtering feature in FortiClient EMS is enabled, but it is not allowed to function in a private/incognito window. The sample error pop-up message would be different for each web browser as follows:
Microsoft Edge:
One “Microsoft Edge” browser is running in InPrivate Mode, please enable “Allow in InPrivate” in WebFilter extension option.
Google Chrome:
One “Google Chrome” browser is running in Incognito Mode, please enable “Allow in Incognito” in WebFilter extension option.
Firefox:
One “Firefox” browser is running in Private Browsing Mode, please enable “Run in Private Windows” in WebFilter extension option.
|
| Scope | FortiClient v7.0, v7.2 and v7.4. |
| Solution |
The alert message will keep prompting on the FortiTray icon until there is an action to enable the 'allow inPrivate/incognito on web browser extension' setting.
Since private browsing will not remember the cache and browsing history, this action is needed to improve the detection and enforcement of web filter rules, even on private sites. To allow access, select the alert message prompt and continue as shown below for each web browser:
Microsoft Edge: Tick the Allow in InPrivate checkbox to enable.
Google Chrome: Toggle the Allow in Incognito option.
Firefox: Select the 3 dotted line button on FortiClient WebFilter, navigate to Manage, and select Allow to Run in Private Windows.
Latest FortiClient EMS v7.2.10+ and v7.4.4: Starting with FortiClient EMS releases 7.2.10+ and 7.4.4, there is an option in the Web Filter profile to enforce user to enable the extension in Incognito mode in a web browser:
Enabling this option requires users to allow the WebFilter plugin in Chrome’s Incognito mode by selecting 'Allow in private'. If the permission is not granted, a popup message will continue to appear until the user enables the option.
The feature can also be enabled via XML:
<force_enable_in_private_mode>1</force_enable_in_private_mode>
Note: By design when 'force_enable_in_private_mode' is enabled and the 'Allow in private mode' option is disabled manually on the Edge or Chrome, all website access will be stopped on both normal and private tabs/browsers, and also the 'Allow in Private mode' notification prompt will be displayed for every few seconds until the webfilter extension is allowed in private mode.
The GUI option is only available from FortiClient EMS v7.2.10+ and v7.4.4+. If FortiClient EMS is running an earlier version, the tag can be set to 0 to suppress repetitive notifications on the endpoint side. The tag needs to be inserted beneath <profile> <id>1000</id> and not <profile><id>999</id>. This may be counterintuitive because it is necessary to scroll down to the end of the XML to find the correct location to add it:
</webbrowser_plugin> </profile> </webfilter> |
