FortiClient
FortiClient proactively defends against advanced attacks. Its tight integration with the Security Fabric enables policy-based automation to contain threats and control outbreaks. FortiClient is compatible with Fabric-Ready partners to further strengthen enterprises’ security posture.
kyoneda1
Staff
Staff
Article Id 401412
Description This article explains an issue where an FQDN containing underscores (_) cannot be added via the GUI to ZTNA Destinations.
Scope FortiClient EMS,
Solution

In FortiClient EMS, there is an issue where an FQDN Destination containing underscores cannot be configured through the GUI. Endpoint Profiles -> ZTNA Destinations -> Try to add a FQDN destination containing an underscore, such as 'test_1.local'.

 

2025-07-15①.png

 

When attempting to configure this, the following error message is displayed.

 

2025-07-15②.png

 

 

Workaround:
This issue can be avoided by configuring the settings via XML. The issue is limited to input through the GUI, as shown in the figure above.
 
    <ztna>
        <rules>
            <rule uid="">
                <destination>test_1.local</destination>
            </rule>
        </rules>
    </ztna>
 
The behavior is fixed on v7.2.9 and v7.4.3.
Contributors