FortiClient Browser Add-On gets uninstalled after reboot / browser restart

[miciti]

Hi everyone,

I do have a web filter profile on FortiClient EMS which requires FortiClient Browser Add-On to be installed.

The web-filter profile is only required when off-fabric.

I did notice that the Browser Add-On is missing on edge after it was installed, on firefox it stays installed but users can remove it manually. In both ways FortiClient brings up a pop up notification "browser anomaly detected".

I think the browser add-on stayed installed some weeks ago.(Currently running FortiClient 7.2.6) and only needed to be installed once. If the web filter was active or not had not any impact on the installation status.

Is this a new bug or some configuration error?

[btan]

Hi,

First thing first:

In EMS profile, if your config is:
-On-fabric: WF = OFF, browser-plugin = OFF

-Off-fabric: WF = ON, browser-plugin = ON

Expected behavior: 
1. User is off-fabric, plugins should be installed in all 3 browsers (Chrome,Edge,Firefox) when they launched it at least one time (meaning for example, plugin in Firefox will not be installed if end users did not launch Firefox at all). They should not be able to manually remove it.

2. User goes back to on-fabric: Plugin may still stay installed with the browser, but it will not be doing anything.

-If your end user able to manually remove it, you can raise a FortiCare ticket with below info:

1. What FCT version is affected?
2. What OS version?

3. Is it affecting multiple machines or only single machine?

4. Is the machine domain-joined or manage by Intune policy?
 

[miciti]

I am using the option "Enable WebFiltering on FortiClient: Only when Endpoint is Off-Fabric".

I do not have seperately assigned policies for on- and off-fabric in the "Endpoint Policy & Components" sections... Web filter is off when on-fabric and on when off-fabric. Only thing that does not work is that web filter plugin gets uninstalled.

But I guess that should work too?
I will do some more testing and if needed create a ticket.

web filter

[btan]

Hi miciti,

Yup this is completely fine. Operation wise, whether or not the browser extension stay installed/or get uninstalled when off-fabric is not important. The important part is WF is active when off-fabric, and WF is turned off when on-fabric in your scenario.