FortiClient EMS Cloud 7.4.4 – Security Posture Tag OS Version(Windows 11 latest update) inconsistent

[Zeineb]

Hello Fortinet Community,

I Am experiencing an issue with Security Posture Tags on FortiClient EMS Cloud.

Environment:

• FortiClient EMS Cloud

• Version: 7.4.4 build 2034 (Feature)

• Client OS: Windows 11

• Feature tested: Security Posture Tags

• Tag type: OS Version

• Rule configured:

  OS Version = Windows 11 (Latest update within 30 days)

Issue description:
The posture tag is not applied consistently.
Sometimes the rule is correctly evaluated and matched, but shortly after, the same endpoint becomes non-matched, even though the system remains compliant (Windows 11 fully up to date).

Tag is matchedTag is not matched

Observations:

• The endpoint remains compliant (Windows 11 + recent updates)
• The tag Is sometimes matched, then later not matched without any OS change (always)

Questions:

• Is this a known issue or bug in EMS Cloud 7.4.4?
• Is There any workaround or recommended fix?
• Are there specific EMS or FortiClient settings that should be adjusted?

Thank you in advance for your help and feedback.

[AEK · Accepted solution]

Hi Zeineb

There are one documented similar known issue in FortiClient 7.4.4.

1104084

Tag for "OS system last update is within 60 days" is not working as expected.

Ref:  https://docs.fortinet.com/document/forticlient/7.4.4/windows-release-notes/743101/existing-known-iss...

This known issue is not listed in 7.4.5, so I guess updating your FortiClient to 7.4.5 should fix it.

Note that this requires to update your EMS to 7.4.5 as well.

[Zeineb]

Thank You AEK, I'll try it