Support Forum
The Forums are a place to find answers on a range of Fortinet products from peers and product experts.
alaaelrayes
New Contributor III

FortiClient EMS DNS Dynamic update issue

Hi Team,

I have encountering an issue with devices while updating their records.

This issue occurs after installing FortiClient ZTNA.

I monitored the traffic by Wireshark and I observed that the connection refused as shown:

DNS.PNG

Our DNZ zone security configuration is to allow secure connection only
DNS zone config.JPG

But after changing it to unsecure, machines can update their records.

This issue without connecting to VPN just the FortiClient installed and connected to EMS server.

FortiClient 

Appreciate your support.

Thanks,

Alaa Elrayes

1 Solution
alaaelrayes
New Contributor III

Hello Team,

 

This issue marked as a bug ID 0964456 and will be fixed in the next releases.

 

Thanks.

View solution in original post

9 REPLIES 9
Jean-Philippe_P
Moderator
Moderator

Hello alaaelrayes, 

 

Thank you for using the Community Forum. I will seek to get you an answer or help. We will reply to this thread with an update as soon as possible. 

 

Thanks, 

Jean-Philippe - Fortinet Community Team
alaaelrayes

My version was 7.2.1 and upgrading to 7.2.2 didn't fix that issue and no fix or workaround released tell now.

You can try an older EMS version but this is not acceptable in my environment.

 

Thanks,

alaaelrayes
New Contributor III

Hello Team,

 

This issue marked as a bug ID 0964456 and will be fixed in the next releases.

 

Thanks.

GordonL

Hi,

which FortiClient version is affected or are you using?
I can't find the BUG ID in the know Issues for Version 7.2.x as we are facing the same Problem with a customer.

Is there any known workaround as downgrading to a specific Version?

DGPB

Hello,

 

Do you have an ETA for the fix?

 

Thank you.

DGPB

Hello,

 

In theory this bug was fixed on v7.2.4 released yesterday, but I still reproduce it. Did you test with 7.2.4?

 

Best regards,

alaaelrayes
New Contributor III

Hello,

 

I don't find this bug ID 964456 in 7.2.4. However, since I upgraded from EMS 7.2.2 to 7.2.3 the issue seems to be solved.

 

Thanks,

DGPB

Even with ZTNA installed?

 

Anyway, you can see it in the resolved issues section of the changelog:

https://docs.fortinet.com/document/forticlient/7.2.4/windows-release-notes/022791/resolved-issues

 

964456 FortiClient does not allow Windows DNS only secure dynamic updates.

Jean-Philippe_P
Moderator
Moderator

Hello again alaaelayes,

 

Thanks for the heads up!

 

Regards,

Jean-Philippe - Fortinet Community Team
Announcements

Select Forum Responses to become Knowledge Articles!

Select the “Nominate to Knowledge Base” button to recommend a forum post to become a knowledge article.

Labels
Top Kudoed Authors