FortiClient - top right " ?" - No Fortigates found

[Rainer_Stumbaum]

Hi, we are about to replace our old sslvpnclient.msi clients with the current 5.0.2 FortiClient. Our FortiGate 80C Cluster is still on v4.0,build0646,121119 (MR3 Patch 11). The FortiClient sits in the same Network as the FortiGate - when pressing the <?>- Button in the upper right corner of the FortiClient the Message appears: " No FortiGates found" . Do we really have to upgrade the FortiGates already? Thanks Rainer

[Carl_Wallmark]

Yes, FortiClient can only connect to FortiOS 5.0 and later. BTW, FortiClient 5.0.3 was released yesterday.

[Rainer_Stumbaum]

Mmmh, I am really reluctant to upgrade the fortigate to 5.0.2 already. With MR3 Patch 11 we are almost stable now - just doing once a week a failover when a user calls in to complain that the VPN server is not reachable...

[rwpatterson]

Ask yourself, what ' have to have' feature will the ' upgrade' provide you? Is that item worth the possible future headaches? I like to sleep at night....

[Rainer_Stumbaum]

So... we upgraded yesterday our testing fortigate cluster with the same configuration and firmware - after reducing/cleaning up our VPN SSL Portals to five and removing äöü' s we as well upgraded the production fortigate cluster. Fortigate seems to work fine but: - keeps loosing ssl.root entries in the policy section - User & Device -> Device -> Device Definition is empty after some uptime - we have around 150 devices connecting to the 80C cluster. FortiClient on Mac OS seems to work fine. First test on a Windows 7 64bit Enterprise client (after removing Trendmicro OfficeScan) hangs the Machine after a few minutes with a black screen - mouse still visible - ping possible but no smb or rpc connection possible. Is there something like a debug log we could look into after resetting the hung machine? Thanks Rainer

[Chris_Lin_FTNT]

a few minutes with a black screen

We haven' t seen this strange behavior. Was this from an upgrade or fresh install? Was there any special software installed on this machine?

[Rainer_Stumbaum]

And regarding the " have to have" feature: - Replacing current Antivirus Software - Enforcing security on BYOD - Enforcing security on clients and servers (some people would turn of their AV scanners...)

[Rainer_Stumbaum]

That was a fresh install of FortiClient on a rather old install of Windows 7. I created a Ticket (863315) for that by the way including a cab file from the Diagnostics tool.

[Chris_Lin_FTNT]

I saw a post from http://www.tomshardware.com/forum/245263-44-computer-boots-black-screen-mouse-cursor " The reason because this happen is unknown (maybe a virus or an anti-virus side effect ?) and in order to resolve you should take off the HD and reset the files permission for the Windows, Users and Program folders (and files) using another computer running Windows 7. The quick way is to assign full control to Everyone but this is obviously unsafe, better to check every directory and compare with a working system to establish the best settings." I am making a guess ... the original Windows 7 was hefty and now running not very fast, maybe the hard drive was also slow. After installing FortiClient, its AV scan made it even slower, so that when Windows starts up, it failed to access some files at the beginning. After 5 minutes, it recovered and continue with the boot. But it' s just hard to verify my idea. Maybe you can try on a faster machine?

[Rainer_Stumbaum]

Waaah, had enough of constantly rebooting the upgraded fortigate due to SSL VPN failures and CMDB_API failures. Created 9 Tickets to Support - just one being solved by now and another one about to be created... We are downgrading again and renewing the TrendMicro AV contract for another year. @rwpatterson - you where right... Rainer