Forticlient EMS/Client Upgrade issues

[mikoto06]

Hello all,

We had our EMS installed by an MSP around 4 years ago, which has worked well, the only issue being the Clients/EMS were on version 6.0.0, the EMS has been upgraded to 6.2.9 with our end goal being 6.4.8.

We were told by our MSP that now the EMS is on 6.2.9 our FortiClient's need to be updated to 6.2.9 before we can go to 6.4.8. I created a new installer using the official 6.2.9 package and applied it to the endpoint profiles - a few computers got the reboot required prompt, while the vast majority didn't get anything.

We then tried updating forticlient manually on each users PC but this required two reboots as it seemed once it connected to the EMS it needed another reboot to fully match versions despite being the same. This was painful, but doable until we started encountering forticlient uninstalling itself/rolling itself back to 6.0.0 on a few machines.

Has anyone else encountered any struggles particularly going from 6.0.0 to 6.2.9, we can't surely be expected to go around each endpoint and manually install it? We're currently up to 85 on version 6.2.9 fully compliant with the EMS and around 100 that aren't.

TL:DR issues upgrading from forticlient version 6.0.0 to 6.2.9, having to do it manually

[peisenberg]

Hi 
This suppose to work I believe so. Please check there is no profile assigned with deployment enabled as in 6.2 there was no deployment policies AFAIK. You can also create uninstall profile to just uninstall FCT from endpoints and then create new install profile to deploy FCT.
Always  stress-test with 1-5 endpoints before umbrella is recommended when applying new change.
Please check requirements for endpoints while deploying FCT from EMS. 
thanks and regards
Pavol