Forticlient blocking applications (4.0)

[#1]

I' m not sure if this is because our Fortigate is not on 4.0 yet but with the client installed in my office some applications that I know that can be blocked with the Fortigate 4.0 firmware (like world of warcraft for example) the forticleint is blocking the connection? is this meant to be by default? is there anyway to get it to unblock, i know if I shutdown the FC everything works fine, I' m not seeing it in any log as being blocked or scanned..

[vanc]

If FortiClient firewall blocks network connection, there will be logs. If there is no log for blocked traffic, it should (or most probably) not be firewall. I recommend to turn off the FortiClient' s proxy to try out. You can do that by following these steps. (Make sure you are administrator) 1) Shutdown FortiClient from the tray icon. 2) Launch a DOS prompt and issue the following command. net stop fortishield 3) Launch regedit and go to HKLM\Software\Fortinet\FortiClient\FA_FortiProxy 4) Change enabled to 0. 5) Run FortiClient again and try your applications.

[#3]

what does shutting off the proxy effect?

[#4]

by the way that did work, but i am interested as to what it will effect in the performance/functionality with it disabled.

[vanc]

FortiProxy.exe in the first release has some bugs and fixed in the upcoming 4.0.1 release, especially some performance degradation with P2P software. Turning off FortiProxy will give the following impacts. 1) No more web filtering. 2) No more POP3/SMTP virus scanning. 3) No more endpoint compliance checking. If you don' t use these features, it' s perfectly fine to turn if off.

[#6]

great info, thanks!

[#7]

i' m not sure when this started, but between 4.0.1 and 4.0.2 the fortiproxy is blocking port 8443 or rather not proxing it properly. I' ve since re-applied the above mentioned fix, but not sure why its only that port that is having an issue...