ForticlientVPN only version 7.4.4?

[TechMSB]

Hello, I opened a case with support asking about a 7.4.4 version of Forticlientvpn only for windows , they suggested we post here.  

My questions are:

1) Is there a version of forticlient vpn only 7.4.4 coming out for windows?

2) If no can you verify if forticlient vpn only 7.4.3 for windows is not susceptible to https://fortiguard.fortinet.com/psirt/FG-IR-25-685

Thanks!

[Nate_Allen_OCDC]

I was directed by my reseller to use the 7.2 version with the claim it's not affected.  I should not have to use an ancient version of the VPN software just because Fortinet doesn't want to take a few hours to patch the free client.  I will be remembering this situation when it's time for my company to find a different managed firewall provider.

[TechMSB]

I am told they are testing a fix to be included in an official build, no ETA yet though.

[AEK]

Keep in mind that FCT VPN is a free version with no obligation from Fortinet.

[RHHSupport]

Even though if it is free, as a reputable security company you would expect them not to actively distribute a product with a high severity vulnerability. At least make your users aware and disable the download. 

[alomah3]

It does include fixes like: "Issues regarding FortiClient support for newer Realtek drivers in W indows 11 have been resolved. The issue is that Realtek and Qualcomm used the NetAdapterCx structure in their drivers and the Microsoft API had an error in translating the flags, which may result in IPsec VPN connection failure."

[Nate_Allen_OCDC]

Does anyone have the current status of the 7.4.4 VPN-only client?  It has been quite a while since these vulnerabilities were released.  I wish I could use the supported version, but I am a tiny firm that has an outsourced firewall and all I have to use is the VPN-only client, so short of completely changing firewalls and vendors (which I also wish I could do but cannot) I am stuck.

[TechMSB]

I was told development was working on a patch for 7.4.3 vpn client only but so far all I seen is the full client, not the vpn only.  I understand this is free software but I agree with others that security risks should be patched.

[TechMSB]

I haven't heard anything since over a week ago, I was hoping fortinet would release a patched version by now, has anyone else heard anything?

[CSDNBNetworkAdmin]

Same situation here, we are a non-profit, with little to no existing budget. Any additional addition to our budget is not an option, especially with little notice, since the paid version is the only one being updated, which has never been an issue in the past. The amount of money we pay for Fortinet products, I would imagine the VPN software used to connect to a Firewall we have support on, along with other Fortinet products we are paying for would be included. Hurts the little guys when we are underfunded, and staffed and have to constantly worry about exploits in the wild. 

[Nate_Allen_OCDC]

I've actually taken the step of filling out their sales form just in an attempt to get a human being I can gently chide about this problem, not that this will actually work.  I'm new to these forums: Do Fortinet support staff monitor these forums at all?  This issue has thousands of views over several months and I'm surprised no one from Fortinet has responded at all to date.