ForticlientVPN only version 7.4.4?

[TechMSB]

Hello, I opened a case with support asking about a 7.4.4 version of Forticlientvpn only for windows , they suggested we post here.  

My questions are:

1) Is there a version of forticlient vpn only 7.4.4 coming out for windows?

2) If no can you verify if forticlient vpn only 7.4.3 for windows is not susceptible to https://fortiguard.fortinet.com/psirt/FG-IR-25-685

Thanks!

[AEK]

Hi TechMSB

After searching on the support portal I can confirm the latest FortiClientVPN version is 7.4.3 so far.

The psirt page you shared mentions FCT and not FCT VPN, but it is obvious that the vulnerability can especially be exploited in shared environments where you share the installer in a folder that can be writable by anyone.

In any case there is a mentioned workaround that is simple to implement: just download the installer from Fortinet and put it in a read-only shared folder (basic security measures).

[NAS]

Hello everyone,
take a look at the release notes for FortiClient 7.4.4:

“FortiClient (Windows) 7.4.4 does not include a new version of the free VPN-only agent as no feature updates were made to the free VPN-only agent between 7.4.3 and 7.4.4. Users can continue to use the FortiClient (Windows) 7.4.3 free VPN-only agent.”

To me, it’s not entirely clear whether there will still be a VPN-only version in the future, or if there just isn’t one for 7.4.4 because there were no changes. The text in the release notes also appears to have been updated.

Now we’ll see whether the VPN-only version continues to exist. If not, that would be quite unfortunate in my opinion.

Best regards,
Karsten

[Yurisk]

I couldn't get the answer from any of my sources, seems like no one really knows/wants to share if there is change of plans for free VPN-only client. I will be watching closely this topic, if FOrtinet indeed to drop free vpn-only client without offering decentralized licensing model, it would be a major blow, as in MSP environment switching hundreds of unrelated clients with thousands of users to a centralized EMS is a no go.