Hello Guys,
is it possible that FortiClient can cause problems with drivers? Since we have Forticlient in a company we are facing problems with drivers, mainly audio/video drivers. People report that they are not visible via camera or microphone was not found even day ago it was everything OK.
Nominating a forum post submits a request to create a new Knowledge Article based on the forum post topic. Please ensure your nomination includes a solution within the reply.
Hello,
Yes this is well possible.
FortiClient comes with different drivers i.e. for transparent AV scanning that might interfere with other drivers installed on your device.
You can list installed drivers with the Windows command "fltmc" and verify if they interfere with the "altitude" of any other driver.
If there is any incompatibility you should report this to technical support.
Regards,
@lol could u pls explain "verify if they interfere with the 'altitude' of any other driver"?
How can we tell if "there is any incompatibility"?
Below are the results from my 'fltmc' Windows command:
Filter Name | Num Instances | Altitude | Frame |
------------------------------ | ------------- | ------------ | ----- |
bindflt | 1 | 409800 | 0 |
UCPD | 4 | 385250.5 | 0 |
FortiAptFilter | 4 | 324930 | 0 |
fortimon3 | 4 | 324920 | 0 |
FortiShield | 4 | 324900 | 0 |
FortiEDRFsDriver_5.2.2.577 | 4 | 260002 | 0 |
FortiEDRAvDriver_5.2.2.577 | 4 | 260001 | 0 |
FortiEDRWinDriver_5.2.2.577 | 4 | 260000 | 0 |
storqosflt | 0 | 244000 | 0 |
wcifs | 0 | 189900 | 0 |
CldFlt | 1 | 180451 | 0 |
FortiEDRBaseDriver_5.2.2.577 | 4 | 150000 | 0 |
FileCrypt | 0 | 141100 | 0 |
luafv | 1 | 135000 | 0 |
npsvctrig | 1 | 46000 | 0 |
Wof | 2 | 40700 | 0 |
FileInfo | 4 | 40500 | 0 |
We are also having the same issue at our company currently- It's bizarre to me that someone else commented on this after almost 2 years.
@lol I got the same results as Rowdy and have the same questions. I'm not sure how this altitude order helps us at all. When I look at the drivers being used by the camera none of them are minifilter. The ones I'm seeing are: ksthunk.sys, SecureUSBVideo.dll, usbvideo.sys, WdmCompanionFilter.sys, and FortiDeviceGuard.sys
When I use any 3rd party laptop with our systems, they work fine. On those machines the active drivers are the same, minus the FortiDeviceGuard.sys. This makes me believe the issue lies with the "FortiDeviceGuard.sys" file.
Hello,
> A filter driver that has a low numerical altitude is loaded into the I/O stack below a filter driver that has a higher numerical value.
source: https://learn.microsoft.com/en-us/windows-hardware/drivers/ifs/load-order-groups-and-altitudes-for-m...
This means a filter driver with a higher altitude might have an impact on filter drivers below in the stack with a lower altitude.
A software that comes with for example encryption filter drivers could interfere with a software providing for example filter drivers for AV.
A quick workaround would be to uninstall the software providing the filter drivers causing issues.
And then report the problem to Fortinet Technical Support for analysis if the cause is a Fortinet product.
If the affected software is not in the fltmc list it should normally not be impacted by the filter driver.
Regards
Select Forum Responses to become Knowledge Articles!
Select the “Nominate to Knowledge Base” button to recommend a forum post to become a knowledge article.
User | Count |
---|---|
1710 | |
1093 | |
752 | |
447 | |
231 |
The Fortinet Security Fabric brings together the concepts of convergence and consolidation to provide comprehensive cybersecurity protection for all users, devices, and applications and across all network edges.
Copyright 2024 Fortinet, Inc. All Rights Reserved.