FortiClient EMS DNS Dynamic update issue

[alaaelrayes]

Hi Team,

I have encountering an issue with devices while updating their records.

This issue occurs after installing FortiClient ZTNA.

I monitored the traffic by Wireshark and I observed that the connection refused as shown:

Our DNZ zone security configuration is to allow secure connection only

But after changing it to unsecure, machines can update their records.

This issue without connecting to VPN just the FortiClient installed and connected to EMS server.

FortiClient 

Appreciate your support.

Thanks,

Alaa Elrayes

[Jean-Philippe_P]

Hello alaaelrayes, 

Thank you for using the Community Forum. I will seek to get you an answer or help. We will reply to this thread with an update as soon as possible. 

Thanks, 

[alaaelrayes]

My version was 7.2.1 and upgrading to 7.2.2 didn't fix that issue and no fix or workaround released tell now.

You can try an older EMS version but this is not acceptable in my environment.

Thanks,

[alaaelrayes · Accepted solution]

Hello Team,

This issue marked as a bug ID 0964456 and will be fixed in the next releases.

Thanks.

[GordonL]

Hi,

which FortiClient version is affected or are you using?
I can't find the BUG ID in the know Issues for Version 7.2.x as we are facing the same Problem with a customer.

Is there any known workaround as downgrading to a specific Version?

[DGPB]

Hello,

Do you have an ETA for the fix?

Thank you.

[DGPB]

Hello,

In theory this bug was fixed on v7.2.4 released yesterday, but I still reproduce it. Did you test with 7.2.4?

Best regards,

[alaaelrayes]

Hello,

I don't find this bug ID 964456 in 7.2.4. However, since I upgraded from EMS 7.2.2 to 7.2.3 the issue seems to be solved.

Thanks,

[DGPB]

Even with ZTNA installed?

Anyway, you can see it in the resolved issues section of the changelog:

https://docs.fortinet.com/document/forticlient/7.2.4/windows-release-notes/022791/resolved-issues

964456 FortiClient does not allow Windows DNS only secure dynamic updates.

[Jean-Philippe_P]

Hello again alaaelayes,

Thanks for the heads up!

Regards,