Special notices
FortiClient (Windows) 7.4.4 GA hotfix 2
FortiClient (Windows) 7.4.4 GA hotfix 2 (7.4.4.1887.2.8348) was released on September 25, 2025 to address the following issue:
|
Bug ID |
Description |
|---|---|
| 1199087 | A crash may occur in the antivirus RTP service. The anti-ransomware service may fail to observe the scan inclusion list. |
|
FortiClient (Windows) hotfixes are accumulated, which means hotfix 2 includes all fixes from hotfix 1. |
FortiClient (Windows) 7.4.4 GA hotfix 1
FortiClient (Windows) 7.4.4 GA hotfix 1 (7.4.4.1887.1.8297) was released on September 22, 2025 to address the following issue:
|
Bug ID |
Description |
|---|---|
| 1196704 | During a FortiClient EMS switch, the ZTNA certificate from the old EMS is not removed after switching to the new FortiClient EMS server. |
|
|
This hotfix is available only to customers considering a switch between FortiClient EMS servers. If you need this hotfix, please collect the EMS serial numbers and contact Fortinet Support. |
SAML IdP configuration for Save Password
FortiClient provides an option to the end user to save their VPN login password with or without SAML configured. When using SAML, this feature relies on persistent sessions being configured in the identity provider (IdP), discussed as follows:
If the IdP does not support persistent sessions, FortiClient cannot save the SAML password. The end user must provide the password to the IdP for each VPN connection attempt.
The FortiClient save password feature is commonly used along with autoconnect and always-up features.
FortiClient support for newer Realtek drivers in Windows 11
Issues regarding FortiClient support for newer Realtek drivers in Windows 11 have been resolved. The issue is that Realtek and Qualcomm used the NetAdapterCx structure in their drivers and the Microsoft API had an error in translating the flags, which may result in IPsec VPN connection failure.
FortiGuard Web Filtering category v10 update
Fortinet has updated its web filtering categories to v10, which includes two new URL categories for AI chat and cryptocurrency websites. To use the new categories, customers must upgrade their Fortinet products to one of the versions below:
- FortiManager - Fixed in 6.0.12, 6.2.9, 6.4.7, 7.0.2, 7.2.0, 7.4.0.
- FortiOS - Fixed in 7.2.8 and 7.4.1.
- FortiClient - Fixed in Windows 7.2.3, macOS 7.2.3, Linux 7.2.3.
- FortiClient EMS - Fixed in 7.2.1.
- FortiMail - Fixed in 7.0.7, 7.2.5, 7.4.1.
- FortiProxy - Fixed in 7.4.1.
See the following CSB for more information to caveats on the usage in FortiManager and FortiOS: https://support.fortinet.com/Information/Bulletin.aspx
No new version of VPN-only agent
FortiClient (Windows) 7.4.4 does not include a new version of the free VPN-only agent as no feature updates were made to the free VPN-only agent between 7.4.3 and 7.4.4. Users can continue to use the FortiClient (Windows) 7.4.3 free VPN-only agent.
No IKEv1 support for IPsec VPN
FortiClient (Windows) 7.4.4 no longer supports IKEv1 for IPsec VPN. Please migrate to using IKEv2 instead.
No IPv6 support for IPsec VPN
FortiClient (Windows) 7.4.4 does not support IPv6 for IPsec VPN due to dual VPN changes. Support may be added in future releases.
No support for concurrent third-party tunneling or proxy clients
Using third-party tunneling or proxy clients (including VPN, DNS, HTTP(s), SOCKS, ZTNA or PAC files) in parallel or nested combination with FortiClient's VPN, ZTNA or Web Filter is not recommended nor supported.