Known issues

814953

Using an external browser for SSH ZTNA requires restarting FortiClient on Windows 11.

836246

Going from off-Fabric to on-Fabric does not stop the ZTNA service and keeps endpoint from connecting.

839589

ZTNA TCP forwarding not working for GoAnywhere application.

857909 FortiClient ( Windows ) does not support enabling encryption for ZTNA TCP forwarding rules acquired from ZTNA service portal. 857999 FortiClient does not support use of external browser for SAML authentication for ZTNA rules acquired through service portal. 872153 Old certificate is not
deleted when FortiClient is uninstalled or upgraded. 918045 FortiClient ( Windows ) requests ZTNA certificate when switching between user accounts. 919832 ZTNA stops working after days
with the error message No ZTNA client certificate was provide.

921406

ZTNA destination rule using hostname does not work.

931275

ZTNA destination rules stop working.

942413

Issue occurs when trying to reach a ZTNA destination added to FortiClient manually from public IP address as it does not resolve.

949999

SAML authentication is work does not work with Azure ad certificate – base authentication .

952888 IPv6 DNS servers bypass inline CASB IPv4 access proxies.

954946

ztna tcp forwarding is show does not show the untrusted certificate prompt warning with SAML authentication .

955377

FortiClient ( Windows ) blocks ZTNA because device is is is offline.

955437

With multiple browsers installed and external browser used for SAML authentication, choosing browser option does not show up if user does not choose any.

965476 User cannot access website with certificate warning and Forticlient DNS Root certificate signs the certificate. 967199 No ZTNA client certificate was provide error occurs when trying to access HTTPS page. 975845 FortiClient must notify end user that certificate is not trusted for ZTNA connection when disallow_invalid_server_certificate is enabled.

976028

ZTNA feature driver fortitransctrl fails to start and causes ZTNA TCP forwarding to not work as expected.

977407 ZTNA TCP forwarding with authentication does not work properly for SaaS and SaaS group applications. 990864 With SAML for ZTNA authentication , after close the first session , the second session is continues continue to request credential . 992649 User cannot create FortiGate tunnel if FortiGate works as both VPN and ZTNA proxy server. 995677 ZTNA TCP forwarding fails to prompt for SAML authentication with external browser after closing and reattempting the connection. 1001116 FortiClient requests SAML credentials after network change in ZTNA connections.