Fortinet Security Suite

[dw426]

Brand new suite to play with, released today. Would anyone want to test this out?

http://www.forticlient.com/standard.html

Free version:

Antivirus/Antispyware engine
SSL and IPSec VPN clients
Personal Firewall protection
Intrusion Prevention
Web Filtering
Endpoint Application Detection
Endpoint Monitoring and Control
WAN Optimization
Anti-Rootkit Protection
Pre- and Post-Execution Behavioral Analysis
(Heuristics and Antispyware engine)
Real-Time Poisoned Webpage Protection
FortiGuard update services -
Antivirus/Antispyware, Web Filter,
Application Detection,
Online Forum (self-help)

For 29 dollars a year you get the above plus:
Antispam Protection
Central Management
Logging (and centralized reporting)

[jmonge]

cool:thumb: i raise my hand;D

[dw426]

-{ Quote: "cool:thumb: i raise my hand;D" }-

Great :)

[jmonge]

-{ Quote: "Great :)" }-i will test this scaner to see if it has some potential;D

[simisg]

is that fortinet company is this real site of fortinet?
fortinet makes hardware security products!!!!

[simisg]

if you try to download firefox says this site is no secure connection.............
but this page says there is a free suite http://www.fortinet.com/press_releases/090901.html ouao!!

[illicit]

I tried a paid for, previous version of forticlient, maybe 2 years ago and was less than impressed. Hopefully they have made some major improvements with this release. They do have some great HW solutions. :thumb:

[jmonge]

let's put it in the oven:argh:

[dw426]

-{ Quote: "if you try to download firefox says this site is no secure connection............." }-

It's certainly the real website, here is where I originally got it from: http://www.pcmag.com/article2/0,2817,2352259,00.asp

[simisg]

this security is strong and light and the most complete security for free from a trusted company

[dw426]

-{ Quote: "this security is strong and light and the most complete security for free from a trusted company" }-

How did you test it, against malware samples, HIPS (if their firewall has it that is) ?

[simisg]

what do you mean??

[dw426]

-{ Quote: "what do you mean??" }-

You say it's strong and light protection, how so? It's brand spanking new, so what tests did you put it through to conclude it was strong and light?

[acr1965]

Does Fortinet use their own scanners/signatures or do they use from another company?

[Saraceno]

I used the previous version and the firewall, web filtering were all quite strong. Alerts were clear and the overall program was easy to use but at the same time could be configured so suit your needs.

Scan speed was good but at the time if 'heuristics' were set to high, many items were listed as 'suspicious' but did not require removal. Just flagged these files as 'relatively unknown'. They might have fixed this for the home user as it was geared as an enterprise product.

Overall, considering I've tried many products over the years, most likely due to boredom, and had many blue screens with all sorts of products, now that I look back on it, if you're just a 'set and forget' user, don't want any problems, the Fortinet's suite is a great product for the price.

I'd use it again.

acr1965 - they use their own from my understanding.

[Brocke]

im using it now, its light so far yet simple.

few Questions

on suspicius file are when they are sumited to forinet do they get added to their def files as safe so they arent picked up again?

does anyone know the detection rate of this?

is there firewall lik norton where it sets rules for the user based on updated def files?

thank you all

[simisg]

i say it's light and strong ..... i dont say anything for detection rate or test it..
strong because has hips registry monitor ,heuristics, application control and web filter .... light because is not uses many resources on my system that's all.

[acr1965]

A free av for Windows Server 2003 and 2008 will get some attention. Previously I thought only Rising offered a free av for Windows Servers.

Download was only 10 MB

[Saraceno]

The detection rate, from what I've read, has been high, similar to Sophos. I can't comment as I haven't installed the new version, but you might have to either just ignore the suspicious file, ignore it by some sort of override (do they have this in this version?), or send Fortinet an email.

Either way, suspicious files didn't bother me. It's flagging these files as unknown rather than saying they are infected with a trojan. Nothing to worry about.

Best part of my previous experience was the firewall. If it's similar or upgraded in this version, might have to give this a whirl.

Some reading:

Security center - info on threats
http://www.fortiguard.com/

Awards, certifications, businesses that utilize their services
http://www.fortinet.com/aboutus/awards.html
http://www.fortinet.com/aboutus/certifications.html
http://www.fortinet.com/resource_center/case_studies.html

[virtumonde]

Anyone know more info about the firewall?Is it an inhouse engine?

[Saraceno]

I'm pulling this from what I've read before, but the firewall and everything else is all in-house

[gery]

is it worth to have it on a laptop?

[PnP]

I tested now under windows 7 x64 ultimate rtm... its very light.. good protection and for now 0 errors.. such eset kaspersky fsecure and other have... if work good i think that buy premium version..

[BrendanK.]

As far as I know, their detection rates are quite good. I will test it now. :)

[PnP]

-{ Quote: "As far as I know, their detection rates are quite good. I will test it now. :)" }-

and the scan its very quickly... :)

[BrendanK.]

I just took it for a test drive. I love it! This is for free too :D...I think from now on I am going to be recommending this to friends, family and people whose PC's I fix. This is an excellent security product! However, I would still use MBAM, SAS etc, as usual with any security product. :)

[wtsinnc]

I downloaded it last night (thanks for the link) but haven't yet installed it.

I've looked around on AV-Comparatives and Virus Bulletin and at AV-Comparatives Fortinet hasn't been tested since 2007, but looking through the archives, Fortinet's detection rate was not among the best.

At Virus Bulletin, it was alternately pretty good and not so good. Since February 2008, Fortinet has passed their test proceedure every time.

At Virus.gr, I found no recent tests, but a few forum posts referred to Fortinet missing some test samples.

I'm confused about the test results at AV-Comparatives as Fortinet has a superb reputation in the corporate security field. Is that reputation based primarily on their hardware offerings instead of their stand-alone software ?

-And-
I wonder if this (and the paid version) are truly improved products or the same application with different cosmetics ?

So far, the opinion(s) here are mostly favorable, so I'll give it a try.
I hope it's a lot better than Forticlient.
I tried that earlier this year and was far from impressed.

[Saraceno]

I think labelling items as 'suspicious' gave it a lower rating in the past, but as I learned from someone on here, in the business environment where they don't want staff to install non-standard software, identifying media players and other entertainment programs for example as 'suspicious' is what businesses want.

It's a new version, so old reviews might not be relevant, base it on how it performs now. I might give it a try soon.

[thathagat]

Its detections are very good....except for fake av's(understandable) and a few scripting exploits....but overall :thumb:

[BrendanK.]

-{ Quote: "Its detections are very good....except for fake av's(understandable) and a few scripting exploits....but overall :thumb:" }-

Actually, I found the WebGuard blocking most of those :) The heurstics etc, need to be configured before you play with it though :)

[wtsinnc]

A very early assessment;

Single computer at home. Dell E510 with P4 Prescott/3.0ghz; 4gb 533mhz RAM.
No VPN.

I am impressed with the minimal impact on system speed and overall performance.
Task Manager shows CPU at (max) 56% during a full scan (high priority); memory usage rarely exceeding 400mb.
If the AV and Firewall components are truly effective, this will be a winner !

It does tag WinPatrol.exe as "suspicious".
I have submitted that as a false positive.

I wonder how this compares overall with CIS ?

[Keyboard_Commando]

Used it for a day with Win7 32 bit, 2gb Ram, Q6600 CPU, Sandboxie + Shadow Defender. Standard installation, though disabled Spam/Email protection. No probs so far.

211755


FCWscD7.exe = 1.1MB
FCDBlog.exe = 3.4MB
fcappdb.exe = 3.9MB
FortiProxi.exe = 5.0MB
FortiFW.exe = 6.2MB
Fortitray.exe = 4.6MB
FortiWF.exe = 2.2MB
Fmon.exe = 10.7MB
Rmon.exe = 3.4MB

40.5MB total, For me.

I did notice something else running at boot for a couple of minutes but I can't seem to replicate it. Maybe an updater.

[Keyboard_Commando]

Gave C: partition a scan see if it finds anything interesting.

Scan started at 02 September 2009 16:46:14.
C:\Program Files\Pidgin\plugins\libgg.dll, virus found: Suspicious, action: <None>
C:\Program Files\SUPERAntiSpyware\SASWINLO.dll, virus found: Suspicious, action: <None>
C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe, virus found: Suspicious, action: <None>
C:\Program Files\Tall Emu\Online Armor\oawatch.dll, virus found: Suspicious, action: <None>
Scan finished at 02 September 2009 17:02:01.
Total files scanned 31438, infected 4. Total boot blocks scanned 1, infected 0

Pretty obvious FP's :( . Faster than Avira can scan the whole drive.

211756

I did enable heuristic scanning. Apart from that is all standard settings.

EDIT: just tried again with heuristic scanning off - FP's above not reported this time.

[cet]

I installed it in my virtual machine,but I have a problem.I get the ''your web filter service is expired'' pop up .Anyone having the same problem?

[the Tester]

-{ Quote: "Does Fortinet use their own scanners/signatures or do they use from another company?" }-


I found this article from June '08.

http://searchsecurity.techtarget.com/news/article/0,289142,sid14_gci1317873,00.html

[hyatt69]

-{ Quote: "I installed it in my virtual machine,but I have a problem.I get the ''your web filter service is expired'' pop up .Anyone having the same problem?" }-

i instlled on my pc(vista) and same annoying system tray popup?also detecting rollback rx installer as suspicious.runnin very light on pc though

[1000db]

FWIW virus bulletin seems to approve of it. I wonder if the free version uses the same scan engine?

http://www.virusbtn.com/vb100/archive/results?display=summary

[mvdu]

Doesn't Fortinet have tons of FPs? Is this even worth trying, then?

[trjam]

-{ Quote: "Doesn't Fortinet have tons of FPs? Is this even worth trying, then?" }-
yep, it does

[simisg]

no fp just detect as suspicious files many aplication files but only if you activate heuristics and is not activated by default

[trjam]

I honestly thought I had read that it did but I am wrong. I am sorry and must apologize.

here (http://www.reuters.com/article/pressRelease/idUS144601+08-Jun-2009+MW20090608)

this free suite may be better then the deal that Microsoft is offering with MSE.

[wtsinnc]

I also have gotten the aggravating "web filter service is expired" popup over and over.
Nothing in the configuration options seems to provide a fix.

The alerts for other well-known and mainstream applications are troubling as well.
How can any modern antivirus tag Superantispyware, Online Armor, Pidgin, and WinPatrol as malware unless they are trying to create doubt about competing applications.

I've already wiped and reformatted my test drive.
I'll revisit Fortinet at a later date, hopefully when these issues are corrected.

[mvdu]

-{ Quote: "no fp just detect as suspicious files many aplication files but only if you activate heuristics and is not activated by default" }-

Heuristics scanning is important nowadays. Think I'll pass on this for now.

[IceCube1010]

-{ Quote: "I honestly thought I had read that it did but I am wrong. I am sorry and must apologize.

here (http://www.reuters.com/article/pressRelease/idUS144601+08-Jun-2009+MW20090608)

this free suite may be better then the deal that Microsoft is offering with MSE." }-

I wouldn't go that far. Not bad for a complete solution but I feel MSE has something special.

Ice

[Brocke]

So is it a tumbs up? and recommeded?

[simisg]

for my opinion yes... if you want something complete for free and if you have some advanced knowledge about security

[dw426]

Sadly I'll think I'll pass on it for now also. These FPs being reported are really senseless, surely by now they know these applications exist and what they are used for. I appreciate the testing done, maybe we'll see this tested soon by PCMag or the like.

[trjam]

-{ Quote: "I wouldn't go that far. Not bad for a complete solution but I feel MSE has something special.

Ice" }-
Thanks Ice, we both known that, just trying to be political correct.;)

Personally, I think Microsoft is hitting a grand slam with MSE and it still has 2 major changes coming.;)

[Brocke]

-{ Quote: "Thanks Ice, we both known that, just trying to be political correct.;)

Personally, I think Microsoft is hitting a grand slam with MSE and it still has 2 major changes coming.;)" }-

you say to major changes? like what?

[dw426]

-{ Quote: "Thanks Ice, we both known that, just trying to be political correct.;)

Personally, I think Microsoft is hitting a grand slam with MSE and it still has 2 major changes coming.;)" }-

I'm hoping one of those changes is to boot-up time. Good grief, during the first release, it was great, hardly any delay at all. This release, they can keep this program if it continues like this, almost over a minute passes by from the time my desktop first comes up to the desktop icons and taskbar icons appear. I still have it as I truly believe this will turn out to be a great program, but something went nuts along the way. I have no other real-time security, not even Sandboxie or the like, so I can't see how a conflict could be happening.

[clocks]

I installed this suite, but can't get it to update. It just say "update is processing, waiting for result", then comes back "network error!".

Anyone else having a similar error?

[acr1965]

Anyone test this against malware yet? Or is it difficult enough just testing it against clean, everyday software?

Also, anyone install this without the firewall?

I can't find screenshots anywhere except the one by keyboard_commando (thanks btw)

Thanks Tester

[BrendanK.]

I tested it against some malicious links (mainly the WebGuard). It blocked rogue malicious links very effectively.

[Macstorm]

I'd like someone to confirm they are really using their own AV engine (as guessed in post #15)

[Brocke]

I used this firewall leak test
http://www.pcflank.com/pcflankleaktest.htm

not sure how reliable it is but it did fail and my text was sent to the internet.

What do you guys think?

[bogart]

I cannot download the suite, and dont know why.

can anyone who has this upload it online so I can download it.

I want to try this

[matt231]

-{ Quote: "I'd like someone to confirm they are really using their own AV engine (as guessed in post #15)" }-

They do use their own engine on their gateway products, so i'd assume FortiClient (which ties in very closely with FortiGate) would be the same.

[Macstorm]

-{ Quote: "They do use their own engine on their gateway products, so i'd assume FortiClient (which ties in very closely with FortiGate) would be the same." }-
Thanks for the confirmation, Matt :thumb:

[thathagat]

A review of sorts......here...http://www.raymond.cc/blog/archives/2009/09/03/review-on-forticlient-endpoint-security-suite-standard-edition-the-free-antivirus-by-fortinet/

[Habakuck]

-{ Quote: "I tested it against some malicious links (mainly the WebGuard). It blocked rogue malicious links very effectively." }-

My WebGuard is deactivated saying that it is expired. Does anyone know why? On the webpage and durig the installation it says that the web filter is free too... :'(

[ghodgson]

Hi,
A couple of queries, for those who have already installed it. Can you install each component seperately ie, my firewall is fine can the firewall be left out ?

Secondly, I am sure it is free, but sometimes vendors (maybe not Fortinet) take advantage of the English language by saying it is a 'free download' but to continue using it after installation will need a license purchase.
This kind of misleading info I have seen a lot with various software.

Gordon

[simisg]

forticlient is completely free but you can not install antivirus only but you can install firewall only

[ghodgson]

Thanks for the reply simisg.


Gordon

[bogart]

ISSUE SOLVED

[Warklen]

-{ Quote: "forticlient is completely free but you can not install antivirus only but you can install firewall only" }-
I have it installed right now with only the antivirus

[ghodgson]

Ah Warklen,
That's good news many thanks.

Gordon

[thathagat]

-{ Quote: "ok so no one can upload the software since I cannot download it
" }-
hey bogart........here....http://rapidshare.com/files/275151051/FortiClientSetup_4.1.0.exe.html

[tipstir]

Interesting stories but how stable is this software suite? Sounds like a lot of you are having web guard issues. Still again another free suite. All these third party reviews say nay to the product though. It's missing Spam feature but again SpamBayes which is also free does a better job dividing up spam junk from real email. I'll keep close eye on this suite but won't start testing it out when what I got listed below works stable for the moment.

[DesElms]

-{ Quote: "A review of sorts......here...http://www.raymond.cc/blog/archives/2009/09/03/review-on-forticlient-endpoint-security-suite-standard-edition-the-free-antivirus-by-fortinet/" }-This is what I was going to cite. I like Raymond and his blog, but I wouldn't exactly call him a security software expert...

...yet just look at all the problems he found with the product!

I would say that FortiClient is a no go... not just based on Raymond's findings, mind you. I've read, elsewhere, about some of the very things he cited, as well as pretty much everything negative which others, here, have found.

I think FortiClient is a WONDERFUL idea... lightweight, looks good, user friendly, an actual "enpoint" style product...

...but without actual PERFORMANCE, it's little more than a good-looking notion.

That said, if FortiClient actually WORKED, Comodo Internet Security, for one, would have some serious worries. Since the folks at Fortinet will quite likely be improving FortiClient over time, I'm thinking Comodo should be worried, in any case.

Just my $.02 worth... which my ex-wife will say is pretty much all it's worth.



________________________________
Gregg L. DesElms
gregg at greggdeselms dot com
Napa, California

[clocks]

I just unistalled it. I couldn't get it to update. It spawn about 10 separate processes, eating close to 80meg of ram.

I know most people dont care about ram, but how can Comodo, norton, etc. make a suite that uses 10meg or less, while this thing uses close to 100meg? Seems bloated, ala McAfee to me.

[danny9]

-{ Quote: "I just unistalled it. I couldn't get it to update. It spawn about 10 separate processes, eating close to 80meg of ram.

I know most people dont care about ram, but how can Comodo, norton, etc. make a suite that uses 10meg or less, while this thing uses close to 100meg? Seems bloated, ala McAfee to me." }-

My thoughts exactly and the first thing that popped into my head was Mcafee.
I was going to try it on my laptop but think I'll let it slide.
Ram is not an issue here but I don't believe in wasting it either. :thumbd:

[clocks]

Honestly, the suite seemed almost like a beta to me. Maybe I need to try it on one of my other rigs, but seeing all those processes reminded me of McAfee, so I will probably stick to other setups.

[Brocke]

I tested it with a few trojans and worms, it is like beta. kinda crappy, they need to fix a lot

[Sputnik]

Detection rates are not up with other free products available. At least for now you're better of with AVG/avast!/MSE combined with a free firewall from PC Tools or COMODO.

(Judgment based on command-line version of Fortinet.)

[Morro]

-{ Quote: "My WebGuard is deactivated saying that it is expired. Does anyone know why? On the webpage and durig the installation it says that the web filter is free too... :'(" }-

Not that i am a member on those forums but i found this thread there that might be helpfull...or not. :)

http://support.fortinet.com/forum/tm.asp?m=53726&p=1&tmode=1&smode=1

I do not have FortiClient installed, so i have no idea whether the solution in the last post works or not.

-{ Quote: "i will test this scaner to see if it has some potential;D" }-

Did you test it already, if so what where the results so far?

[jmonge]

-{ Quote: "Not that i am a member on those forums but i found this thread there that might be helpfull...or not. :)

http://support.fortinet.com/forum/tm.asp?m=53726&p=1&tmode=1&smode=1

I do not have FortiClient installed, so i have no idea whether the solution in the last post works or not.



Did you test it already, if so what where the results so far?" }-i will over the weekend:thumb: cause at this moment blue point is in the grinder;D

[Morro]

Ah ok. :)

[Keyboard_Commando]

I took GRC's leaktest and it passed. Aka detected

[firzen771]

i wonder if this will ever be tested in AV-C.

[acr1965]

-{ Quote: "i wonder if this will ever be tested in AV-C." }-


If you google fortinet and av-comparatives you can find "on demand" results from the fortinet 3.11 build from 2007 in avc. I'm not sure if there are other test results from avc or not. And I am not sure what improvements their latest engine has over the prior 3.11.

[Brocke]

I read on on their wiki that in 2005 Fortinet was found guilty of Patent infringement against Trend Micro regarding AntiVirus code

http://en.wikipedia.org/wiki/Fortinet

[Brocke]

Has anyone had time to fully test the suite? firewall , AV ,AS etc.

thanks

[Brocke]

they updated their program,

4.1.0.123 to .124 and the web filter expire has been fixed

[Brocke]

i have yet to figure about how the web filtering works, i tired to block porn sites but it wont. not sure why

[simisg]

web filter blocks most bad sites with default profile

[Morro]

-{ Quote: "I read on on their wiki that in 2005 Fortinet was found guilty of Patent infringement against Trend Micro regarding AntiVirus code

http://en.wikipedia.org/wiki/Fortinet" }-

That is four years ago Brocke, besides if you search well enough and long enough you will find bad news/reviews for many if not all Businesses that make software like this.

[mvdu]

I briefly tested it. Updates only once a day, which I didn't like. I didn't even turn heuristics on.

[Morro]

-{ Quote: "I briefly tested it. Updates only once a day, which I didn't like. I didn't even turn heuristics on." }-


Well to me that does not matter since i have Avira update automatically ones a day as well.

[Brocke]

-{ Quote: "Well to me that does not matter since i have Avira update automatically ones a day as well." }-

yeah i dont mind it either

[mvdu]

-{ Quote: "Well to me that does not matter since i have Avira update automatically ones a day as well." }-

I have the Premium version; plus, once a day is behind many AVs.

[cet]

So far I like the security suite.Now the web filter is working and no slow-downs.It is light on my system.I will wait for the test results(I am sure some people,magazines will test it) and afterwards I may put it on my daily PC.And I can choose to update it anytime I want,besides updating once a day.

[Brocke]

-{ Quote: "So far I like the security suite.Now the web filter is working and no slow-downs.It is light on my system.I will wait for the test results(I am sure some people,magazines will test it) and afterwards I may put it on my daily PC.And I can choose to update it anytime I want,besides updating once a day." }-

do you know why when i tested the web filter on porn sites it wouldnt block them?

[cet]

Web filter blocks bad sites plus the sites which I add to the blacklist.At least it works now for me.I did not do any modifications,it just blocks malware sites out of box.

[Morro]

-{ Quote: "I have the Premium version; plus, once a day is behind many AVs." }-

Well i do not know how often the Premium version updates a day. And i guess that when you are used to a AV that updates severall times a day, it will be weird to see only one update. Still i do not mind myself.

[Brocke]

-{ Quote: "Web filter blocks bad sites plus the sites which I add to the blacklist.At least it works now for me.I did not do any modifications,it just blocks malware sites out of box." }-

too bad we cant block by keywords

[cet]

-{ Quote: "too bad we cant block by keywords" }-
Yes you can.Choose web filter from the main console.Click on modify settings,choose profile management,and choose the profile name (for ex:default profile).The categories in the box below are highlighted; from there you can choose sub categories according to keywords such as porn,homosexuality,weapons etc.

[Brocke]

-{ Quote: "Yes you can.Choose web filter from the main console.Click on modify settings,choose profile management,and choose the profile name (for ex:default profile).The categories in the box below are highlighted; from there you can choose sub categories according to keywords such as porn,homosexuality,weapons etc." }-


Thats what i did when testing it with porn sites, after i did that i google just porn and tried a site and was able to enter

[mvdu]

-{ Quote: "Well i do not know how often the Premium version updates a day. And i guess that when you are used to a AV that updates severall times a day, it will be weird to see only one update. Still i do not mind myself." }-

That's fine; to each his own. If heuristics were better/more accurate in FSS, I might not mind as much.

[Brocke]

Who running this on their system standalone? just curious

[Keyboard_Commando]

-{ Quote: "Anyone test this against malware yet? Or is it difficult enough just testing it against clean, everyday software?

" }-

I uninstalled it. When it flags 3 or 4 of the top 20 downloads as suspect files you have to wonder if there is much backup of the product going on. Having to remove heuristic scanning to prevent FP's just isn't really worth it. Shame because it has decent features and seemed quite light on my computer. Would have been interesting to know which reg keys are covered by its reg guard.

[Brocke]

-{ Quote: "I uninstalled it. When it flags 3 or 4 of the top 20 downloads as suspect files you have to wonder if there is much backup of the product going on. Having to remove heuristic scanning to prevent FP's just isn't really worth it. Shame because it has decent features and seemed quite light on my computer. Would have been interesting to know which reg keys are covered by its reg guard." }-

thats is because of their crazy heuristics, turn it off and no more FP, you also can right click them in the scan window and submit as false postive or virus.

they seem to update/fix issues fast

[Brocke]

-{ Quote: "i will over the weekend:thumb: cause at this moment blue point is in the grinder;D" }-

jmonge,

have you tested this yet? I cant Waite ;D

[Morro]

Question, the WebGuard with which browsers does it work?

[cet]

Web guard is working with IE and Opera.I have not tested firefox.

[Morro]

Well considering i use Opera as my main browser, it is good to see that for ones Opera is also supported. ;D

I am getting more and more interested in trying this software. :)

[jmonge]

-{ Quote: "jmonge,

have you tested this yet? I cant Waite ;D" }-i am hitting this software with alot of stones:) as we speak

[Brocke]

-{ Quote: "i am hitting this software with alot of stones:) as we speak" }-


Sweet! i cant wait to hear what the out come it ;D

[Morro]

-{ Quote: "Web guard is working with IE and Opera.I have not tested firefox." }-

Well i installed FortiClient today, and now i can tell you that it also works with Firefox.

[Keyboard_Commando]

Matousec tests: http://www.matousec.com/projects/proactive-security-challenge/results.php


212102

Failed Tooleaky :o Doesn't look like Forticlient's firewall offers anything in the way of decent protection.

# Level 2 – AWFT1, DNStest, Ghost, Jumper, Kill3, Kill3b, Kill6, Wallbreaker3, Wallbreaker4 - Failed
# Level 3 – AWFT3, AWFT4, DNStester, Kernel1, Kill3f, Kill4, Kill7, SSS2, Suspend1, Thermite - Failed
# Level 4 – CopyCat, CPIL, CPILSuite1, Kernel1b, Keylog1, Kill3e, Kill8, Kill9, SSS, Suspend2 - Failed
# Level 5 – Breakout1, CPILSuite2, Crash1, Crash2, Crash3, Crash4, Kernel2, Kernel3, Keylog2, Kill3c, Kill3d, VBStest - Failed
# Level 6 – CPILSuite3, Crash5, Crash6, DDEtest, ECHOtest2, FireHole, Flank, Kernel4, Keylog3, Keylog4, Kill10, Kill11, Runner - Failed
# Level 7 – BITStest, FireHole2, Keylog5, Keylog6, Kill12, OSfwbypass, Runner2, Schedtest, SSS3 - Failed
# Level 8 – Kernel4b, Kernel5, Keylog7, Kill5, NewClass, Schedtest2, SockSnif, SSS4 - Failed
# Level 9 – Crash7, Driver Verifier - Failed
# Level 10 – BSODhook, ShadowHook - Failed

[jmonge]

they tested the firewall part of the suit,i think they shut the antivirus/antispyware off;D did some one else tested the antimalware part of the suite?thanks,i did a personal test and out of 10 it passed 8 missing only two,but i tested the complete security suite;D

[Morro]

Jmonge i hope that with passed 8 you mean it stopped 8 out of 10 threats. :)

[jmonge]

-{ Quote: "Jmonge i hope that with passed 8 you mean it stopped 8 out of 10 threats. :)" }-yes indeed;)
they were 10 new malwares

[Morro]

-{ Quote: "yes indeed;)
they were 10 new malwares" }-

Phew. ;D

[jmonge]

-{ Quote: "Phew. ;D" }-lol;D

[blacknight]

Someone knows what av engine it uses ?

[Sputnik]

@blacknight
It's their own engine.

[blacknight]

Thanks Sputnik, but someone talked to me also about Sophos engine....?

[Morro]

-{ Quote: "Thanks Sputnik, but someone talked to me also about Sophos engine....?" }-

I think you mean the post from Saraceno, post 19 on the first page. He mentioned this:

-{ Quote: "The detection rate, from what I've read, has been high, similar to Sophos." }-

[the Tester]

-{ Quote: "I have it installed right now with only the antivirus" }-

+1
I decided not to install the entire suite either.
You can do that with the installer.
An example- I didn't install the firewall as I already have one that I like.

[Kees1958]

I decided to try it, because it has some user share in the corporate world. Installed the AV only.

Put it on the PC of my wife (DefenseWall is protecting it), only installed the AV + AS. Nice feauture to check auto start entries of the registry. Application part can only be managed in a corporate environment.

The free version only has got the 'in the wild'blacklist data base, not old 'zoo' malware. I have set real time to check at writes only, ignoring the C:\ root, Windows and Program Files (DW takes care of that, just want to prevent spreading virusses through mail). It runs awfully light, much lighter than Avira, AVG, Rising or Avat in simular setup.

So far seems to fit my purpose (just check downloaded files and attachements of e-mail) for current virusses.

Regards Kees

[jmonge]

-{ Quote: "I decided to try it, because it has some user share in the corporate world. Installed the AV only.

Put it on the PC of my wife (DefenseWall is protecting it), only installed the AV + AS. Nice feauture to check auto start entries of the registry. Application part can only be managed in a corporate environment.

The free version only has got the 'in the wild'blacklist data base, not old 'zoo' malware. I have set real time to check at writes only, ignoring the C:\ root, Windows and Program Files (DW takes care of that, just want to prevent spreading virusses through mail). It runs awfully light, much lighter than Avira, AVG, Rising or Avat in simular setup.

So far seems to fit my purpose (just check downloaded files and attachements of e-mail) for current virusses.

Regards Kees" }-webprotection is nice feature too:)

[the Tester]

It is a nice program.
As already mentioned previously, the annoyance with it is the labeling of so many security programs as "suspicious".
The scans are faster than expected and Fortinet is configurable to some extent with heuristics etc...
I'll keep it for a while.

[Kees1958]

Well, it really is a nice program

I have IE8 and Iron set up to download to T:\Downloads, also the temp files directory of Windows and IE are moved to T:\

I have DefenseWall protecting everything (and made sure with resource protection that IE and Iron were not allowed to read/write from D:\ which is my data partition).

Because Fortinet has different settings for scanner, real time and e-mail, I can make fortinet to
- check all start up registry changes (which is a nice bonus)
- allow scanner to access all
- have e-mail only look at incoming traffic of outlook express and outlook
- set the real time protection to exclude D:\, C:\Windows and C:\Program Files (so effectively only checking T)
- set the real time to look only at data writes only

I don't need any other protection than DefenseWall V3 (still in beta), because it simply covers everything. Only I do not want to spread virusses around via mail. So fortiner checks writes of web browsers in T:\ (temporrary partition) and incoming e-mail.

I am really pleased with it, because it is so light with minimal CPU load and minimal I/O. Only down side of the free version is that it does not check on zoo virussed (old ones) only the current in the wild (active ones). Plus side of this is that blacklist data base is small (for updates and check at writes), so eats very little CPU time.

Cheers

[Keyboard_Commando]

-{ Quote: "Well, it really is a nice program

Because Fortinet has different settings for scanner, real time and e-mail, I can make fortinet to
- check all start up registry changes (which is a nice bonus)

" }-

Hi Kees. Just wondered if you have tested the reg guard? if it has more than HKLM/Run.

Cheers & Beers

[Brocke]

-{ Quote: "Hi Kees. Just wondered if you have tested the reg guard? if it has more than HKLM/Run.

Cheers & Beers" }-


Im not sure if its more than that but i know it does work great. it alarts with a yes or no popup.

I like it so far.

[Morro]

Yeah me to. :)

[Warklen]

The Reg Guard is a nice bonus Im also liking the Web Filter alot.

[Brocke]

they do update the client often a monthly minor update and at least 2 major updates a year so they are active on updating the product which is nice to see.

[acr1965]

Interesting chart and other tests involving Fortinet on vb100 with the RAP tests (reactive/proactive). During the last three RAP tests on vb100 Fortinet has performed very poorly. You may have to login or register to view the results.

Average of February through August 2009 (http://www.virusbtn.com/vb100/rap-index.xml)

February 2009 (http://www.virusbtn.com/vb100/rap-200902.xml)

April 2009: Windows XP SP3 (http://www.virusbtn.com/vb100/rap-200904.xml)

June 2009: Windows Server 2003 x64 Enterprise Edition (http://www.virusbtn.com/vb100/rap-200906.xml#)

[Brocke]

hmm interesting even tho they did bad in the past i would want to see a current up to date . but thank you for the info.

[Brocke]

-{ Quote: "Matousec tests: http://www.matousec.com/projects/proactive-security-challenge/results.php


212102

Failed Tooleaky :o Doesn't look like Forticlient's firewall offers anything in the way of decent protection.

# Level 2 – AWFT1, DNStest, Ghost, Jumper, Kill3, Kill3b, Kill6, Wallbreaker3, Wallbreaker4 - Failed
# Level 3 – AWFT3, AWFT4, DNStester, Kernel1, Kill3f, Kill4, Kill7, SSS2, Suspend1, Thermite - Failed
# Level 4 – CopyCat, CPIL, CPILSuite1, Kernel1b, Keylog1, Kill3e, Kill8, Kill9, SSS, Suspend2 - Failed
# Level 5 – Breakout1, CPILSuite2, Crash1, Crash2, Crash3, Crash4, Kernel2, Kernel3, Keylog2, Kill3c, Kill3d, VBStest - Failed
# Level 6 – CPILSuite3, Crash5, Crash6, DDEtest, ECHOtest2, FireHole, Flank, Kernel4, Keylog3, Keylog4, Kill10, Kill11, Runner - Failed
# Level 7 – BITStest, FireHole2, Keylog5, Keylog6, Kill12, OSfwbypass, Runner2, Schedtest, SSS3 - Failed
# Level 8 – Kernel4b, Kernel5, Keylog7, Kill5, NewClass, Schedtest2, SockSnif, SSS4 - Failed
# Level 9 – Crash7, Driver Verifier - Failed
# Level 10 – BSODhook, ShadowHook - Failed" }-


the verison of the client they used is old. they used client version 4.0.2.57

the forticlient version is at 4.1.0.124

so it may or maybe not correct tests. but i dont know just guessing.

all in all i like the suite its nice.

[Kees1958]

-{ Quote: "Interesting chart and other tests involving Fortinet on vb100 with the RAP tests (reactive/proactive). During the last three RAP tests on vb100 Fortinet has performed very poorly. You may have to login or register to view the results.

Average of February through August 2009 (http://www.virusbtn.com/vb100/rap-index.xml)

February 2009 (http://www.virusbtn.com/vb100/rap-200902.xml)

April 2009: Windows XP SP3 (http://www.virusbtn.com/vb100/rap-200904.xml)

June 2009: Windows Server 2003 x64 Enterprise Edition (http://www.virusbtn.com/vb100/rap-200906.xml#)" }-

Also the freeware version has a subset of the black list data base of the paid (only the cuurent or in the wild virusses). It passed all vb100 tests in 2009 though.

[Brocke]

-{ Quote: "Also the freeware version has a subset of the black list data base of the paid (only the cuurent or in the wild virusses). It passed all vb100 tests in 2009 though." }-

hmm didnt know that about the database. but still a good product i think.

are you using it kees?

[blacknight]

It seems to be an excellent firewall, but it needs to use an HIPS to ensure the protection of the system.

[Brocke]

-{ Quote: "It seems to be an excellent firewall, but it needs to use an HIPS to ensure the protection of the system." }-

yup that might be added in the future we will have to wait and see :)

[blacknight]

As far I'm using Fortinet with Defense+ ( not firewall enabled ): I don't understand why the default settings of the real time av protection are " programs files and documents "::) and not " all files "

[Morro]

-{ Quote: "As far I'm using Fortinet with Defense+ ( not firewall enabled ): I don't understand why the default settings of the real time av protection are " programs files and documents "::) and not " all files "" }-

I am not 100% sure so do not quote me on it.(Probably will. :) )

But i think this could have to do with the fact that FC was first aimed at businesses where the employees usually only have access to "programs files and documents". Due to office programs and such.

[Saraceno]

This new versions sounds ok. Used with something like sandboxie, might be one light and effective setup.

How's the install, quick and easy?

[Morro]

-{ Quote: "This new versions sounds ok. Used with something like sandboxie, might be one light and effective setup.

How's the install, quick and easy?" }-

Yeah i thought it was quick and easy.

[Saraceno]

Just noticed you're using it with sandboxie. Good stuff. No slowdowns opening your browser, or launching applications?

I used the old version with ThreatFire with no problems. Wonder if there are any conflicts now.

I think if this improves, so too does the new avast, there will be a lot of happy users.

[Morro]

-{ Quote: "Just noticed you're using it with sandboxie. Good stuff. No slowdowns opening your browser, or launching applications?

I used the old version with ThreatFire with no problems. Wonder if there are any conflicts now.

I think if this improves, so too does the new avast, there will be a lot of happy users." }-

I have not noticed any slowdowns with my browsers. I can not say i noticed a slowdown with launching applications either, in fact the only very small slowdown i notice is at computer start up. When Vista shows the loading bar at start up it seems to take maybe 5 to 10 seconds longer before it continues, but i do not mind that personally. :)

[Saraceno]

Morro, you're quick with the replies! What about updates? They take long, or quick as saying your name?

[Morro]

Well i only installed it last wednesday, but it updates everyday. The virus signatures have updated everyday so far, and yesterday the Spyware Signatures and AntiSpyware engine updated as well.

I am not certain whether the Spyware Signatures update everyday as well or only ones every few days, but i placed a topic about that on the FC forums. So far it has yet to be answered though.

[the Tester]

-{ Quote: "What about updates? They take long, or quick as saying your name?" }-

In my experience they have been quick.

[Kees1958]

-{ Quote: "hmm didnt know that about the database. but still a good product i think.

are you using it kees?" }-

Yep,

Because with DW on the XP machine only OutlookExpress and Outlook are allowed to touch my documents (D:\ [data] partition) , While Iron and IE ar eonly allowed to save in T:\ [Tempory data partition]. I can set it to only check at writes and e-mail (like MSE only can check downloads and e-mail). Which makes it at very light AV, it does very little I/O and uses very little CPU.

Due to DefenseWall I only have an AV to prevent us spreading virusses (DW paralyses malware, so it can do us no harm), so I do not mind it only contains the in the wild virusses.

I am doubting between MSE and Fortinet for this purpose at the moment. When MSE is out of beta and owrks flawlwssly on XP Pro, I will give that another try also.

Cheers

[the Tester]

The firewall seems to be good.
It gets stealth results at Shields Up.
And it can be easy to use.

[Brocke]

-{ Quote: "The firewall seems to be good.
It gets stealth results at Shields Up.
And it can be easy to use." }-


yup the defult is custom mode, which ask for in and out going apps.

but if you set it to home basic it sets it so in is blocked and out is asked. so it like windows firewall.
but it is easy to use i think and give you the info you need.

[Morro]

-{ Quote: "
I am not certain whether the Spyware Signatures update everyday as well or only ones every few days, but i placed a topic about that on the FC forums. So far it has yet to be answered though." }-

A few days ago some one on the FC forums posted that the update for the Spyware Signatures Version could perhaps be different from the Virus Signatures Version. And i was adviced to wait a few days to see what happens.

Ok so i waited a few days to see if the Spyware Signatures Version would update. And after using FortiClient for 11 days the Virus Signatures Version updated each and everyday...BUT since installment the Spyware Signatures Version has updated only ones for me?

With the current speed at which viruses..spyware and such appear i think that is way...WAY to little. Both Virus Signatures Version and Spyware Signatures Version should update each and every day in my opinion.

I am seriously thinking of uninstalling FC and start using Avira and a separate FW again. Or am i being to paranoid about this? ???

[the Tester]

-{ Quote: "
With the current speed at which viruses..spyware and such appear i think that is way...WAY to little. Both Virus Signatures Version and Spyware Signatures Version should update each and every day in my opinion." }-

That's one of the primary reasons why I uninstalled Forticlient.
Spyware signatures should update a lot more frequently.

Another annoyance is the categorization issue for popular programs that was previously mentioned. How long does it take to re-categorize well-known safe programs?

[Morro]

-{ Quote: "That's one of the primary reasons why I uninstalled Forticlient.
Spyware signatures should update a lot more frequently.

Another annoyance is the categorization issue for popular programs that was previously mentioned. How long does it take to re-categorize well-known safe programs?" }-

Well i just did uninstall it. I will continue to watch this program though, ones they make sure that both Virus Signatures and Spyware Signatures version update each and every day i will gladly switch back to FC again.

But till then it is back to the old combo. :)

[Brocke]

-{ Quote: "Well i just did uninstall it. I will continue to watch this program though, ones they make sure that both Virus Signatures and Spyware Signatures version update each and every day i will gladly switch back to FC again.

But till then it is back to the old combo. :)" }-


Yeah i like it to. but i went back to MSE because of their updating. did you post a question on their forum to ask whats the deal on the updating?

thanks
Brock

[Morro]

-{ Quote: "Yeah i like it to. but i went back to MSE because of their updating. did you post a question on their forum to ask whats the deal on the updating?

thanks
Brock" }-

I hat posted there that i was not happy with the way the Signatures Version where updated differently but i did not ask whether they will change it. But i just edited the post to ask if this will happen. :)

http://support.fortinet.com/forum/tm.asp?m=53962&appid=&p=1&mpage=1&key=&language=&tmode=1&smode=1&s=#54172

[acr1965]

This may be the dumbest question ever asked on Wilders, so please bear with me. Can the "SSL and IPSec VPN" be installed separately as a stand alone app? The reason I ask is that I have a laptop that 99% of the time uses wifi to connect to the internet as well as sometimes remotely to my work computer via wifi.

I have "hotspot shield" but have not heard a lot about it and not actually sure if it even works. The firewall I use is PC Tools 6 and I am not sure what all it provides besides stealth in untrusted networks.

I am currently happy with my present av/as set up as well as my firewall so no need to install those parts of forticlient.

Any help would be appreciated.

Thanks

[Brocke]

-{ Quote: "This may be the dumbest question ever asked on Wilders, so please bear with me. Can the "SSL and IPSec VPN" be installed separately as a stand alone app? The reason I ask is that I have a laptop that 99% of the time uses wifi to connect to the internet as well as sometimes remotely to my work computer via wifi.

I have "hotspot shield" but have not heard a lot about it and not actually sure if it even works. The firewall I use is PC Tools 6 and I am not sure what all it provides besides stealth in untrusted networks.

I am currently happy with my present av/as set up as well as my firewall so no need to install those parts of forticlient.

Any help would be appreciated.

Thanks" }-


If i remember right i think you can. you can deselect the the option that you want/need.

so you can do what you asked.

[Brocke]

Does anyone still use this ?

[funkydude]

-{ Quote: "As far as I know, their detection rates are quite good. I will test it now. :)" }-

Detection rate is terrible: http://www.virusbtn.com/vb100/rap-index.xml

http://www.wilderssecurity.com/showthread.php?t=256393

[the Tester]

-{ Quote: "Detection rate is terrible: http://www.virusbtn.com/vb100/rap-index.xml

http://www.wilderssecurity.com/showthread.php?t=256393" }-

That Vb result confirms what I suspected about Fortinet.
PCTools didn't do very well either.

[firzen771]

-{ Quote: "PCTools didn't do very well either." }-

it never has ;D

[Brocke]

Anything new on this one?

i see they have a program update but not sure what to and what the changelog would be. Free users dont get to see that.

[Brocke]

looks like they passed the AV-Labs in aug 2009

has this gotten any better?

[Saraceno]

Old thread, but thought I'd post a link.

Was watching some of languy's reviews, and the following was interesting (most likely posted after comments in this thread):

Part 1
http://www.youtube.com/watch?v=1FPxM9QkbtE

Part 2
http://www.youtube.com/watch?v=L6lfM4Vn880

[acr1965]

So Fortinet is Open Source? Does it use its own signatures or incorporate Clam AV and some extra features?

[Brocke]

its not open source, i dont thiink, but they did release a new version of the client the dec 23rd. no change log you have to be a paid customer to view it.

[Saraceno]

Regarding installing certain components only, if you wanted the firewall only, would all the other services still be running?

Reason I'm asking, it's a basic firewall, and when I used it last, was easy to use like good ol sygate.

acr, I've also assumed it was their own signatures.

[acr1965]

End of video 2 says it is open source.

[Saraceno]

Maybe someone can send their support an email clarifying those details. :-\

[acr1965]

Here is a pic- I think it is about the 3 minute mark of video 2

[Brocke]

just to let everyone know, the new version they now are giving everything for free expect the central management stuff

[PC__Gamer]

-{ Quote: "just to let everyone know, the new version they now are giving everything for free expect the central management stuff" }-
is it worth that? ;D

[Brocke]

-{ Quote: "is it worth that? ;D" }-


lol i have no clue how the AV/AS is tho, but the web filter is strong.

[acr1965]

I thought the previous reports about Forticlient also indicated the heuristics were reasonably strong albeit a few false positives. Did anyone else find out about the Open Source questions?

[blacknight]

It wouild be not a bad idea to test Fortinet with LeakTest: here ( http://www.matousec.com/projects/proactive-security-challenge/results.php ) not great performance.

[Johnny123]

-{ Quote: " Did anyone else find out about the Open Source questions?" }-

All that popup says is that it's using OpenSSL. When they use open source code in their application they are expected (or required) to acknowledge this.

If the whole thing was open source it would be mentioned somewhere, e.g., Help -> About and you would also be able to download the source code from their site (otherwise it wouldn't be open source).

[Brocke]

they seem to be updating the client often, does anyone really use this ?