Inquiry on Disabling Web Filtering on Forticlient VPN (Jamf Security Cloud incompatibility)

[RaniPM]

Hello,

I would like to know if you know how to disable Web Filtering on Forticlient VPN, please?

Indeed, we use Forticlient VPN in my company. We need to install a configuration profile to set up the Filter Socket; otherwise, without it, the user gets a pop-up asking to install the Network Content Filter.

The problem is that we have just implemented Jamf Security Cloud, and we have deployed a Jamf Security Cloud profile on the computers. Most of the devices don't have the Secure DNS of JSC activated, and according to Jamf support, this is because Macs can only handle one filter at a time, and other filters need to be removed or disabled.

But as I mentioned earlier, if we remove the Filter Socket from Forticlient, the pop-up appears every time Forticlient is used.

Otherwise, if we cannot find a solution, we will have to stop using Jamf Security Cloud, which I find unfortunate.

Thank you in advance, and have a very good day.

[cherry45scott · Accepted solution]

You're facing a conflict where FortiClient's "Filter Socket" on macOS prevents Jamf Security Cloud's Secure DNS from activating, causing a pop-up if the FortiClient filter is removed. Directly disabling FortiClient's web filtering isn't advisable due to security risks. Instead, re-engage both Jamf and Fortinet support to find official compatibility solutions or configurations that allow FortiClient to function without its web filter or to defer to Jamf, potentially via FortiClient EMS, to resolve the pop-up issue and ensure both security solutions can coexist.

[RaniPM]

@cherry45scott Thank you for your help.
I will see with Fortinet support.