

When not selected, during periods of inactivity, FortiClient will attempt to stay connected every three minutes for a maximum of 10 minutes. The FortiClient connection will not shut down. When the FortiClient application is launched, for example after a reboot or system start up, FortiClient will automatically attempt to connect to the VPN tunnel. The user's password is stored on the user’s computer and will automatically populate each time they connect to the VPN. When enabled, a checkbox for the corresponding option appears on the VPN log in screen in FortiClient, and is disabled by default.

These options affect how the FortiClient application behaves when connected to the FortiGate VPN tunnel. There is always a default pool available if you do not create your own. Select an IPv6 pool for users to acquire an IP address when connecting to the portal. These settings determine how tunnel mode clients are assigned IPv6 addresses. Select to configure and enable tunnel mode access. Select an IPv4 pool for users to acquire an IP address when connecting to the portal.


Traffic intended for the routing address will not be split from the tunnel. If you enable split tunneling, you are required to set the address that your corporate network is using. The user’s other traffic follows its normal route. Select so that the VPN carries only the traffic for the networks behind the FortiGate unit. These settings determine how tunnel mode clients are assigned IPv4 addresses. Once they are logged in to the portal, they cannot go to another system and log in with the same credentials until they log out of the first connection. Set the SSL VPN tunnel so that each user can only be logged in to the tunnel one time per user log in. Limit Users to One SSL VPN Connection at a Time Configure the following settings, then select OK to create the profile.Click Create New in the toolbar, or right-click and select Create New.Go to VPN Manager > SSL-VPN and select Portal Profiles in the tree menu.To create SSL VPN portal profiles, you must be logged in as an administrator with sufficient privileges.
