Technical Tip: How to configure a Remote Access profile on the EMS using the FortiGate 'Download tunnel XML' feature

After configuring a tunnel using the FortiClient Secure Internet Access (SIA) template, available starting in FortiOS version 7.6.3 (Configure FortiClient SIA for IPsec VPN tunnels - FortiGate administration guide), there is an option to download the Remote Access profile for import into FortiClient EMS.

After downloading this XML file, it can be imported into FortiClient EMS as follows.

1. Open FortiClient EMS and navigate to the 'Endpoint Profiles' menu.
2. In 'Remote Access,' create or edit a profile.
3. Find the 'VPN Tunnels' settings and select 'Add Tunnel'.

4. In the window that opens, select 'XML' and then select 'Next'.
   
   

5. Open the XML file downloaded from the FortiGate using a text editor. Copy its contents and paste them into the import screen.
   
   

6. Select 'Import' and the VPN tunnel will be configured with the information already set on the FortiGate.
   
   

After completing this configuration, the profile can be distributed to endpoints through FortiClient EMS.