When configuring an Interface in System > Network > Interface below the Administrative Access you also get the option to enable "Auto IPSec Request".
What is it? So far neither Google nor any FortiNet Ressource brought any insight.
To paraphrase terribly what I've seen come through our internal forums over the last week, I finally found out that Auto-IPsec was designed in situations where a FortiManager was *not* used to centrally push out configuration changes concerning VPN settings to both tunnel endpoints.
The idea is, with a policy-based VPN (I haven't seen anything to prove it applies to interface-based VPNs as well), if a change is made on the responder side once a tunnel is already established, the change can be communicated to the initiator so that both will maintain their connection.
Does that help?
Enter your E-mail address. We'll send you an e-mail with instructions to reset your password.
