Forticlient IPsec

[osaleem2_10]

dears, I have connected multi forticlients as Ipsec tunnel, and as u know max lifetime for ipsec is almost 21 hours. and on Forticlient there is options (auto connect, save pass, always up) and that show only with SSL. I need to make the ipsec tunnel always up. how can I allow or show these options for Ipsec as it shown for SSL? from Ipsec configuration max time was 

[Debbie_FTNT]

Hi Osaleem2_10,

if you have EMS, you can enable options in the profile:
https://docs.fortinet.com/document/forticlient/7.2.2/administration-guide/437773/save-password-auto-...
If you only have the FortiClient, you could take a backup of the config file (it's essentially just an xml file), find the vpn connection in question, and add this tag:

<forticlient_configuration>

<vpn>

<connection>

<keep_running>1</keep_running>

</connection>

</vpn>

</forticlient_configuration>

https://docs.fortinet.com/document/forticlient/7.2.2/xml-reference-guide/302055/enabling-vpn-always-...

[osaleem2_10]

thanks for your reply. I did a backup and update as mentioned. but on forticlient vpn the restore option is not allowed. is that because im using no license forticlient vpn with no EMS?