On / Off Net detection and automatic VPN

[Holy]

Hello Guys,

it is actualy possible to config FortiClient to automaticly detect if he is not in his LAN anymore and then start a VPN automaticly?

can enforce that in that way all my notebooks can only access internet if they have a VPN conenction?

there is no option in Gui so i have to use the .xml Config Profile of FortiClient right?

Thank you

[JohnAgora]

I beleive it is not possible, anyhow you can do that with some bash/powershell magic.

[Zilitonas]

Hi, I think it is possible with Forti OS 5.4 version. This features is called "Auto-connect when Off-net". You can find it on the "Forticlient Profiles"

[Holy]

Hello,

yes you have the "Auto-Connect whn Off-Net" Feature with 5.4 but if that is aktivated he just Pop Up the Tunnel and User have to enter his Password for the VPN COnnection.

We want that this VPN Connection will be connected automaticly and that User cannot disconnect then.

[kallbrandt]

That should be doable via a GPO.