<?xml version="1.0" encoding="UTF-8" ?>
<forticlient_configuration generatedby="FCT-7.4.5.1949" policy="" authentication="02336C4D1F3B0F026F42FC3976A244B81EDFD5F638">
    <forticlient_version>7.4.5.1949</forticlient_version>
    <version>7.4.5</version>
    <exported_by_version>7.4.5.1949</exported_by_version>
    <date>2026/02/25</date>
    <partial_configuration>0</partial_configuration>
    <os_version>windows</os_version>
    <os_architecture>x64</os_architecture>
    <system>
        <ui>
            <disable_backup>0</disable_backup>
            <ads>1</ads>
            <flashing_system_tray_icon>1</flashing_system_tray_icon>
            <hide_system_tray_icon>0</hide_system_tray_icon>
            <allow_shutdown_when_registered>0</allow_shutdown_when_registered>
            <suppress_admin_prompt>0</suppress_admin_prompt>
            <lock />
            <password />
            <unreg_pwd>EncLM 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</unreg_pwd>
            <hide_user_info>0</hide_user_info>
            <dont_modify_cookies>0</dont_modify_cookies>
            <culture_code>os-default</culture_code>
            <replacement_messages>
                <quarantine>
                    <title>
                        <title>Enc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title>
                    </title>
                    <statement>
                        <remediation>EncX 047C9C93B0264F3B964633071739F10048AA1C40359978009D118AC603281F63EDA8402EE39AAF0B150350844A2DC6A75D9B0DBCC57A62738E530D5E762D38688C1B9C0415C8076757BA43C85A015DDDF8184ADE23AFD725E41B07D6EF695339EEB1528AB32B7537E79492AA8DE603AFC632A2B99489B2FAA319654112FC857AE17C30071424395D0DB74548BFFFDBB8170AA2E65CB08E357B49833F9974B03D253E7BFA1158C89F36170751006DF1D173D9754988E17DEFA8A87F5E5355A0AB379A26383CAE82431DACA60FA22391D7AA7A3D2ADE375A38A4E8B3A8B515FF856BB909627A7257A83401757A9A7CD91AED096E</remediation>
                    </statement>
                    <remediation>
                        <remediation>Enc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remediation>
                    </remediation>
                </quarantine>
            </replacement_messages>
        </ui>
        <installer>
            <allow_admin_uninstall_when_locked>0</allow_admin_uninstall_when_locked>
            <remove_user_data>0</remove_user_data>
        </installer>
        <log_settings>
            <onnet_local_logging>1</onnet_local_logging>
            <level>6</level>
            <log_events>ipsecvpn,sslvpn,scheduler,update,firewall,shield,configd</log_events>
            <remote_logging>
                <log_upload_enabled>0</log_upload_enabled>
                <send_software_inventory>1</send_software_inventory>
                <send_os_events>
                    <enabled>1</enabled>
                    <interval>120</interval>
                </send_os_events>
                <send_ms_exch_events>
                    <enabled>1</enabled>
                    <interval>120</interval>
                </send_ms_exch_events>
                <log_upload_server />
                <log_uploadserver_sni />
                <log_upload_ssl_enabled>1</log_upload_ssl_enabled>
                <log_retention_days>90</log_retention_days>
                <log_upload_freq_minutes>60</log_upload_freq_minutes>
                <log_generation_timeout_secs>900</log_generation_timeout_secs>
                <netlog_categories>49</netlog_categories>
                <log_protocol>faz</log_protocol>
                <netlog_server />
            </remote_logging>
        </log_settings>
        <cryptography>
            <drbg_reseed_minutes>1</drbg_reseed_minutes>
        </cryptography>
        <proxy>
            <update>0</update>
            <online_scep>0</online_scep>
            <type>http</type>
            <address />
            <port>80</port>
            <username>
                <![CDATA[EncX 6A4380612BBB8C2E32C24202C50B3E82180EBFDD]]>
            </username>
            <password>
                <![CDATA[EncX BDA0E265A3A7FC288C7805F6E2E98246ED3C20AF]]>
            </password>
        </proxy>
        <update>
            <use_custom_server>0</use_custom_server>
            <restrict_services_to_regions />
            <restrict_services_to_regions />
            <use_legacy_fdn>0</use_legacy_fdn>
            <ocsp_mode>0</ocsp_mode>
            <server />
            <port>80</port>
            <timeout>60</timeout>
            <failoverport />
            <fail_over_to_fdn>1</fail_over_to_fdn>
            <use_proxy_when_fail_over_to_fdn>1</use_proxy_when_fail_over_to_fdn>
            <auto_patch>0</auto_patch>
            <submit_virus_info_to_fds>1</submit_virus_info_to_fds>
            <submit_vuln_info_to_fds>1</submit_vuln_info_to_fds>
            <submit_soft_invent_info_to_fds>1</submit_soft_invent_info_to_fds>
            <update_action>disable</update_action>
            <scheduled_update>
                <enabled>1</enabled>
                <type>interval</type>
                <daily_at>06:37</daily_at>
                <update_interval_in_hours>6</update_interval_in_hours>
            </scheduled_update>
        </update>
        <fortiproxy>
            <enabled>0</enabled>
            <enable_https_proxy>1</enable_https_proxy>
            <http_timeout>60</http_timeout>
            <client_comforting>
                <pop3_client>1</pop3_client>
                <pop3_server>1</pop3_server>
                <smtp>1</smtp>
            </client_comforting>
            <selftest>
                <enabled>1</enabled>
                <last_port>65535</last_port>
                <notify>1</notify>
            </selftest>
        </fortiproxy>
        <certificates>
            <crl>
                <ocsp>
                    <enabled>0</enabled>
                    <server />
                    <port />
                </ocsp>
            </crl>
            <hdd />
            <ca />
        </certificates>
    </system>
    <vpn>
        <options>
            <on_os_start_connect />
            <autoconnect_tunnel />
            <failover_delay>0</failover_delay>
            <autoconnect_only_when_epc_state_determined>0</autoconnect_only_when_epc_state_determined>
            <autoconnect_only_when_offnet>0</autoconnect_only_when_offnet>
            <autoconnect_on_install>0</autoconnect_on_install>
            <on_os_start_connect_has_priority>1</on_os_start_connect_has_priority>
            <power_resume_autoconnect_delay>5</power_resume_autoconnect_delay>
            <user_login_autoconnect_delay>0</user_login_autoconnect_delay>
            <keep_running_max_tries>0</keep_running_max_tries>
            <keep_running_delay>0</keep_running_delay>
            <disable_internet_check>0</disable_internet_check>
            <suppress_vpn_notification>0</suppress_vpn_notification>
            <enforce_disabling_smartdns>0</enforce_disabling_smartdns>
            <minimize_window_on_connect>1</minimize_window_on_connect>
            <before_logon_saml_auth>1</before_logon_saml_auth>
            <after_logon_saml_auth>0</after_logon_saml_auth>
            <allow_personal_vpns>1</allow_personal_vpns>
            <enable_view_selected_vpns>0</enable_view_selected_vpns>
            <enable_multi_vpn>1</enable_multi_vpn>
            <certs_require_keyspec>0</certs_require_keyspec>
            <disable_connect_disconnect>0</disable_connect_disconnect>
            <secure_remote_access>0</secure_remote_access>
            <show_vpn_before_logon>0</show_vpn_before_logon>
            <vpn_before_logon_style>1</vpn_before_logon_style>
            <use_windows_credentials>1</use_windows_credentials>
            <use_legacy_vpn_before_logon>0</use_legacy_vpn_before_logon>
            <show_negotiation_wnd>0</show_negotiation_wnd>
            <vendor_id />
        </options>
        <sslvpn>
            <options>
                <enabled>1</enabled>
                <prefer_sslvpn_dns>1</prefer_sslvpn_dns>
                <service_port>8053</service_port>
                <dnscache_service_control>0</dnscache_service_control>
                <use_legacy_ssl_adapter>0</use_legacy_ssl_adapter>
                <preferred_dtls_tunnel>0</preferred_dtls_tunnel>
                <block_ipv6>0</block_ipv6>
                <no_dhcp_server_route>0</no_dhcp_server_route>
                <no_dns_registration>0</no_dns_registration>
                <disallow_invalid_server_certificate>0</disallow_invalid_server_certificate>
                <warn_invalid_server_certificate>1</warn_invalid_server_certificate>
                <show_auth_cert_only>0</show_auth_cert_only>
                <show_bubble_notifications>1</show_bubble_notifications>
            </options>
            <connections />
        </sslvpn>
        <ipsecvpn>
            <options>
                <enabled>1</enabled>
                <beep_if_error>0</beep_if_error>
                <usewincert>1</usewincert>
                <use_win_current_user_cert>1</use_win_current_user_cert>
                <use_win_local_computer_cert>1</use_win_local_computer_cert>
                <no_dns_registration>1</no_dns_registration>
                <block_ipv6>1</block_ipv6>
                <uselocalcert>0</uselocalcert>
                <usesmcardcert>1</usesmcardcert>
                <enable_udp_checksum>0</enable_udp_checksum>
                <disable_default_route>0</disable_default_route>
                <show_auth_cert_only>0</show_auth_cert_only>
                <disallow_invalid_server_certificate>0</disallow_invalid_server_certificate>
                <check_for_cert_private_key>0</check_for_cert_private_key>
                <enhanced_key_usage_mandatory>0</enhanced_key_usage_mandatory>
                <prefer_ipsecvpn_dns>1</prefer_ipsecvpn_dns>
            </options>
            <connections>
                <connection>
                    <name>Diadem IPsec</name>
                    <single_user_mode>0</single_user_mode>
                    <machine>0</machine>
                    <type>manual</type>
                    <ui>
                        <show_passcode>0</show_passcode>
                        <show_remember_password>0</show_remember_password>
                        <show_alwaysup>0</show_alwaysup>
                        <show_autoconnect>0</show_autoconnect>
                        <save_username>0</save_username>
                    </ui>
                    <ike_settings>
                        <version>2</version>
                        <implied_SPDO>0</implied_SPDO>
                        <implied_SPDO_timeout>0</implied_SPDO_timeout>
                        <xauth_timeout>0</xauth_timeout>
                        <prompt_certificate>0</prompt_certificate>
                        <description />
                        <server>103.253.125.4</server>
                        <authentication_method>Preshared Key</authentication_method>
                        <auth_data>
                            <preshared_key>EncX 23E64461F2C1DC2E61A51319F7B8D4E2DD45A91AC3D38CD745A514D50EDCE1330ED377</preshared_key>
                        </auth_data>
                        <azure_auto_login>
                            <azure_app />
                        </azure_auto_login>
                        <dhgroup>21;</dhgroup>
                        <key_life>86400</key_life>
                        <localid />
                        <peerid />
                        <transport_mode>1</transport_mode>
                        <tcp_port>5500</tcp_port>
                        <mode_config>1</mode_config>
                        <enable_local_lan>0</enable_local_lan>
                        <remove_password_for_unexpected_eap_failure>0</remove_password_for_unexpected_eap_failure>
                        <session_resume>0</session_resume>
                        <childless_mode>0</childless_mode>
                        <cert_subjectcheck>0</cert_subjectcheck>
                        <failover_sslvpn_connection />
                        <block_outside_dns>0</block_outside_dns>
                        <nat_alive_freq>5</nat_alive_freq>
                        <dpd>1</dpd>
                        <dpd_retry_count>3</dpd_retry_count>
                        <dpd_retry_interval>5</dpd_retry_interval>
                        <enable_ike_fragmentation>0</enable_ike_fragmentation>
                        <sso_enabled>0</sso_enabled>
                        <ike_saml_port>0</ike_saml_port>
                        <use_external_browser>0</use_external_browser>
                        <xauth>
                            <enabled>1</enabled>
                            <prompt_username>1</prompt_username>
                            <username>EncX A4811BDE55E9D018D1070EE2A88CC020FFD0094492B5A616E10A</username>
                            <vpn_before_logon>
                                <username_format>username</username_format>
                            </vpn_before_logon>
                            <password />
                        </xauth>
                        <proposals>
                            <proposal>AES128|SHA256</proposal>
                            <proposal>AES256|SHA256</proposal>
                        </proposals>
                    </ike_settings>
                    <ipsec_settings>
                        <remote_networks>
                            <network>
                                <addr>0.0.0.0</addr>
                                <mask>0.0.0.0</mask>
                            </network>
                            <network>
                                <addr>::/0</addr>
                                <mask>::/0</mask>
                            </network>
                        </remote_networks>
                        <ipv4_split_exclude_networks />
                        <dhgroup>21</dhgroup>
                        <key_life_type>seconds</key_life_type>
                        <key_life_seconds>43200</key_life_seconds>
                        <key_life_Kbytes>5120</key_life_Kbytes>
                        <replay_detection>1</replay_detection>
                        <pfs>1</pfs>
                        <use_vip>1</use_vip>
                        <virtualip>
                            <type>modeconfig</type>
                            <ip>0.0.0.0</ip>
                            <mask>0.0.0.0</mask>
                            <dnsserver>0.0.0.0</dnsserver>
                            <winserver>0.0.0.0</winserver>
                        </virtualip>
                        <proposals>
                            <proposal>AES128|SHA256</proposal>
                            <proposal>AES256|SHA256</proposal>
                        </proposals>
                    </ipsec_settings>
                    <on_connect>
                        <script>
                            <delay>3</delay>
                            <os>windows</os>
                            <script>
                                <![CDATA[]]>
                            </script>
                        </script>
                    </on_connect>
                    <on_disconnect>
                        <script>
                            <delay>0</delay>
                            <os>windows</os>
                            <script>
                                <![CDATA[]]>
                            </script>
                        </script>
                    </on_disconnect>
                </connection>
            </connections>
        </ipsecvpn>
        <traffic_control>
            <enabled>0</enabled>
            <enable_local_lan>0</enable_local_lan>
            <mode>0</mode>
            <apps />
            <fqdns />
            <non_exempt_ports />
        </traffic_control>
    </vpn>
    <fssoma>
        <enabled>0</enabled>
        <serveraddress />
        <presharedkey>
            <![CDATA[EncX 4EE21153EE03F7D19CDA5659A426F2FFCD1CE394]]>
        </presharedkey>
        <address_category>0</address_category>
        <prefer_azure>0</prefer_azure>
    </fssoma>
    <ftdata_scan>
        <enabled>0</enabled>
        <server_ip />
        <server_port>0</server_port>
        <extensions />
        <when>
            <browser>0</browser>
            <msg_client>0</msg_client>
            <cb_listener>0</cb_listener>
        </when>
        <data_labels />
    </ftdata_scan>
    <ztna>
        <enabled>0</enabled>
        <disable_wildcard_rules>0</disable_wildcard_rules>
        <notify_on_error>1</notify_on_error>
        <allow_personal_rules>1</allow_personal_rules>
        <gateways_enabled>1</gateways_enabled>
        <saml_auth_method>0</saml_auth_method>
        <portals_enabled>1</portals_enabled>
        <enable_chrome>0</enable_chrome>
        <enable_edge>0</enable_edge>
        <enable_safari>0</enable_safari>
        <enable_firefox>0</enable_firefox>
        <disallow_invalid_server_certificate>0</disallow_invalid_server_certificate>
        <prefer_ipv4_over_ipv6>0</prefer_ipv4_over_ipv6>
        <save_password>0</save_password>
        <fqdn_exceptions />
        <rules />
        <portals />
        <web_proxy_rules />
        <azure_auto_login>
            <allowed>0</allowed>
            <azure_app>
                <client_id />
                <tenant_name />
            </azure_app>
        </azure_auto_login>
    </ztna>
    <endpoint_control>
        <enabled>1</enabled>
        <socket_connect_timeouts>1:15</socket_connect_timeouts>
        <system_data>EncX 1AEDB28D72FA5AC5E597AC0F982DEB123BE85C8FC3911E12C9C033D0DFCA5CDDF1F9C70859AC1EFC3EDCFAE98C6038429FD2F8C0D855BAB54BC0E14D5D8137EF7C8FD01AFFF9FD243E</system_data>
        <disable_unregister>0</disable_unregister>
        <invalid_cert_action>warn</invalid_cert_action>
        <disable_fgt_switch>0</disable_fgt_switch>
        <show_bubble_notifications>1</show_bubble_notifications>
        <enable_dns_cache>0</enable_dns_cache>
        <avatar_enabled>1</avatar_enabled>
        <send_software_inventory>0</send_software_inventory>
        <vpn_expiration_time>1774587323</vpn_expiration_time>
        <enable_dem>0</enable_dem>
        <forticloud></forticloud>
        <ui>
            <display_antivirus>0</display_antivirus>
            <display_webfilter>0</display_webfilter>
            <display_firewall>0</display_firewall>
            <display_vpn>1</display_vpn>
            <display_vulnerability_scan>0</display_vulnerability_scan>
            <display_sandbox>0</display_sandbox>
            <display_ztna>0</display_ztna>
            <display_compliance>1</display_compliance>
        </ui>
        <onnet_addresses>
            <address></address>
        </onnet_addresses>
        <onnet_mac_addresses></onnet_mac_addresses>
        <alerts>
            <notify_server>1</notify_server>
            <alert_threshold>1</alert_threshold>
        </alerts>
        <local_subnets_only>0</local_subnets_only>
        <notification_server></notification_server>
        <nac>
            <processes>
                <process id="" rule="present">
                    <signature name=""></signature>
                </process>
            </processes>
            <files>
                <path id=""></path>
            </files>
            <registry>
                <path id=""></path>
            </registry>
        </nac>
    </endpoint_control>
</forticlient_configuration>
