<?xml version="1.0" encoding="UTF-8" ?>
<forticlient_configuration generatedby="FCT-7.0.1.0083" policy="" authentication="BF4A14FF6C9D99ADBC9E3CF8AC89BE511D1B726FE1">
    <forticlient_version>7.0.1.83</forticlient_version>
    <version>7.0.1</version>
    <exported_by_version>7.0.1.0083</exported_by_version>
    <date>2021/10/06</date>
    <partial_configuration>0</partial_configuration>
    <os_version>windows</os_version>
    <os_architecture>x64</os_architecture>
    <system>
        <ui>
            <disable_backup>0</disable_backup>
            <ads>0</ads>
            <flashing_system_tray_icon>1</flashing_system_tray_icon>
            <hide_system_tray_icon>0</hide_system_tray_icon>
            <allow_shutdown_when_registered>0</allow_shutdown_when_registered>
            <suppress_admin_prompt>0</suppress_admin_prompt>
            <password />
            <hide_user_info>0</hide_user_info>
            <culture_code>os-default</culture_code>
        </ui>
        <update>
            <use_custom_server>0</use_custom_server>
            <restrict_services_to_regions />
            <restrict_services_to_regions />
            <use_legacy_fdn>0</use_legacy_fdn>
            <ocsp_mode>0</ocsp_mode>
            <server />
            <port>80</port>
            <timeout>60</timeout>
            <failoverport />
            <fail_over_to_fdn>1</fail_over_to_fdn>
            <use_proxy_when_fail_over_to_fdn>1</use_proxy_when_fail_over_to_fdn>
            <auto_patch>0</auto_patch>
            <submit_virus_info_to_fds>1</submit_virus_info_to_fds>
            <submit_vuln_info_to_fds>1</submit_vuln_info_to_fds>
            <!-- update_action applies to software updates only and can be one of: notify_only, download_and_install, download_only, disable -->
            <update_action>notify_only</update_action>
            <scheduled_update>
                <enabled>1</enabled>
                <type>interval</type>
                <daily_at>06:29</daily_at>
                <update_interval_in_hours>6</update_interval_in_hours>
            </scheduled_update>
        </update>
        <certificates>
            <crl>
                <ocsp />
            </crl>
            <hdd />
            <ca />
        </certificates>
    </system>
    <vpn>
        <options>
            <on_os_start_connect />
            <autoconnect_tunnel />
            <autoconnect_only_when_offnet>0</autoconnect_only_when_offnet>
            <on_os_start_connect_has_priority>1</on_os_start_connect_has_priority>
            <keep_running_max_tries>0</keep_running_max_tries>
            <disable_internet_check>0</disable_internet_check>
            <suppress_vpn_notification>0</suppress_vpn_notification>
            <minimize_window_on_connect>1</minimize_window_on_connect>
            <allow_personal_vpns>1</allow_personal_vpns>
            <certs_require_keyspec>0</certs_require_keyspec>
            <disable_connect_disconnect>0</disable_connect_disconnect>
            <secure_remote_access>0</secure_remote_access>
            <show_vpn_before_logon>0</show_vpn_before_logon>
            <use_windows_credentials>0</use_windows_credentials>
            <use_legacy_vpn_before_logon>0</use_legacy_vpn_before_logon>
            <show_negotiation_wnd>0</show_negotiation_wnd>
            <vendor_id />
        </options>
        <sslvpn>
            <options>
                <enabled>1</enabled>
                <prefer_sslvpn_dns>1</prefer_sslvpn_dns>
                <dnscache_service_control>2</dnscache_service_control>
                <!--0=disable dnscache service, 1=do not touch dnscache service, 2=restart dnscache service, 3=sc control dnscache paramchange-->
                <use_legacy_ssl_adapter>0</use_legacy_ssl_adapter>
                <preferred_dtls_tunnel>1</preferred_dtls_tunnel>
                <block_ipv6>1</block_ipv6>
                <no_dhcp_server_route>0</no_dhcp_server_route>
                <no_dns_registration>1</no_dns_registration>
                <disallow_invalid_server_certificate>1</disallow_invalid_server_certificate>
                <warn_invalid_server_certificate>1</warn_invalid_server_certificate>
                <show_auth_cert_only>0</show_auth_cert_only>
            </options>
            <connections>
                <connection>
                    <name>BORG-Perg SSL-VPN</name>
                    <description />
                    <server>gatekeeper.borg-perg.ac.at:443</server>
                    <username></username>
                    <dual_stack>0</dual_stack>
                    <sso_enabled>0</sso_enabled>
                    <use_external_browser>0</use_external_browser>
                    <single_user_mode>0</single_user_mode>
                    <ui />
                    <machine>0</machine>
                    <certificate>
                        <common_name>
                            <match_type>wildcard</match_type>
                            <pattern>
                                <![CDATA[*]]>
                            </pattern>
                        </common_name>
                        <issuer>
                            <match_type>wildcard</match_type>
                            <pattern>
                                <![CDATA[*]]>
                            </pattern>
                        </issuer>
                        <oids>
                            <oid>
                                <match_type>wildcard</match_type>
                                <pattern>
                                    <![CDATA[*]]>
                                </pattern>
                            </oid>
                        </oids>
                    </certificate>
                    <warn_invalid_server_certificate>1</warn_invalid_server_certificate>
                    <prompt_certificate>0</prompt_certificate>
                    <prompt_username>1</prompt_username>
                    <on_connect>
                        <script>
                            <os>windows</os>
                            <script>
                                <!--Write MS DOS batch script inside the CDATA tag below.-->
                                <!--One line per command, just like a regular batch script file.-->
                                <!--The script will be executed in the context of the user that connected the tunnel.-->
                                <!--Wherever you write #username# in your script, it will be automatically substituted with the xauth username of the user that connected the tunnel.-->
                                <!--Wherever you write #password# in your script, it will be automatically substituted with the xauth password of the user that connected the tunnel.-->
                                <!--Remember to check your xml file before deploying to ensure that carriage returns/line feeds are present.-->
                                <![CDATA[]]>
                            </script>
                        </script>
                    </on_connect>
                    <on_disconnect>
                        <script>
                            <os>windows</os>
                            <script>
                                <!--Write MS DOS batch script inside the CDATA tag below.-->
                                <!--One line per command, just like a regular batch script file.-->
                                <!--The script will be executed in the context of the user that connected the tunnel.-->
                                <!--Wherever you write #username# in your script, it will be automatically substituted with the xauth username of the user that connected the tunnel.-->
                                <!--Wherever you write #password# in your script, it will be automatically substituted with the xauth password of the user that connected the tunnel.-->
                                <!--Remember to check your xml file before deploying to ensure that carriage returns/line feeds are present.-->
                                <![CDATA[]]>
                            </script>
                        </script>
                    </on_disconnect>
                </connection>
            </connections>
        </sslvpn>
        <ipsecvpn>
            <options>
                <enabled>1</enabled>
                <beep_if_error>0</beep_if_error>
                <usewincert>1</usewincert>
                <use_win_current_user_cert>1</use_win_current_user_cert>
                <use_win_local_computer_cert>1</use_win_local_computer_cert>
                <no_dns_registration>1</no_dns_registration>
                <block_ipv6>1</block_ipv6>
                <uselocalcert>0</uselocalcert>
                <usesmcardcert>1</usesmcardcert>
                <enable_udp_checksum>0</enable_udp_checksum>
                <disable_default_route>0</disable_default_route>
                <show_auth_cert_only>0</show_auth_cert_only>
                <check_for_cert_private_key>0</check_for_cert_private_key>
                <enhanced_key_usage_mandatory>0</enhanced_key_usage_mandatory>
            </options>
            <connections />
        </ipsecvpn>
    </vpn>
    <ztna>
        <enabled>0</enabled>
        <enable_chrome>0</enable_chrome>
        <enable_edge>0</enable_edge>
        <enable_safari>0</enable_safari>
        <enable_firefox>0</enable_firefox>
        <rules></rules>
    </ztna>
</forticlient_configuration>
