<?xml version="1.0" encoding="UTF-8" ?>
<forticlient_configuration generatedby="FCT-6.2.6.0951" policy="">
    <forticlient_version>6.2.6.0951</forticlient_version>
    <version>6.2.6</version>
    <exported_by_version>6.2.6.0951</exported_by_version>
    <date>2020/10/27</date>
    <partial_configuration>0</partial_configuration>
    <os_version>windows</os_version>
    <os_architecture>x64</os_architecture>
    <system>
        <ui>
            <disable_backup>0</disable_backup>
            <ads>1</ads>
            <flashing_system_tray_icon>1</flashing_system_tray_icon>
            <hide_system_tray_icon>0</hide_system_tray_icon>
            <suppress_admin_prompt>0</suppress_admin_prompt>
            <password />
            <hide_user_info>0</hide_user_info>
            <culture_code>os-default</culture_code>
            <replacement_messages>
                <quarantine>
                    <title>
                        <title>
                            <![CDATA[Enc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
                        </title>
                    </title>
                    <statement>
                        <remediation>
                            <![CDATA[EncX 6CA06F25C4E91C4EEA152CA346F95F1B30E7096907885AD07A12A40812471A53E071028AE15BB7896C16DF2F725449C9205DE808810F37F95F7ECFB0D1343601ECDD65835E2280F502D23B1CE5BD740D7A42D28B49F23B84984DD787280D4E9A4DA8C3269A3D0D5A15CB1115CE7279F86AB2771E183FCBC248CE71861BF9E55F93A3ADA522FFABD20B36D46B00F46664732673FED3716CE22FABA4D7A08B45DD43B111948D56A898FF89F49A548852E02AF63B2BF8F282A8A2605FE34B9B6A8B1FE21511F29A97B781F43DCA161135EB15489BB07F90F9678E7EF740675537AFFE200D]]>
                        </remediation>
                    </statement>
                    <remediation>
                        <remediation>
                            <![CDATA[Enc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
                        </remediation>
                    </remediation>
                </quarantine>
            </replacement_messages>
        </ui>
        <log_settings>
            <onnet_local_logging>1</onnet_local_logging>
            <level>6</level>
            <log_events>ipsecvpn,sslvpn,scheduler,update,shield,configd</log_events>
            <remote_logging>
                <log_upload_enabled>0</log_upload_enabled>
                <send_software_inventory>1</send_software_inventory>
                <log_upload_server />
                <log_upload_ssl_enabled>1</log_upload_ssl_enabled>
                <log_retention_days>90</log_retention_days>
                <log_upload_freq_minutes>60</log_upload_freq_minutes>
                <log_generation_timeout_secs>900</log_generation_timeout_secs>
                <netlog_categories>7</netlog_categories>
                <log_protocol>faz</log_protocol>
            </remote_logging>
        </log_settings>
        <proxy>
            <update>0</update>
            <online_scep>0</online_scep>
            <type>http</type>
            <address />
            <port>80</port>
            <username>
                <![CDATA[Enc b3acee2eb1828c00f87ec1f6df82ac3d12eaea007fbf28c32d162e3daaac467ec4f1e82579d3b1d3a5fec9a82504cdd2d75f03568e5a9446789f0387258121b0594d58d385]]>
            </username>
            <password>
                <![CDATA[Enc b5dbc822decc6f4f6ac066c14f4a3e40577b76ddca87b023d06a3ef77050a158e667b01d645f4529378a06baf08cd485064138216e70455a0d223d0fa0396828e4cfc14dbd]]>
            </password>
        </proxy>
        <update>
            <use_custom_server>0</use_custom_server>
            <restrict_services_to_regions />
            <use_legacy_fdn>0</use_legacy_fdn>
            <ocsp_mode>0</ocsp_mode>
            <server />
            <port>80</port>
            <timeout>60</timeout>
            <failoverport />
            <fail_over_to_fdn>1</fail_over_to_fdn>
            <use_proxy_when_fail_over_to_fdn>1</use_proxy_when_fail_over_to_fdn>
            <auto_patch>0</auto_patch>
            <submit_virus_info_to_fds>1</submit_virus_info_to_fds>
            <submit_vuln_info_to_fds>1</submit_vuln_info_to_fds>
            <update_action>notify_only</update_action>
            <scheduled_update>
                <enabled>1</enabled>
                <type>interval</type>
                <daily_at>06:52</daily_at>
                <update_interval_in_hours>6</update_interval_in_hours>
            </scheduled_update>
        </update>
        <fortiproxy>
            <enabled>0</enabled>
            <enable_https_proxy>1</enable_https_proxy>
            <http_timeout>60</http_timeout>
            <client_comforting>
                <pop3_client>1</pop3_client>
                <pop3_server>1</pop3_server>
                <smtp>1</smtp>
            </client_comforting>
            <selftest>
                <enabled>1</enabled>
                <last_port>65535</last_port>
                <notify>1</notify>
            </selftest>
        </fortiproxy>
        <certificates>
            <crl>
                <ocsp>
                    <enabled>0</enabled>
                    <server />
                    <port />
                </ocsp>
            </crl>
            <hdd />
            <ca />
        </certificates>
    </system>
    <vpn>
        <options>
            <autoconnect_tunnel />
            <autoconnect_only_when_offnet>0</autoconnect_only_when_offnet>
            <keep_running_max_tries>0</keep_running_max_tries>
            <disable_internet_check>0</disable_internet_check>
            <suppress_vpn_notification>0</suppress_vpn_notification>
            <minimize_window_on_connect>1</minimize_window_on_connect>
            <allow_personal_vpns>1</allow_personal_vpns>
            <disable_connect_disconnect>0</disable_connect_disconnect>
            <show_vpn_before_logon>0</show_vpn_before_logon>
            <use_windows_credentials>1</use_windows_credentials>
            <use_legacy_vpn_before_logon>0</use_legacy_vpn_before_logon>
            <show_negotiation_wnd>0</show_negotiation_wnd>
            <vendor_id />
        </options>
        <sslvpn>
            <options>
                <enabled>1</enabled>
                <prefer_sslvpn_dns>1</prefer_sslvpn_dns>
                <dnscache_service_control>0</dnscache_service_control>
                <use_legacy_ssl_adapter>0</use_legacy_ssl_adapter>
                <preferred_dtls_tunnel>0</preferred_dtls_tunnel>
                <block_ipv6>0</block_ipv6>
                <no_dhcp_server_route>0</no_dhcp_server_route>
                <no_dns_registration>0</no_dns_registration>
                <disallow_invalid_server_certificate>0</disallow_invalid_server_certificate>
            </options>
            <connections />
        </sslvpn>
        <ipsecvpn>
            <options>
                <enabled>1</enabled>
                <beep_if_error>0</beep_if_error>
                <usewincert>1</usewincert>
                <use_win_current_user_cert>1</use_win_current_user_cert>
                <use_win_local_computer_cert>1</use_win_local_computer_cert>
                <block_ipv6>1</block_ipv6>
                <uselocalcert>0</uselocalcert>
                <usesmcardcert>1</usesmcardcert>
                <enable_udp_checksum>0</enable_udp_checksum>
                <disable_default_route>0</disable_default_route>
                <show_auth_cert_only>0</show_auth_cert_only>
                <check_for_cert_private_key>0</check_for_cert_private_key>
                <enhanced_key_usage_mandatory>0</enhanced_key_usage_mandatory>
            </options>
            <connections>
                <connection>
                    <name>General Strath VPN oct2020 1.2</name>
                    <single_user_mode>0</single_user_mode>
                    <type>manual</type>
                    <ui>
                        <show_passcode>0</show_passcode>
                        <show_remember_password>0</show_remember_password>
                        <show_alwaysup>0</show_alwaysup>
                        <show_autoconnect>0</show_autoconnect>
                        <save_username>0</save_username>
                    </ui>
                    <ike_settings>
                        <version>1</version>
                        <implied_SPDO>0</implied_SPDO>
                        <implied_SPDO_timeout>0</implied_SPDO_timeout>
                        <xauth_timeout>0</xauth_timeout>
                        <prompt_certificate>0</prompt_certificate>
                        <description />
                        <server>vpn.strath.ac.uk</server>
                        <authentication_method>Preshared Key</authentication_method>
                        <auth_data>
                            <preshared_key>Enc 69acd97464d6acfb2e058a92c7996fb46995c5e6d9d6d8c0005da0264fccaea2eb9409fa3f642f844ced</preshared_key>
                        </auth_data>
                        <mode>aggressive</mode>
                        <dhgroup>5;</dhgroup>
                        <key_life>86400</key_life>
                        <localid />
                        <peerid />
                        <nat_traversal>1</nat_traversal>
                        <mode_config>1</mode_config>
                        <enable_local_lan>0</enable_local_lan>
                        <nat_alive_freq>5</nat_alive_freq>
                        <dpd>1</dpd>
                        <dpd_retry_count>3</dpd_retry_count>
                        <dpd_retry_interval>5</dpd_retry_interval>
                        <enable_ike_fragmentation>0</enable_ike_fragmentation>
                        <xauth>
                            <enabled>1</enabled>
                            <prompt_username>1</prompt_username>
                            <username>Enc 42b61a836c429f7ce96030373edc7f275f516a670814bcd3</username>
                            <password />
                        </xauth>
                        <proposals>
                            <proposal>AES128|SHA1</proposal>
                            <proposal>AES256|SHA256</proposal>
                        </proposals>
                    </ike_settings>
                    <ipsec_settings>
                        <remote_networks>
                            <network>
                                <addr>0.0.0.0</addr>
                                <mask>0.0.0.0</mask>
                            </network>
                            <network>
                                <addr>::/0</addr>
                                <mask>::/0</mask>
                            </network>
                        </remote_networks>
                        <dhgroup>5</dhgroup>
                        <key_life_type>seconds</key_life_type>
                        <key_life_seconds>43200</key_life_seconds>
                        <key_life_Kbytes>5120</key_life_Kbytes>
                        <replay_detection>1</replay_detection>
                        <pfs>1</pfs>
                        <use_vip>1</use_vip>
                        <virtualip>
                            <type>modeconfig</type>
                            <ip>0.0.0.0</ip>
                            <mask>0.0.0.0</mask>
                            <dnsserver>0.0.0.0</dnsserver>
                            <winserver>0.0.0.0</winserver>
                        </virtualip>
                        <proposals>
                            <proposal>AES128|SHA1</proposal>
                            <proposal>AES256|SHA1</proposal>
                        </proposals>
                    </ipsec_settings>
                    <on_connect>
                        <script>
                            <os>windows</os>
                            <script>
                                <![CDATA[]]>
                            </script>
                        </script>
                    </on_connect>
                    <on_disconnect>
                        <script>
                            <os>windows</os>
                            <script>
                                <![CDATA[]]>
                            </script>
                        </script>
                    </on_disconnect>
                </connection>
                <connection>
                    <name>Strathclyde VPN dev.role v1.2</name>
                    <single_user_mode>0</single_user_mode>
                    <type>manual</type>
                    <ui>
                        <show_passcode>0</show_passcode>
                        <show_remember_password>0</show_remember_password>
                        <show_alwaysup>0</show_alwaysup>
                        <show_autoconnect>0</show_autoconnect>
                        <save_username>0</save_username>
                    </ui>
                    <ike_settings>
                        <version>1</version>
                        <implied_SPDO>0</implied_SPDO>
                        <implied_SPDO_timeout>0</implied_SPDO_timeout>
                        <xauth_timeout>0</xauth_timeout>
                        <prompt_certificate>0</prompt_certificate>
                        <description />
                        <server>vpn.strath.ac.uk</server>
                        <authentication_method>Preshared Key</authentication_method>
                        <auth_data>
                            <preshared_key>Enc 8328e74438347ded05f0ef4a927483a9c45f172982ca51c8458828434cb6</preshared_key>
                        </auth_data>
                        <mode>aggressive</mode>
                        <dhgroup>19;</dhgroup>
                        <key_life>86400</key_life>
                        <localid>strathdevrole</localid>
                        <peerid />
                        <nat_traversal>1</nat_traversal>
                        <mode_config>1</mode_config>
                        <enable_local_lan>0</enable_local_lan>
                        <nat_alive_freq>5</nat_alive_freq>
                        <dpd>1</dpd>
                        <dpd_retry_count>3</dpd_retry_count>
                        <dpd_retry_interval>5</dpd_retry_interval>
                        <enable_ike_fragmentation>0</enable_ike_fragmentation>
                        <xauth>
                            <enabled>1</enabled>
                            <prompt_username>1</prompt_username>
                            <username>Enc e51041b44102298d64812c8e940436fb38c767ea8192edc8</username>
                            <password />
                        </xauth>
                        <proposals>
                            <proposal>AES128|SHA256</proposal>
                            <proposal>AES256|SHA256</proposal>
                        </proposals>
                    </ike_settings>
                    <ipsec_settings>
                        <remote_networks>
                            <network>
                                <addr>0.0.0.0</addr>
                                <mask>0.0.0.0</mask>
                            </network>
                            <network>
                                <addr>::/0</addr>
                                <mask>::/0</mask>
                            </network>
                        </remote_networks>
                        <dhgroup>19</dhgroup>
                        <key_life_type>seconds</key_life_type>
                        <key_life_seconds>43200</key_life_seconds>
                        <key_life_Kbytes>5120</key_life_Kbytes>
                        <replay_detection>1</replay_detection>
                        <pfs>1</pfs>
                        <use_vip>1</use_vip>
                        <virtualip>
                            <type>modeconfig</type>
                            <ip>0.0.0.0</ip>
                            <mask>0.0.0.0</mask>
                            <dnsserver>0.0.0.0</dnsserver>
                            <winserver>0.0.0.0</winserver>
                        </virtualip>
                        <proposals>
                            <proposal>AES128|SHA256</proposal>
                            <proposal>AES256|SHA256</proposal>
                        </proposals>
                    </ipsec_settings>
                    <on_connect>
                        <script>
                            <os>windows</os>
                            <script>
                                <![CDATA[]]>
                            </script>
                        </script>
                    </on_connect>
                    <on_disconnect>
                        <script>
                            <os>windows</os>
                            <script>
                                <![CDATA[]]>
                            </script>
                        </script>
                    </on_disconnect>
                </connection>
            </connections>
        </ipsecvpn>
    </vpn>
</forticlient_configuration>
