<?xml version="1.0" encoding="UTF-8" ?>
<forticlient_configuration generatedby="FCT-7.4.8.2066" policy="" authentication="0CD94984D3C0CEE92A4539A945CD148AB04E575D0C">
    <forticlient_version>7.4.8.2066</forticlient_version>
    <version>7.4.8</version>
    <exported_by_version>7.4.8.2066</exported_by_version>
    <date>2026/08/19</date>
    <partial_configuration>0</partial_configuration>
    <os_version>windows</os_version>
    <os_architecture>x64</os_architecture>
    <system>
        <ui>
            <disable_backup>0</disable_backup>
            <ads>1</ads>
            <flashing_system_tray_icon>1</flashing_system_tray_icon>
            <hide_system_tray_icon>0</hide_system_tray_icon>
            <allow_shutdown_when_registered>0</allow_shutdown_when_registered>
            <suppress_admin_prompt>0</suppress_admin_prompt>
            <lock />
            <password />
            <unreg_pwd />
            <hide_user_info>0</hide_user_info>
            <dont_modify_cookies>0</dont_modify_cookies>
            <culture_code>os-default</culture_code>
            <replacement_messages>
                <quarantine>
                    <title>
                        <title>EncX E772658F656E609E4351FF42E8DB3A247FBB1BE579120D18CA7BC16B83DAF50F032C3C540170FDE643C7DF515266C16280FF91C4C243D40B57803C8B444B4AB1EDC1299787DBE95FB1F5D180D77B</title>
                    </title>
                    <statement>
                        <remediation>EncX 9DE96A53EF85BC41B0183938777EACDCEFC461351A6FFDF9B7D2FCA80EA9C8692CA1BC6E938C</remediation>
                    </statement>
                    <remediation>
                        <remediation>EncX E2AA07803992AF2CB1BC556A2BB66DED64CB2687B8CB837FB993901B972B2911C7A9B5E8D95F6E16E5ED39128B9AB44588729F547C86A95BAF15903044E3C0D0FA2F17A9936F83E2563BEA1F843E3FB6A298A84E64B9F9D9BC5248CC5AC7CE93A6D1E21BF48C6B942C090F03E8AFC4EF031878</remediation>
                    </remediation>
                </quarantine>
            </replacement_messages>
        </ui>
        <installer>
            <allow_admin_uninstall_when_locked>0</allow_admin_uninstall_when_locked>
            <remove_user_data>0</remove_user_data>
        </installer>
        <log_settings>
            <onnet_local_logging>1</onnet_local_logging>
            <level>6</level>
            <log_events>ipsecvpn,sslvpn,scheduler,update,firewall,shield,endpoint,configd</log_events>
            <remote_logging>
                <log_upload_enabled>0</log_upload_enabled>
                <send_software_inventory>1</send_software_inventory>
                <send_os_events>
                    <enabled>1</enabled>
                    <interval>120</interval>
                </send_os_events>
                <send_ms_exch_events>
                    <enabled>1</enabled>
                    <interval>120</interval>
                </send_ms_exch_events>
                <log_upload_server />
                <log_uploadserver_sni />
                <log_upload_ssl_enabled>1</log_upload_ssl_enabled>
                <log_retention_days>90</log_retention_days>
                <log_upload_freq_minutes>60</log_upload_freq_minutes>
                <log_generation_timeout_secs>900</log_generation_timeout_secs>
                <netlog_categories>49</netlog_categories>
                <log_protocol>faz</log_protocol>
            </remote_logging>
        </log_settings>
        <cryptography>
            <drbg_reseed_minutes>0</drbg_reseed_minutes>
        </cryptography>
        <update>
            <use_custom_server>0</use_custom_server>
            <restrict_services_to_regions />
            <restrict_services_to_regions />
            <use_legacy_fdn>0</use_legacy_fdn>
            <ocsp_mode>0</ocsp_mode>
            <allow_legacy_ca>0</allow_legacy_ca>
            <server />
            <port>80</port>
            <timeout>60</timeout>
            <failoverport />
            <fail_over_to_fdn>1</fail_over_to_fdn>
            <use_proxy_when_fail_over_to_fdn>1</use_proxy_when_fail_over_to_fdn>
            <auto_patch>0</auto_patch>
            <submit_virus_info_to_fds>1</submit_virus_info_to_fds>
            <submit_vuln_info_to_fds>1</submit_vuln_info_to_fds>
            <submit_soft_invent_info_to_fds>1</submit_soft_invent_info_to_fds>
            <update_action>notify_only</update_action>
            <scheduled_update>
                <enabled>1</enabled>
                <type>interval</type>
                <daily_at>01:45</daily_at>
                <update_interval_in_hours>1</update_interval_in_hours>
            </scheduled_update>
        </update>
        <certificates>
            <crl>
                <ocsp />
            </crl>
            <hdd />
            <ca />
        </certificates>
    </system>
    <vpn>
        <options>
            <on_os_start_connect />
            <autoconnect_tunnel />
            <failover_delay>0</failover_delay>
            <autoconnect_only_when_epc_state_determined>0</autoconnect_only_when_epc_state_determined>
            <autoconnect_only_when_offnet>0</autoconnect_only_when_offnet>
            <autoconnect_on_install>0</autoconnect_on_install>
            <on_os_start_connect_has_priority>1</on_os_start_connect_has_priority>
            <power_resume_autoconnect_delay>5</power_resume_autoconnect_delay>
            <user_login_autoconnect_delay>0</user_login_autoconnect_delay>
            <keep_running_max_tries>0</keep_running_max_tries>
            <keep_running_delay>0</keep_running_delay>
            <disable_internet_check>0</disable_internet_check>
            <suppress_vpn_notification>0</suppress_vpn_notification>
            <enforce_disabling_smartdns>0</enforce_disabling_smartdns>
            <saml_auth_enable_proxy_server>1</saml_auth_enable_proxy_server>
            <minimize_window_on_connect>1</minimize_window_on_connect>
            <before_logon_saml_auth>1</before_logon_saml_auth>
            <after_logon_saml_auth>0</after_logon_saml_auth>
            <allow_personal_vpns>1</allow_personal_vpns>
            <enable_view_selected_vpns>0</enable_view_selected_vpns>
            <enable_multi_vpn>1</enable_multi_vpn>
            <certs_require_keyspec>0</certs_require_keyspec>
            <disable_connect_disconnect>0</disable_connect_disconnect>
            <secure_remote_access>0</secure_remote_access>
            <show_vpn_before_logon>0</show_vpn_before_logon>
            <vpn_before_logon_style>1</vpn_before_logon_style>
            <use_windows_credentials>1</use_windows_credentials>
            <use_legacy_vpn_before_logon>0</use_legacy_vpn_before_logon>
            <show_negotiation_wnd>0</show_negotiation_wnd>
            <vendor_id />
        </options>
        <sslvpn>
            <options>
                <enabled>1</enabled>
                <prefer_sslvpn_dns>1</prefer_sslvpn_dns>
                <service_port>8053</service_port>
                <dnscache_service_control>0</dnscache_service_control>
                <use_legacy_ssl_adapter>0</use_legacy_ssl_adapter>
                <preferred_dtls_tunnel>0</preferred_dtls_tunnel>
                <block_ipv6>0</block_ipv6>
                <no_dhcp_server_route>0</no_dhcp_server_route>
                <no_dns_registration>0</no_dns_registration>
                <disallow_invalid_server_certificate>0</disallow_invalid_server_certificate>
                <warn_invalid_server_certificate>1</warn_invalid_server_certificate>
                <show_auth_cert_only>0</show_auth_cert_only>
                <show_bubble_notifications>1</show_bubble_notifications>
            </options>
            <connections />
        </sslvpn>
        <ipsecvpn>
            <options>
                <enabled>1</enabled>
                <beep_if_error>0</beep_if_error>
                <usewincert>1</usewincert>
                <use_win_current_user_cert>1</use_win_current_user_cert>
                <use_win_local_computer_cert>1</use_win_local_computer_cert>
                <no_dns_registration>1</no_dns_registration>
                <block_ipv6>1</block_ipv6>
                <uselocalcert>0</uselocalcert>
                <usesmcardcert>1</usesmcardcert>
                <disable_default_route>0</disable_default_route>
                <show_auth_cert_only>0</show_auth_cert_only>
                <disallow_invalid_server_certificate>0</disallow_invalid_server_certificate>
                <check_for_cert_private_key>0</check_for_cert_private_key>
                <enhanced_key_usage_mandatory>0</enhanced_key_usage_mandatory>
                <prefer_ipsecvpn_dns>1</prefer_ipsecvpn_dns>
            </options>
            <connections>
                <connection>
                    <name>AAF</name>
                    <single_user_mode>0</single_user_mode>
                    <machine>0</machine>
                    <type>manual</type>
                    <ui>
                        <show_passcode>0</show_passcode>
                        <show_remember_password>0</show_remember_password>
                        <show_alwaysup>0</show_alwaysup>
                        <show_autoconnect>0</show_autoconnect>
                        <save_username>0</save_username>
                    </ui>
                    <ike_settings>
                        <version>2</version>
                        <implied_SPDO>0</implied_SPDO>
                        <implied_SPDO_timeout>0</implied_SPDO_timeout>
                        <xauth_timeout>0</xauth_timeout>
                        <prompt_certificate>0</prompt_certificate>
                        <description>IPSEC RAVPN</description>
                        <server>vpn2.autoadvance.co.nz</server>
                        <authentication_method>Preshared Key</authentication_method>
                        <auth_data>
                            <preshared_key>EncX B140CD1F32C283C8B7DDFC401518C2D28733F5B0DC2231502ABB3375C4A76496931F6E2CF6B7B38C6F09700D9403EEE87F5E</preshared_key>
                        </auth_data>
                        <azure_auto_login>
                            <azure_app />
                        </azure_auto_login>
                        <dhgroup>21;</dhgroup>
                        <key_life>86400</key_life>
                        <localid />
                        <peerid />
                        <transport_mode>0</transport_mode>
                        <udp_port>500</udp_port>
                        <mode_config>1</mode_config>
                        <enable_local_lan>0</enable_local_lan>
                        <remove_password_for_unexpected_eap_failure>0</remove_password_for_unexpected_eap_failure>
                        <session_resume>0</session_resume>
                        <disconnect_on_network_down>0</disconnect_on_network_down>
                        <childless_mode>0</childless_mode>
                        <cert_subjectcheck>0</cert_subjectcheck>
                        <failover_sslvpn_connection />
                        <block_outside_dns>0</block_outside_dns>
                        <nat_alive_freq>5</nat_alive_freq>
                        <dpd>1</dpd>
                        <dpd_retry_count>3</dpd_retry_count>
                        <dpd_retry_interval>5</dpd_retry_interval>
                        <enable_ike_fragmentation>0</enable_ike_fragmentation>
                        <sso_enabled>1</sso_enabled>
                        <ike_saml_port>10443</ike_saml_port>
                        <use_external_browser>0</use_external_browser>
                        <xauth>
                            <enabled>1</enabled>
                            <prompt_username>1</prompt_username>
                            <username>EncX 68FB96ADBF9F0A4A2EDCE2B89F8115E40E843565</username>
                            <vpn_before_logon>
                                <username_format>username</username_format>
                            </vpn_before_logon>
                            <password />
                        </xauth>
                        <proposals>
                            <proposal>AES128|SHA1</proposal>
                            <proposal>AES256|SHA256</proposal>
                        </proposals>
                    </ike_settings>
                    <ipsec_settings>
                        <remote_networks>
                            <network>
                                <addr>0.0.0.0</addr>
                                <mask>0.0.0.0</mask>
                            </network>
                            <network>
                                <addr>::/0</addr>
                                <mask>::/0</mask>
                            </network>
                        </remote_networks>
                        <ipv4_split_exclude_networks />
                        <dhgroup>21</dhgroup>
                        <key_life_type>seconds</key_life_type>
                        <key_life_seconds>43200</key_life_seconds>
                        <key_life_Kbytes>5120</key_life_Kbytes>
                        <replay_detection>1</replay_detection>
                        <pfs>1</pfs>
                        <use_vip>1</use_vip>
                        <virtualip>
                            <type>modeconfig</type>
                            <ip>0.0.0.0</ip>
                            <mask>0.0.0.0</mask>
                            <dnsserver>0.0.0.0</dnsserver>
                            <winserver>0.0.0.0</winserver>
                        </virtualip>
                        <proposals>
                            <proposal>AES128|SHA1</proposal>
                            <proposal>AES256|SHA256</proposal>
                        </proposals>
                    </ipsec_settings>
                    <on_connect>
                        <script>
                            <delay>3</delay>
                            <os>windows</os>
                            <script>
                                <![CDATA[]]>
                            </script>
                        </script>
                    </on_connect>
                    <on_disconnect>
                        <script>
                            <delay>0</delay>
                            <os>windows</os>
                            <script>
                                <![CDATA[]]>
                            </script>
                        </script>
                    </on_disconnect>
                </connection>
            </connections>
        </ipsecvpn>
        <traffic_control>
            <enabled>0</enabled>
            <enable_local_lan>0</enable_local_lan>
            <mode>0</mode>
            <apps />
            <fqdns />
            <non_exempt_ports />
        </traffic_control>
    </vpn>
    <endpoint_control>
        <enabled>1</enabled>
        <socket_connect_timeouts>1:15</socket_connect_timeouts>
        <system_data>EncX 7199DF1F295C3F604076857C78EEBDD1CEABA0172A7EE2A6D05C48B459DE51CCE2E539675EEDBD5E4AB29F34961EB37238EC26C1667C60113E6A3397449681CE339DF58252B1199CE2</system_data>
        <disable_unregister>0</disable_unregister>
        <invalid_cert_action>warn</invalid_cert_action>
        <disable_fgt_switch>0</disable_fgt_switch>
        <show_bubble_notifications>1</show_bubble_notifications>
        <enable_dns_cache>0</enable_dns_cache>
        <avatar_enabled>1</avatar_enabled>
        <send_software_inventory>0</send_software_inventory>
        <vpn_expiration_time>1789770055</vpn_expiration_time>
        <enable_dem>0</enable_dem>
        <forticloud />
        <ui>
            <display_antivirus>0</display_antivirus>
            <display_webfilter>0</display_webfilter>
            <display_firewall>0</display_firewall>
            <display_vpn>1</display_vpn>
            <display_vulnerability_scan>0</display_vulnerability_scan>
            <display_sandbox>0</display_sandbox>
            <display_ztna>0</display_ztna>
            <display_compliance>1</display_compliance>
        </ui>
        <onnet_addresses>
            <address />
        </onnet_addresses>
        <onnet_mac_addresses>
            <address />
        </onnet_mac_addresses>
        <alerts>
            <notify_server>1</notify_server>
            <alert_threshold>1</alert_threshold>
        </alerts>
        <local_subnets_only>0</local_subnets_only>
        <notification_server />
        <nac>
            <processes>
                <process id="" rule="present">
                    <signature name="" />
                </process>
            </processes>
            <files>
                <path id="" />
            </files>
            <registry>
                <path id="" />
            </registry>
        </nac>
    </endpoint_control>
    <user_configuration>
        <value key="software\Fortinet\FortiClient" name="coreinstalled" type="4" data="1" />
        <value key="software\Fortinet\FortiClient" name="installed" type="4" data="1" />
        <value key="IPSec\Tunnels\AAF" name="show_remember_password" type="4" data="1" />
        <value key="IPSec\Tunnels\AAF" name="SavePass" type="4" data="0" />
        <value key="IPSec\Tunnels\AAF" name="show_alwaysup" type="4" data="1" />
        <value key="IPSec\Tunnels\AAF" name="KeepRunning" type="4" data="0" />
        <value key="IPSec\Tunnels\AAF" name="show_autoconnect" type="4" data="0" />
        <value key="IPSec\Tunnels\AAF\P1" name="promptusername" type="4" data="1" />
        <value key="IPSec\Tunnels\AAF\P1" name="AuthKey" type="1" data="" />
    </user_configuration>
</forticlient_configuration>
