Save password, auto connect, and always up

When an administrator uses EMS to configure a profile for FortiClient, the administrator can configure an IPsec or SSL VPN connection to FortiGate and enable the following features:

Feature	Description
Save Password	Allows the user to save the VPN connection password in FortiClient. Disabling Save Password deselects Auto Connect and Always Up.
Auto Connect	When FortiClient launches, the VPN connection automatically connects. Automatic connection to the VPN tunnel may fail if the endpoint boots up with a user profile set to automatic logon. See Appendix E - VPN autoconnect for configuration examples. Enabling autoconnect enables Save Password. Autoconnect tunnels pushed from EMS have Save Password and Auto Connect enabled and grayed out.
Always Up (keep alive)	When selected, the VPN connection is always up. If the connection fails, possibly due to network errors, FortiClient attempts to reconnect. If credentials (username and password) are saved, FortiClient attempts to reconnect silently. If credentials are insufficient (for instance, multifactor authentication is required or password is not saved), FortiClient prompts for credentials. Enabling always up enables Save Password.

After FortiClient Telemetry connects to EMS, FortiClient receives a profile from EMS that contains IPsec and/or SSL VPN connections to FortiGate. The following example shows an SSL VPN connection named test(1).

If the VPN connection fails, a popup displays to inform you about the connection failure while FortiClient continues trying to reconnect VPN in the background.

Depending on the VPN configuration, the popup may include a Cancel button. If you click the Cancel button, FortiClient stops trying to reconnect VPN.