FortiGate SSL-VPN

[chethan]

Hello, 

I have a query, A company 'X' need its remote employees having FortiClient installed on their laptops to connect to the company's internal network and backhaul internet traffic as well through FortiGate-100F itself. The employees should not be able to connect to internet if they are not connected to VPN. 

My question is, what if the employees disconnect VPN on their FortiClient app and then try to access internet? The company doesn't want this to happen. i.e., No internet access if they are not connected to VPN via FortiClient app.

How can the above problem be solved?

[lobstercreed]

Do you have the full version of FortiClient EMS?  What you're asking isn't possible without it.  I imagine it's possible with it, though it seems unnecessary if the profiles are configured properly (locked down, logged, etc) on the FortiClient.

[chethan]

Yes, Full version of FortiClient EMS is available.