This feature supports auto running a user-defined script after the configured VPN tunnel is connected or disconnected. The scripts are batch scripts in Windows and shell scripts in macOS. They are defined as part of a VPN tunnel configuration on EMS's XML format FortiClient profile. The profile is pushed down to FortiClient from EMS as part of an endpoint policy. When FortiClient's VPN tunnel is connected or disconnected, the respective script defined under that tunnel is executed.