This feature supports autorunning a user-defined script after connecting or disconnecting the configured VPN tunnel. The scripts are batch scripts in Windows and shell scripts in macOS. They are defined as part of a VPN tunnel configuration on EMS's XML format FortiClient profile. EMS pushes the profile to FortiClient as part of an endpoint policy. When FortiClient's VPN tunnel is connects or disconnects, the respective script defined under that tunnel is executed.