This feature supports autorunning a user-defined script after connecting or disconnecting the configured VPN tunnel. The scripts are batch scripts in Windows and shell scripts in macOS. They are defined as part of a VPN tunnel configuration on EMS's XML format FortiClient profile. The profile is pushed down to FortiClient from EMS as part of an endpoint policy. When FortiClient's VPN tunnel is connected or disconnected, the respective script defined under that tunnel is executed.