Fortigate iPhone IPsec VPN Setup

I’m running a Fortigate 400E on firmware v7.2.12 (Build 1761). An IPsec tunnel is already in place for Android handsets and is performing flawlessly, but our iPhone users still can’t connect. I’d like you to create the corresponding IPsec profile, test it on current iOS versions and provide concise deployment instructions for end-users.

I don’t have special demands on cipher suites or authentication beyond Fortinet’s defaults, yet I’m open to your best-practice advice. Likewise, I’m undecided about split-tunnelling: please explain the pros and cons in our environment and apply the option you recommend. Once connected, users should enjoy full access to the internal network exactly as our Android profile allows.

Deliverables
• Fortigate CLI / GUI configuration steps (ready to paste or apply)
• Tested connection from at least one iPhone (screenshot or log excerpt)
• Short user guide for additional staff phones
• Brief note on split-tunnel recommendation and any follow-up adjustments

Everything must remain compatible with the existing firewall rules and the 7.2.12 feature set.