Technical tip: Troubleshooting FortiClient EMS classification tag synchronization failures

Description

This article describes how to troubleshoot a classification tag sync failure.

Scope

 FortiClient EMS.

Solution

In some cases, it may be necessary to use classification tags for endpoints in FortiClient EMS.

After creation, it can be verified that some of the TAGs were not shared with the FortiGate.

The main reasons for this could be:

1. The Fabric connector configuration in FortiClient EMS does not have the classification tag sharing option configured:
   
   

   

   
   Therefore, review this configuration by navigating to Fabric & Connectors -> Fabric Devices to enable the Classification Tags tag type.
   
   

2. The classification tag contains prohibited characters:
   
   

   

   
   Due to restrictions on the use of certain characters in FortiGate objects, an object will not be created on the FortiGate if, for example, a tag containing parentheses is created. This means the tag will not be synchronized to the FortiGate.
   

   If a classification tag contains disallowed characters, it will be necessary to delete and recreate the tag. Avoid using characters such as '<>()#"'', opting instead for '+', '-', or '_' to ensure the tag is shared successfully.