Technical Tip: Some ZTNA Clients are blocked by FortiGate with Error 'ZTNA tag verification failed – access denied'

Certain Internal Resources access can be restricted only to the Endpoints configured with FortiClients using ZTNA Edition.

However, some clients would be blocked by FortiGate with the message 'ZTNA tag verification failed – access denied'

The following configuration helps in fixing this issue,

config vpn ssl web host-check-software

    edit "FCT-ZTNA"
        config check-item-list
            edit 1
                set target "FortiESNAC.exe"
                set type process
            next
         end
     next
end

Ensure that the process 'FortiESNAC.exe' is running on those End Points being blocked.