forticlient managed websecurity on android

Hi,

running v5.6.3

trying to get a managed websecurity profile working on Android device.

Tried unmanaged with Forticlient and works.

Then configured Fortitelemetry on interface, compliance security profile with web security profile (same as used for internal clients). Device then registered with fortigate and then device showed in the Forticlient Monitor page with the Compliance profile named. In Forticlient the web-security shows 'managed' and Telemetry 'registered'. When attempting web connections no enforcement is in place and can access various non-compliant URL categories.

Any ideas what I'm missing?

thanks