FortiClient ZTNA Setup Best Practice

Hello,

We are in POC with FortiClient paid version and testing out ZTNA rules for some of our File Servers.

We are finding that users off fabric need to browse to a resource to then enter credentials to gain access to the resource. This is an initial requirement, subsequent access, they are not prompted. 

End users will not know "how" to browse out and will just try to access Network folders or My Documents (which are redirected via GPO). 

Has anyone encountered this with a ZTNA Off-Fabric setup and were you able to come up with a solution to make this more seamless or provide any pointers/best practice for our roll out?

Thank you

Amy