Problem with sync EMS to Fortigate ZTNA Tags

Forum|Forum|2 years ago
March 21, 2024
2 replies
2036 views

Versions:
FG 7.2.8, EMS 7.2.4 and Client 7.24.

The Tags are only synced when I run Enable/Disable the EMS Fabric or by running this CLI:
diagnose test application fcnacd 99

Even TAGS aren't Matched with Endpoints in the Fortigate, but in EMS and Forticlient it's being tagged.
When I run the CLI then it's being tagged to the client.

ozkanaltas

Valued Contributor III

Hello @aproost ,

This problem is annoying, I've experienced it many times. I created two workaround solutions for this.

The first is, if you are using fortianalyzer, to put it behind ztna and then have the clients send logs to fortianalyzer with this ip. Since this triggers the ztna connection, it wakes up the service and allows it to synchronize client IP addresses.

The second is to ensure that the command that resets the service runs at certain intervals within automation. This is not a method I recommend because the more it happens, the more burden it will be. So if you choose the second method, keep the frequency high.