Troubleshooting Tip: Endpoints not tagged by 'CrowdStrike ZTA Score' ZTNA tag rule

[btan]

Description	This article describes how to troubleshoot the issue with endpoints not tagged by the 'CrowdStrike ZTA Score' ZTNA tag rule.
Scope	FortiClient EMS v7.4.1 onwards.
Solution	In FortiClient EMS, create a ZTNA tag rule based on 'CrowdStrike ZTA Score'. In the above example, endpoints should get tagged with the '[CS-ZTA]' tag if their ZTA Score is lower than 80. However, in some cases, endpoints are not being tagged even though their ZTA Score is lower than 80. To troubleshoot this: Go to the affected endpoint, navigate to C:\ProgramData\CrowdStrike\ZeroTrustAssessment\ There should be data.zta JSON file in this folder path. FortiClient will read this data.zta JSON file to retrieve CrowdStrike ZTNA Score. If the data.zta file is missing or it is blank (0KB), contact CrowdStrike Support and query why it is missing/blank.