FortiGate Next Generation Firewall utilizes purpose-built security processors and threat intelligence security services from FortiGuard labs to deliver top-rated protection and high performance, including encrypted traffic.
This article describes an important caveat with a setup involving a FortiGate and FortiClient EMS Connector on a Multi-VDOM with a VDOM Partitioning environment.
Scope
FortiGate FortiOS 7.4.0 or below.
Solution
In order to use TAGs for ZTNA traffic on a VDOM with VDOM Partitioning in FortiOS 7.4.0 or below, it is necessary to ensure that the VDOM that implements the TAG is on the same partition (same virtual cluster) as the management VDOM. Otherwise, the VDOM will not be able to retrieve TAG information from FortiClient EMS.
