FortiGate Next Generation Firewall utilizes purpose-built security processors and threat intelligence security services from FortiGuard labs to deliver top-rated protection and high performance, including encrypted traffic.
Article Id 262499
Description This article describes an important caveat with a setup involving a FortiGate and FortiClient EMS Connector on a Multi-VDOM with a VDOM Partitioning environment.
Scope FortiGate FortiOS 7.4.0 or below.

In order to use TAGs for ZTNA traffic on a VDOM with VDOM Partitioning in FortiOS 7.4.0 or below, it is necessary to ensure that the VDOM that implements the TAG is on the same partition (same virtual cluster) as the management VDOM. Otherwise, the VDOM will not be able to retrieve TAG information from FortiClient EMS.


7.4.0 introduced a new feature that allows for the configuration of FortiClient EMS and FortiClient EMS Cloud on a per-VDOM basis. See the 'configuring FortiClient EMS and FortiClient EMS Cloud on a per-VDOM basis' section in the FortiGate... for more information.