ineffective device policy

[idirim]

hi all, as shown in the image the device identity based policy is not working, however i am quite sure it was working when i made it months ago. i have checked the device definition objects, recreated them, recreated the policy but nothing seems to work. i would like to ask if anyone encountered such an issue or can give me some advice before i factory reset the box and hope for a mysterious resolution. 

*fgt 60d v5.2.1

[emnoc]

The diag debug flow  is your best friend

Did  you run?

Are you matching the policy suspected?

If yes, what's the output?

I would run that 1st and reverify the user/groups but the diag debug flow is your  very best friend.