Exhibit.

For on-fabric clients to access FortiAnalyzer using ZTNA tags, the following conditions must be met:

A. The on-fabric client should have FortiGate as its default gateway: This is essential to ensure that all client traffic is routed through FortiGate, where ZTNA policies can be enforced.

B. The ZTNA server must be configured on FortiGate: For ZTNA tags to be effectively used, the ZTNA server, which processes and enforces these tags, must be configured on the FortiGate appliance.

References :=

Configuring ZTNA tags and tagging rules

Synchronizing FortiClient ZTNA tags

FortiAnalyzer

Technical Tip: ZTNA Tags fail to synchronize between FortiClient and FortiGate