ZTNA for Android

[AllanKakuhama]

I have a requirement to use ZTNA (Zero Trust Network Access) on Android devices. The devices need to communicate with some printers on the corporate network. We have already set up the ZTNA Destinations, policies, and groups, but communication doesn't work on Android devices. However, when we test it on Windows, the communication functions properly. Could you let me know if ZTNA has any compatibility issues with the Android system?

[ozkanaltas · Accepted solution]

Hello @AllanKakuhama ,

Regarding this document, ZTNA features aren't supported on Android devices. 

https://www.fortinet.com/products/endpoint-security/forticlient#models-specs

https://docs.fortinet.com/document/forticlient/7.2.0/android-administration-guide/996706/features

[Simon7]

Then why is it even possible to configure ZTNA for Android in EMS? And Android shows the ZTNA telemetry service as "running"?

[ozkanaltas]

Hello @Simon7 ,

ZTNA telemetry service and ZTNA Remote access service are different things. 

With ZTNA telemetry service, you can follow your Android client status. And you can give a ztna tag to these Android clients. After that, you can use these tags on your firewall policy for conditional access (For example, ssl-vpn rules). 

But with ZTNA remote access service, you can access your internal resources without any ssl-vpn or local connection. Because of that, these are different things. 

[Simon7]

Great information, I did not understand it in that way. Much appreciated, thanks!

[gllgeorgiev1]

Just create MAC based policies.