Hi All,
My device classification policy matches when all three criteria are met...
There are a lot of users complaining that they can't access ZTNA, so I checked and they're unmanaged...
I fixed it by pushing an update to the client and restarting the service/computer. It's probably not possible to do it every few days for users
what is can be the root cause of pull users out from device classification policy.