Monitor and Troubleshoot the Zero Trust Access App from Mobile Devices

This topic applies to client-based zero trust access connections from iOS devices and Samsung devices running Android operating systems.

Monitor Activity

After a mobile device begins to access private resources, you can monitor that activity:

• To view details about the enrolled device including, app version, client version and sync / enrollment dates:
  Navigate to Connect > Users and Groups page and click the user enrolled in the mobile app.
• To view access logs:
  Navigate to Monitor > Activity Search. To filter the view, click on ‘ZTNA client-based' on the top right side of the table and select an appropriate time window.
  • iOS access logs will have ‘apple-ios’ in the OS column.
  • Android access logs will have 'samsung-android' in the OS column.

General Troubleshooting

Make sure the device is running a supported and permitted operating system, as configured in the endpoint posture profile configured in the applicable access rule.

Troubleshoot iOS Devices

To troubleshoot enrolled iOS devices:

• Confirm that the Zero Trust Access relay configuration was added:
  • On the device, go to Settings > VPN & Relays.
  • In the Per-App Relays section, Zero Trust displays.
  • To view information about the Zero Trust relay configuration, click the (i) icon. 
• Confirm that Zero Trust Access logs are available:
  • In the Zero Trust Access application, go to Settings.
  • Choose Troubleshooting.
• Confirm that the sync configurations and user unenrollment page displays:
  • In the Zero Trust Access application, click the status frame.

Troubleshoot Samsung Devices Running Android OS

• To send logs from the Android device:
  From the home screen, tap Settings > Send Logs
• To enable verbose logging:
  From the home screen, tap Settings, enable verbose logging, and restart the device.
• To sync configurations:
  From the home screen, tap 'You’re enrolled’ > ‘Sync now’
• To unenroll the user:
  From the home screen, tap 'You’re enrolled’ > ‘Unenroll’
• To view ZTA statistics:
  From the home screen, tap 'You’re enrolled’ and scroll to the ‘General’ section
• If a Cisco support representative requests certificate information:
  From the home screen, tap 'You’re enrolled’ and scroll to ‘Certificate’ section

Set up the Zero Trust Access App for Android on Samsung Devices Devices < Monitor and Troubleshoot the Zero Trust Access App from Mobile Devices > Get Started with Cisco Secure Client on Windows and macOS Devices