The Secure Access Service Edge (SASE) client includes built-in diagnostic tools that check your network connectivity and application access. Run a network diagnosis to verify that core system components are working correctly, or run an application diagnosis to pinpoint why a specific office application is unreachable.
Prerequisites
Before you begin, ensure that you have:
Installed and logged on to the SASE client. For more information, see Install and log on to the SASE client.
Enabled network protection, if you need the private access feature. For more information, see Enable network protection for private access.
Run a network diagnosis
Network diagnosis checks the following system components: System Time, Startup Items for SASE, SASE Service, Identity Provider (IdP), Logon Service, Upgrade Service, Service PoP, Proxy Software, Driver Service, 802.1x Root Certificate and Network Access Certificate, Software Conflict, and Key System Component Detection.
Resolve any issues found as soon as possible to avoid disruption to your workloads.
On the Diagnosis page of the SASE client, click the Network Diagnosis tab, and then click Diagnose.

If the results show an issue, use one of the following methods to troubleshoot:
Locate the issue: Troubleshoot based on the error code, or click Export Local Logs to review local log files.
Submit feedback: Click Report issue. In the Feedback dialog box, describe the issue, enter your email address and phone number, and then click Report. The R&D team will investigate and resolve the issue based on your report.
Run an application diagnosis
If access to an office application is abnormal, application diagnosis checks whether network protection is active for that application's address.
Only TCP is supported for the Protocol parameter.
On the Diagnosis page of the SASE client, click the Application Diagnosis tab, and then configure the App Addr, Port, and Protocol parameters.
Click Diagnose.

After the diagnosis completes, review the issues and recommended solutions in the Diagnosis Result message, and then click Confirm.
What's next
To export client logs for deeper troubleshooting, see Export logs.
For a full list of network diagnosis error codes and their solutions, see Network diagnosis-related error codes of the SASE client.