All Products
Search
Document Center

Secure Access Service Edge:Diagnose issues

Last Updated:Mar 31, 2026

The Secure Access Service Edge (SASE) client includes built-in diagnostic tools that check your network connectivity and application access. Run a network diagnosis to verify that core system components are working correctly, or run an application diagnosis to pinpoint why a specific office application is unreachable.

Prerequisites

Before you begin, ensure that you have:

Run a network diagnosis

Network diagnosis checks the following system components: System Time, Startup Items for SASE, SASE Service, Identity Provider (IdP), Logon Service, Upgrade Service, Service PoP, Proxy Software, Driver Service, 802.1x Root Certificate and Network Access Certificate, Software Conflict, and Key System Component Detection.

Resolve any issues found as soon as possible to avoid disruption to your workloads.

  1. On the Diagnosis page of the SASE client, click the Network Diagnosis tab, and then click Diagnose.

    image

  2. If the results show an issue, use one of the following methods to troubleshoot:

    • Locate the issue: Troubleshoot based on the error code, or click Export Local Logs to review local log files.

    • Submit feedback: Click Report issue. In the Feedback dialog box, describe the issue, enter your email address and phone number, and then click Report. The R&D team will investigate and resolve the issue based on your report.

Run an application diagnosis

If access to an office application is abnormal, application diagnosis checks whether network protection is active for that application's address.

Only TCP is supported for the Protocol parameter.
  1. On the Diagnosis page of the SASE client, click the Application Diagnosis tab, and then configure the App Addr, Port, and Protocol parameters.

  2. Click Diagnose.

    image

  3. After the diagnosis completes, review the issues and recommended solutions in the Diagnosis Result message, and then click Confirm.

What's next