County iPhones are enrolled and compliant in Workspace ONE UEM, but Workspace ONE Access still denies apps with “device not compliant.” Carbon Black Cloud policy is unrelated. What should the security administrator check first?
Select an answer to reveal the explanation.
Short Explanation
UEM can give the iPhone a green sticker while Access still sees last week's red one. Check that compliance is actually syncing into Workspace ONE Access.
Full Explanation
Workspace ONE Access device-compliance decisions depend on a healthy UEM integration that publishes compliance state. A device can be compliant in UEM while Access still denies if that sync is stale or broken. Identity Firewall SSID drops, Carbon Black Cloud sensor groups, and Guest Introspection on phones are not the Access compliance channel.