[Cyber Command] Token error message when NTA301y is linked to NGAF
Problem Description
When NTA 3.0.1y is connected to NGAF and NGAF is linked to issue a blockade, a token error is prompted, resulting in the inability to Correlated Block:

Effective troubleshooting steps
- Check the linkage test of NGAF and the two-way authentication test is normal:

2. After deleting it on Cyber Command, it still fails to link successfully when re-linking to NGAF:
- Check and find that the Cyber Command interface is configured with multiple addresses:

Root cause
The NTA interface is configured with multiple addresses. The first address is used when the linkage policy is executed, causing NGAF to be judged as unauthorized.
solution
Modify the NTA interface address and put the address of the NGAF upstream linkage in the first place;
Operation Impact Scope
This will cause the NTA network to be re-issued, which may cause Cyber Command fluctuations and cause the linked devices to be temporarily Offline. Please communicate with the customer before proceeding.
Original Link
https://support.sangfor.com.cn/cases/list?product_id=24&type=1&category_id=9978&isOpen=true