You have a ProxySG or Advanced Secure Gateway (ASG) which is unable to join the Windows domain for authentication.

ProxySG or ASG does not authenticate to the domain.

The general approach to gathering data for solving issues with the ProxySG or ASG not being able to join the domain is outlined in this article

Troubleshoot intermittent IWA Direct problems.

Current known issues with the ProxySG or ASG joining the domain:

• Unable to join ProxySG or ASG to domain with error "NERR_DCNotFound"
• Error: "LDAP constraint violation" when trying to join a Windows Domain
• When joining a Windows Domain with the ProxySG or ASG fails with error: "ERROR_PRIVILEGE_NOT_HELD"
• Joining the ProxySG to the Windows domain fails with insufficient access for user, error message
• Why rejoin operation is necessarily after restoring an archived configuration without error?