Go to polices and enabtle the authentication policy

Hi,
To make sure that only those domain devices are allowed and can access the internet while blocking unauthorized devices on your SAngfor NGAF, you may try following these steps:
1.        Ensure that your LAN and WAN are configured correctly
2.        Try assigning the appropriate interfaces to the LAN and WAN zones by going to Network > Interfaces > Zone
3.        Setup access control policies to allow internet access to those domain devices only by navigating to Policies > Access Control > Application Control and use domain ndevice identifiers like IP ranges or specifying MAC addresses
4.        Make sure that only domain devices can access the network by going to Policies > Device Compliance and create compliance policies and bind it to the domain devices using MAC address or unique identifiers
5.        To ensure that only authenticated domain users can access the intern, enable user authentication by going to Policies > User Authentication and configure authentication method to verify domain users
6.        Monitor the network traffic and adjust the policies as required