Endian clients do not join the AD domain

[Guest]

[rfeitosa]

Dear colleagues, greetings.
I am using EFW with authentication in AD. Clients enter the network domain only if they have logged in directly.
If it is the first access, it always gives the domain is not accessible.
When a user logs in (if the credentials have already been used on the machine) everything works. Sites are accessed only through access policies, use the network file server, and so on.
I have already released all the ports in FW that the tutorials indicate to allow logon.
The network that is like RED is the internal of the organization and where is the DC, even provides access to Internet. GREEN is a 192 network with DHCP created in Endian on which multiple clients are connected.
What is missing for users to log in? Why does the domain appear as inaccessible?
Thank you very much in advance.
Rubens.