I see. I would suggest you turn on session tracing from NCM Settings.
Login to the NCM server, and launch the Network Configuration Manager Win32 app, browse to the Netscreen device and click on the Action > Validate login information button. That should provide a bit more detail
You will also find a Session-Trace folder under Orion\NCM installation directory. The latest file in there should shed some light as well.