Hi Chen-san,Sorry to interrupt a conversation like this. It seems that your PGP signature is invalid.
Btw, have you double checked the firewall rules for both input and output between the zones? It's not feasible or practical for TANet to drop/reject packets only with destination port 22 for such a large network.
BR, -- Jing Luo About me: https://jing.rocks/about/ PGP Fingerprint: 4E09 8D19 00AA 3F72 1899 2614 09B3 316E 13A1 1EFC