Agent Error Codes

200000 - Target Firewall Not Connected to Panorama

This error occurs when the Knocknoc agent attempts to refresh an External Dynamic List (EDL) on a...

200050 - Username Mapping Failed

Agent error code #200050 occurs when the Knocknoc agent attempts to map a username to an IP addre...

200100 - Failed to Check if Address Exists

Agent error code #200100 indicates that the Knocknoc agent was unable to verify whether an addres...

200101 - Failed to Create Address Object

Agent error code #200101 indicates that the Knocknoc agent was unable to create an address object...

200102 - Failed to Get Address Group Members

This error indicates that the Knocknoc agent was unable to retrieve the current members of an add...

200103 - Failed to Add Address to Group

Agent error code #200103 indicates that the Knocknoc agent was unable to update an address group ...

200105 - Failed to Remove Address from Address Group

This error indicates that the Knocknoc agent was unable to update an address group on the Palo Al...

200106 - Failed to Delete Address Object

This error indicates that the Knocknoc agent was unable to delete an address object from the Palo...

201002 - Password Change Required

Agent error code #201002 indicates that the SonicWall firewall requires the API user's password t...

201003 - User Not Enabled for API Access

Agent error code #201003 indicates that the SonicWall user account authenticated successfully, bu...

201100 - Failed to Check if Address Exists

Agent error code #201100 indicates that the Knocknoc agent was unable to verify whether an addres...

201101 - Failed to Create Address Object

Agent error code #201101 indicates that the Knocknoc agent was unable to create an address object...

201102 - Failed to Delete Address Object

Agent error code #201102 indicates that the Knocknoc agent was unable to delete an address object...

201150 - Failed to Get Address Group

Agent error code #201150 indicates that the Knocknoc agent was unable to retrieve an address grou...

201151 - Failed to Update Address Group

Agent error code #201151 indicates that the Knocknoc agent was unable to update an address group ...

201200 - Failed to Push Changes

Agent error code #201200 indicates that the Knocknoc agent was unable to commit pending changes t...

202000 - Failed to Connect to Fortinet Device

Agent error code #202000 indicates that the agent could not establish a connection to the Fortine...

202001 - Fortinet Authentication Failed

Agent error code #202001 indicates that the agent was unable to authenticate with a Fortinet devi...

202002 - Fortinet Authorization Failed

Agent error code #202002 indicates that the agent authenticated successfully with the Fortinet de...

202003 - Fortinet TLS/SSL Certificate Error

Agent error code #202003 indicates that the agent could not establish a secure connection to the ...

202004 - Fortinet Connection Timed Out

Agent error code #202004 indicates that the agent attempted to connect to the Fortinet device but...

202050 - Failed to Update Trusted Host

Agent error code #202050 indicates that the agent could not update the trusted host entry on a Fo...

202051 - Admin User Not Found on FortiManager

Agent error code #202051 indicates that the agent attempted to update a trusted host entry for a ...

202100 - Failed to Push Dynamic Entry to FortiGates

Agent error code #202100 indicates that the agent could not push a dynamic entry (IP address add ...

202101 - Target Device or Group Not Found

Agent error code #202101 indicates that the agent attempted to push a dynamic entry to FortiGates...

202102 - External Feed Name Not Found on Target FortiGates

Agent error code #202102 indicates that the agent pushed a dynamic entry update to the target For...

202150 - Invalid or Unexpected Response from Fortinet Device

Agent error code #202150 indicates that the Fortinet device returned a response that the agent co...

203000 - Failed to Connect to GCP API

Agent error code #203000 indicates that the agent could not communicate with the Google Cloud Pla...

203001 - GCP Authentication Failed

Agent error code #203001 indicates that the GCP API rejected the credentials provided by the agen...

203002 - GCP Authorization Failed

Agent error code #203002 indicates that the agent authenticated successfully with GCP, but the se...

203003 - GCP API Connection Timed Out

Agent error code #203003 indicates that the agent's request to the GCP Compute Engine API timed o...

203050 - Failed to Get VPC Firewall Rule

Agent error code #203050 indicates that the agent could not retrieve the VPC firewall rule from G...

203051 - Failed to Update VPC Firewall Rule

Agent error code #203051 indicates that the agent could not update (patch) the VPC firewall rule ...

203100 - Failed to Get Cloud Armor Security Policy Rule

Agent error code #203100 indicates that the agent could not retrieve the Cloud Armor security pol...

203101 - Failed to Update Cloud Armor Security Policy Rule

Agent error code #203101 indicates that the agent could not update (patch) the Cloud Armor securi...

203150 - Update Failed After Retries (Fingerprint Conflict)

Agent error code #203150 indicates that the agent attempted to update a GCP resource multiple tim...

203151 - GCP Resource Not Found

Agent error code #203151 indicates that the GCP API returned HTTP 404 (Not Found) when the agent ...

205001 - Failed to Read Nginx ACL File

Agent error code #205001 means the agent encountered a filesystem error while reading the nginx a...

205002 - Failed to Write Nginx ACL File

Agent error code #205002 means the agent could not rewrite the nginx allow/deny include file. The...

205050 - Failed to Reload Nginx

Agent error code #205050 means the agent ran sudo -n nginx -s reload after editing the include fi...

PFS000 - Failed to Connect to pfSense

Agent error code #PFS000 indicates that the agent could not reach the pfSense REST API at all. Th...

PFS001 - pfSense Authentication Failed

Agent error code #PFS001 indicates that the pfSense REST API rejected the credentials provided by...

PFS002 - pfSense Authorization Failed

Agent error code #PFS002 indicates that the agent authenticated to pfSense successfully but the A...

PFS003 - pfSense TLS/SSL Certificate Error

Agent error code #PFS003 indicates that the agent could not verify the TLS certificate presented ...

PFS004 - pfSense Connection Timed Out

Agent error code #PFS004 indicates that a pfSense API call did not complete within the agent's ti...

PFS005 - pfSense REST API Package Not Installed

Agent error code #PFS005 indicates that the agent connected to pfSense successfully but the pfRes...

PFS100 - Failed to Get pfSense Alias

Agent error code #PFS100 indicates that the request to read the alias from pfSense failed. This l...

PFS101 - Failed to Create pfSense Alias

Agent error code #PFS101 indicates that the agent attempted to create a new alias on pfSense (bec...

PFS102 - Failed to Update pfSense Alias

Agent error code #PFS102 indicates that the agent attempted to update an existing alias on pfSens...

PFS103 - pfSense Alias Not Found

Agent error code #PFS103 indicates that the alias name configured in the Knocknoc ACL does not ex...

PFS200 - Failed to Apply Pending pfSense Firewall Changes

Agent error code #PFS200 indicates that the alias was updated successfully but the subsequent app...

PFS400 - Invalid or Unexpected Response from pfSense

Agent error code #PFS400 indicates that the agent received a response from pfSense that it could ...

OPN000 - OPNsense Authentication Failed

Agent error code #OPN000 indicates that the OPNsense API rejected the credentials provided by the...

OPN001 - OPNsense Authorization Failed

Agent error code #OPN001 indicates that the agent authenticated with OPNsense successfully, but t...

OPN002 - OPNsense Request Timed Out

Agent error code #OPN002 indicates that an OPNsense API call did not complete within the agent's ...

OPN003 - OPNsense TLS Certificate Error

Agent error code #OPN003 indicates that the agent could not verify the TLS certificate presented ...

OPN004 - Connection Refused by OPNsense

Agent error code #OPN004 indicates that the OPNsense host actively refused the connection from th...

OPN005 - Cannot Resolve OPNsense Hostname

Agent error code #OPN005 indicates that the agent host could not resolve the OPNsense hostname to...

OPN006 - OPNsense Request Failed

Agent error code #OPN006 is the fallback code for OPNsense API errors that don't match a more spe...

OPN100 - OPNsense Alias Not Found

Agent error code #OPN100 indicates that the alias name configured in the Knocknoc ACL does not ex...

OPN101 - Failed to Read OPNsense Alias Contents

Agent error code #OPN101 indicates that the agent could reach the alias listing endpoint on OPNse...

OPN102 - Failed to Add Entry to OPNsense Alias

Agent error code #OPN102 indicates that OPNsense rejected an attempt to add an entry to the confi...

OPN103 - Failed to Remove Entry from OPNsense Alias

Agent error code #OPN103 indicates that OPNsense rejected an attempt to remove an entry from the ...

OPN200 - Failed to Apply OPNsense Alias Changes

Agent error code #OPN200 indicates that the alias entry was added or removed successfully, but th...

298000 - External Object Refresh Failed

Agent error code #298000 indicates that the agent failed to refresh an External Dynamic List (EDL...

298001 - Connection Timed Out

Agent error code #298001 indicates that the agent attempted to connect to a firewall to refresh a...

298002 - TLS/SSL Certificate Error

Agent error code #298002 indicates that the agent encountered a TLS/SSL certificate error when at...

298003 - Authentication Failed

Agent error code #298003 indicates that the agent failed to authenticate with a firewall when att...

298004 - Authorization Error

Agent error code #298004 indicates that the agent successfully authenticated with the firewall, b...

298005 - Connection Refused

Agent error code #298005 indicates that the agent attempted to connect to a firewall, but the con...

298006 - DNS Resolution Failed

Agent error code #298006 indicates that the agent could not resolve the hostname configured for a...

299999 - Internal Agent Error

Agent error code #299999 is reserved for unexpected internal agent failures that don't fit into a...

MIKRO000 - Failed to Connect to MikroTik

Agent error code #MIKRO000 indicates that the agent could not reach the MikroTik REST API. The re...

MIKRO001 - MikroTik Authentication Failed

Agent error code #MIKRO001 indicates that the MikroTik device rejected the credentials supplied b...

MIKRO002 - MikroTik Authorization Failed

Agent error code #MIKRO002 indicates that the MikroTik user authenticated successfully but lacks ...

MIKRO003 - MikroTik TLS/SSL Certificate Error

Agent error code #MIKRO003 indicates that the TLS handshake to the MikroTik REST API failed becau...

MIKRO004 - MikroTik Connection Timed Out

Agent error code #MIKRO004 indicates that the network connection to the MikroTik REST API did not...

MIKRO005 - MikroTik REST API Not Available

Agent error code #MIKRO005 indicates that the agent reached the host but did not find the RouterO...

MIKRO100 - Failed to List MikroTik Address-List Entries

Agent error code #MIKRO100 indicates that the agent could not read the firewall address-list it i...

MIKRO101 - Failed to Add MikroTik Address-List Entry

Agent error code #MIKRO101 indicates that the agent could not add an entry to the firewall addres...

MIKRO102 - Failed to Remove MikroTik Address-List Entry

Agent error code #MIKRO102 indicates that the agent located an address-list entry to delete but t...

MIKRO400 - Invalid Response From MikroTik

Agent error code #MIKRO400 indicates that the agent reached the RouterOS REST API and received a ...

OKTA000 - Failed to Connect to Okta

Agent error code #OKTA000 indicates that the agent could not reach the Okta REST API at the confi...

OKTA001 - Okta Authentication Failed

Agent error code #OKTA001 indicates that the Okta API rejected the API token in the agent's Autho...

OKTA002 - Okta Authorization Failed

Agent error code #OKTA002 indicates that the Okta API authenticated the agent's token but rejecte...

OKTA003 - Okta TLS/SSL Certificate Error

Agent error code #OKTA003 indicates that the agent's TLS handshake with the configured Okta domai...

OKTA004 - Okta Connection Timed Out

Agent error code #OKTA004 indicates that a request to the configured Okta domain did not complete...

OKTA005 - Okta API Rate Limit Exceeded

Agent error code #OKTA005 indicates that Okta rejected the request with HTTP 429 Too Many Request...

OKTA050 - Failed to Get Okta Network Zone

Agent error code #OKTA050 indicates that the agent could not retrieve the configured network zone...

OKTA051 - Failed to Update Okta Network Zone

Agent error code #OKTA051 indicates that the agent retrieved the network zone successfully but th...

OKTA052 - Okta Network Zone Not Found

Agent error code #OKTA052 indicates that Okta returned HTTP 404 for the configured Network Zone I...

OKTA053 - Okta Network Zone Is Not an IP Zone

Agent error code #OKTA053 indicates that the configured network zone exists, but its type is not ...

OKTA054 - Invalid or Unexpected Response from Okta

Agent error code #OKTA054 indicates that Okta returned a 2xx status, but the response body did no...

ENTRA000 - Failed to Connect to Microsoft Graph

Agent error code #ENTRA000 indicates that the agent could not reach Microsoft Graph at https://gr...

ENTRA001 - Microsoft Entra Authentication Failed

Agent error code #ENTRA001 indicates that the Microsoft identity platform rejected the credential...

ENTRA002 - Microsoft Entra Authorization Failed

Agent error code #ENTRA002 indicates that the agent authenticated to Entra ID successfully but Mi...

ENTRA003 - Microsoft Graph TLS/SSL Certificate Error

Agent error code #ENTRA003 indicates that the agent's TLS handshake with login.microsoftonline.co...

ENTRA004 - Microsoft Graph Connection Timed Out

Agent error code #ENTRA004 indicates that a request to login.microsoftonline.com or graph.microso...

ENTRA005 - Microsoft Graph API Throttled

Agent error code #ENTRA005 indicates that Microsoft Graph rejected the request with HTTP 429 Too ...

ENTRA050 - Failed to Get Entra Named Location

Agent error code #ENTRA050 indicates that the agent could not retrieve the configured Named Locat...

ENTRA051 - Failed to Update Entra Named Location

Agent error code #ENTRA051 indicates that the agent retrieved the Named Location successfully but...

ENTRA052 - Entra Named Location Not Found

Agent error code #ENTRA052 indicates that Microsoft Graph returned HTTP 404 for the configured Na...

ENTRA053 - Entra Named Location Is Not an IP-Based Location

Agent error code #ENTRA053 indicates that the configured Named Location exists, but its @odata.ty...

ENTRA054 - Invalid or Unexpected Response from Microsoft Graph

Agent error code #ENTRA054 indicates that Microsoft Graph returned a 2xx status, but the response...

CHKP000 - Failed to Connect to Check Point Gateway

Agent error code #CHKP000 indicates that the Knocknoc agent could not open a network connection t...

CHKP001 - Check Point Connection Timed Out

Agent error code #CHKP001 indicates that the Knocknoc agent reached the network path to the Check...

CHKP002 - Check Point TLS/SSL Certificate Error

Agent error code #CHKP002 indicates that the Knocknoc agent opened a connection to the Check Poin...

CHKP003 - Check Point Authentication Failed

Agent error code #CHKP003 indicates that the Check Point gateway rejected the shared secret the K...

CHKP004 - Check Point Source IP Not Authorised

Agent error code #CHKP004 indicates that the Check Point gateway recognised the shared secret but...

CHKP005 - Check Point Request Refused

Agent error code #CHKP005 indicates that the Check Point gateway refused the request with a bare ...

CHKP050 - Failed to Push Identity to Check Point Gateway

Agent error code #CHKP050 indicates that the Knocknoc agent's request to register a user's identi...

CHKP051 - Failed to Remove Identity from Check Point Gateway

Agent error code #CHKP051 indicates that the Knocknoc agent's request to remove a user's identity...

CHKP052 - Check Point Access Role Not Found

Agent error code #CHKP052 indicates that the Access Role configured on the Knoc does not correspo...

CHKP053 - Identity Awareness Blade Not Enabled

Agent error code #CHKP053 indicates that the Check Point gateway's response showed the Identity A...

CHKP054 - Session Timeout Below Gateway Minimum

Agent error code #CHKP054 indicates that the per-identity session timeout Knocknoc sent with the ...

CHKP400 - Invalid Response from Check Point Gateway

Agent error code #CHKP400 indicates that the Knocknoc agent received a response from the configur...

CHKP401 - Check Point Gateway Server Error

Agent error code #CHKP401 indicates that the Check Point gateway returned a server error (HTTP 5x...