Skip to main content

200250 - Firewall or Panorama Mismatch

Agent error code #200250 means the address in the integration belongs to a different kind of device than the integration is set up for. Either it points at a Panorama with Use Panorama off, or at a firewall with Use Panorama on.

Knocknoc talks to the two differently. Through Panorama, every change carries the serial number of the managed firewall it is for, and Panorama passes it on. Against a firewall, the change goes straight to that firewall. Sending the wrong shape to either fails every grant.

The Validate check reads the device's own model and system mode to tell which it is.

Common causes include:

  • The integration was created for a firewall and later pointed at the Panorama that manages it, or the reverse
  • The management address of the Panorama and the firewall were confused, often on an M-series appliance and a firewall on the same subnet
  • Use Panorama was left at its default when the integration was created

Steps to Resolve

The Address Is a Panorama

  1. Open the integration and turn on Use Panorama
  2. Open each knoc that uses the integration and list the serial numbers of the managed firewalls it should write to. Panorama > Managed Devices > Summary lists them
  3. Run Validate on the knoc again

The Address Is a Firewall

  1. Open the integration and turn off Use Panorama
  2. On each knoc that uses it, remove the managed firewall serial numbers. A knoc on a firewall writes to that firewall directly
  3. Run Validate on the knoc again

Still Having Issues?

We can help you out, contact us at [email protected].