Skip to main content

200251 - Managed Firewall Not Found or Not Connected

Agent error code #200251 means a serial number on the knoc does not match a firewall Panorama manages, or matches one that is not connected to Panorama right now.

Through Panorama, Knocknoc sends each change to the managed firewalls named on the knoc. A serial number Panorama does not recognize, or a firewall it cannot reach, fails the grant for that firewall while the others carry on.

When the serial number is unknown, the Validate check lists the connected firewalls Panorama does manage, so the right one can be picked out.

Common causes include:

  • A typo in the serial number, or a serial copied with a space or a line break
  • The firewall was replaced through an RMA and has a new serial number
  • The firewall is managed by a different Panorama
  • The firewall has lost its connection to Panorama: a network change, an expired certificate, or the firewall restarting

Steps to Resolve

Compare the Serial Numbers

In Panorama, open Panorama > Managed Devices > Summary. Each managed firewall's serial number and its connection state are listed. Correct the serial numbers on the knoc to match.

Reconnect a Disconnected Firewall

If the firewall is listed but shows as disconnected, check from the firewall CLI:

show panorama-status

The output names the Panorama the firewall is trying to reach and whether it is connected. Until it is, grants to that firewall fail with this code or with #200153, and grants to the other firewalls are unaffected.