200252 - Device Group Not Found
Agent error code #200252 means the device group on the knoc does not exist on Panorama, or one of the knoc's managed firewalls is not a member of it.
In address group mode through Panorama, Knocknoc writes its address objects into the device group, and Panorama pushes them to the firewalls in that group. A device group that does not exist fails every grant. A firewall outside the group never receives the objects, so its users get no access even though the grant reports success.
Common causes include:
- A typo in the device group name. Names are case sensitive, so
Branchandbranchare different groups - The device group was renamed in Panorama after the knoc was set up
- The firewall was moved to a different device group
Steps to Resolve
Check the Name
In Panorama, open Panorama > Device Groups and compare the name with the knoc's Device Group. The Validate check offers the closest names it found, and a case-only difference is offered as an exact fix.
Check the Membership
In the same screen, open the device group and confirm each firewall named on the knoc is listed under Devices. Add any that are missing, then commit and push.