Skip to main content

200253 - External Dynamic List Not Found

Agent error code #200253 means the firewall has no IP external dynamic list with the name configured on the knoc.

In Passive+ mode, a grant asks the firewall to refresh the list straight away, so a new address is picked up in seconds rather than at the list's next scheduled fetch. A list the firewall does not have cannot be refreshed.

Common causes include:

  • A typo in the list name. Names are case sensitive
  • The list was created on Panorama in a device group the firewall is not part of, or not yet pushed
  • The list was created as a URL or domain list instead of an IP list
  • The list lives in a different virtual system to the one on the knoc

Steps to Resolve

Create or Correct the List

  1. On the firewall, or in Panorama for a managed firewall, open Objects > External Dynamic Lists
  2. Find the list and compare its name with the knoc's EDL Name
  3. Confirm its Type is IP List
  4. Confirm its Source is this knoc's allowlist URL, shown on the knoc's page in Knocknoc

If the list is created in Panorama, commit and push it to the firewalls before running Validate again.