Skip to main content

200255 - Address Group Is a Dynamic Group

Agent error code #200255 means the address group on the knoc is a dynamic address group, which matches addresses by tag. In address group mode, Knocknoc adds address objects to a static group's member list, and a dynamic group has no member list to add to.

Steps to Resolve

Pick the one that matches how the firewall is set up:

Use the Dynamic Group as It Is

  1. Edit the knoc and change its method to Dynamic Address Group
  2. Set Tag Name to the tag the group's Match criteria use
  3. Run Validate again

This is usually the better choice. Registering a tag is lighter on the firewall than editing configuration, and it needs no commit.

Use a Static Group Instead

  1. Under Objects > Address Groups, create a group with Type set to Static
  2. Reference it in the security policy that grants access
  3. Put its name on the knoc