Skip to main content

200258 - Address Group Mode Needs PAN-OS 10.2

Agent error code #200258 means the device runs a PAN-OS release older than 10.2. Address group mode creates address objects and edits the group through the PAN-OS REST API version 10.2, which older releases do not offer.

Through Panorama, the release that matters is Panorama's own, because the objects are written there.

Steps to Resolve

Choose one:

  • Switch the knoc to Dynamic Address Group. It registers tags through the User-ID API, which every supported release has. Create a dynamic address group matching a tag of the knoc's own, reference it in the policy, and set that tag on the knoc
  • Switch the knoc to Passive+, where the firewall fetches the list of granted addresses itself
  • Upgrade the device to PAN-OS 10.2 or later