Skip to main content

200300 - API Key Not Returned

Agent error code #200300 means Generate key on the Integrations page reached the device but did not get an API key back. Nothing was saved, and the integration still holds whatever key it had before.

Common causes include:

  • The address points at something other than the management interface of a PAN-OS firewall or Panorama, such as a GlobalProtect portal or a load balancer in front of it
  • The device answered with an error page, often because a proxy between the agent and the device intercepted the request
  • The address, username or password was left empty

A device that cannot be reached at all reports one of the connection codes (#298001, #298002, #298005 or #298006) instead, and a username or password the device refused reports #200301.

Steps to Resolve

Check the Address

The address must be the device's management interface, with no path after the host, for example https://fw.example.com. Open it in a browser from a machine on the agent's network: it should show the PAN-OS or Panorama login page.

Check for a Proxy

If the agent reaches the device through a proxy, confirm the proxy passes requests to the management interface through unchanged. The agent's log carries the device's reply at debug level.

Generate the Key on the Device Instead

If the exchange still fails, generate the key on the device and paste it into the API key field. In the firewall or Panorama UI, open Device > Administrators, select the account, and generate an API key for it.