Skip to main content

201151 - Failed to Update Address Group

Agent error code #201151 indicates that the Knocknoc agent was unable to update an address group on the SonicWall firewall. The agent updates address groups to add or remove IP addresses when granting or revoking access.

This error occurs when:

  • The API user does not have permission to modify address groups
  • One or more address objects being added to the group do not exist on the SonicWall firewall
  • The SonicWall API returned an unexpected error during the update request

Steps to Resolve

Verify API User Permissions

The API user must have sufficient permissions to modify address groups:

  1. Log into the SonicWall management interface
  2. Navigate to Device > Users > Local Users & Groups
  3. Verify the API user has administrative privileges or appropriate write permissions for address objects and groups
  4. If the user belongs to a restricted group, consider assigning them to a group with full administrative access

For more details on API user configuration, see the SonicWall backend setup guide: TODOguide.

Sonicwall admin permissions

Check for Missing Address Objects

When updating an address group, the SonicWall API requires all referenced address objects to exist. If an address object was deleted outside of Knocknoc:

  1. In the SonicWall management interface, navigate to Object > Match Objects > Addresses
  2. Search for address objects starting with kk- (the prefix Knocknoc uses)
  3. If address objects are missing that should exist, they may have been manually deleted
  4. Revoking and re-granting access for affected users in Knocknoc will recreate the missing address objects

Check Address Object Limits

SonicWall firewalls have limits on the number of members in an address group:

  1. In the SonicWall management interface, navigate to Object > Match Objects > Addresses > Address Groups (tab)
  2. Select the address group and review the current number of members
  3. If the group is approaching its limit, consider removing unused entries or reviewing the firewall's capacity

Information on SonicWall address group limits is available here.

Still Having Issues?

We can help you out, contact us at support@knocknoc.io.

Back to top