Skip to main content

298003 - Authentication Failed

Agent error code #298003 indicates that a firewall or load balancer rejected the credentials the agent failedpresented. to authenticate with a firewall when attempting to refreshRefreshing an external object (such as an External Dynamic List or dynamic group). The firewall rejectedis the credentialsmost providedcommon bycase, but any request the agent.agent makes can fail this way, including a read that only checks the device's state.

This error occurs when:

  • The API key or username/password configured in Knocknoc is incorrect
  • The API key has expired or been revoked
  • The API key or username/password was recently changed on the firewall but not updated in Knocknoc
  • The user account has been disabled or locked on the firewall

Steps to Resolve

Verify the Credentials in Knocknoc

A knoc can hold more than one credential for the same vendor: a separate API key for an HA peer, and another for username mapping. The message accompanying this code says which one was refused, so check that field rather than the first key on the page.

  1. In the Knocknoc admin interface, navigate to the backend configuration for the affected firewall
  2. Check that the API key or username/password matches what is configured on the firewall
  3. If the credentials were recently changed on the firewall, update them in Knocknoc

Regenerate or Reset the API Key

This process is specific to the firewall being used. Please see the Knocknoc documentation related to your specific use case, or the firewalls documentation on producing an API key.

Check Account Status

If relevant to the firewall in use, verify that the account used for API access has not been disabled or locked:

  1. Log into the firewall's management interface
  2. Navigate to the user or administrator settings
  3. Confirm the account is active and not locked due to failed login attempts
  4. If the account is locked, unlock it and verify the credentials

Verify API Access is Enabled

Some firewalls require API access to be explicitly enabled for user accounts. Please ensure the correct access outlined in the Knocknoc firewall setup docs is configured.

Back to top