CHKP050 - Failed to Push Identity to Check Point Gateway
Agent error code #CHKP050 indicates that the Knocknoc agent's request to register a user's identity on the Check Point gateway was rejected, and the rejection did not match a more specific cause.
This is the generic "push failed" code. When Knocknoc can identify the precise reason it reports that instead: a missing access role as #CHKP052, a disabled Identity Awareness blade as #CHKP053, or a session timeout below the gateway minimum as #CHKP054. #CHKP050 is what you see when the gateway rejected the identity for some other reason.
Common causes include:
- The gateway rejected the request for a reason not covered by a specific code
- A transient gateway-side error during identity registration
- An unexpected gateway response shape, such as a localised message or a newer gateway version
Steps to Resolve
Look for a More Specific Cause
- Check the Knocknoc agent logs for the underlying gateway response that accompanied this error
- If a related code (#CHKP052, #CHKP053, #CHKP054) appears alongside it, resolve that first
Confirm the Knoc Configuration
- Confirm the Access Role on the Knoc matches an Access Role object on the gateway (see #CHKP052)
- Confirm the Identity Awareness blade is enabled (see #CHKP053)
- Run Validate connection from the Knoc page to exercise the configuration end to end
For the full setup, see the Check Point setup guide.