Skip to main content

CHKP050 - Failed to Push Identity to Check Point Gateway

Agent error code #CHKP050 indicates that the Knocknoc agent's request to register a user's identity on the Check Point gateway was rejected, and the rejection did not match a more specific cause.

This is the generic "push failed" code. When Knocknoc can identify the precise reason it reports that instead: a missing access role as #CHKP052, a disabled Identity Awareness blade as #CHKP053, or a session timeout below the gateway minimum as #CHKP054. #CHKP050 is what you see when the gateway rejected the identity for some other reason.

Common causes include:

  • The gateway rejected the request for a reason not covered by a specific code
  • A transient gateway-side error during identity registration
  • An unexpected gateway response shape, such as a localised message or a newer gateway version

Steps to Resolve

Look for a More Specific Cause

  1. Check the Knocknoc agent logs for the underlying gateway response that accompanied this error
  2. If a related code (#CHKP052, #CHKP053, #CHKP054) appears alongside it, resolve that first

Confirm the Knoc Configuration

  1. Confirm the Access Role on the Knoc matches an Access Role object on the gateway (see #CHKP052)
  2. Confirm the Identity Awareness blade is enabled (see #CHKP053)
  3. Run Validate connection from the Knoc page to exercise the configuration end to end

For the full setup, see the Check Point setup guide.