CHKP401 - Check Point Gateway Server Error

Agent error code #CHKP401 indicates that the Check Point gateway returned a server error (HTTP 5xx) in response to an Identity Web API request. The request reached the API but the gateway failed to process it on its side.

Unlike the 4xx-class errors, this is a gateway-side fault rather than a configuration problem on the Knoc. It is often transient.

Common causes include:

• The gateway is overloaded or low on resources
• An internal error in the Identity Awareness Policy Decision Point
• The gateway is mid-policy-install or restarting a service

Steps to Resolve

Retry

1. Server errors are frequently transient. The next grant or revoke retries automatically
2. Run Validate connection from the Knoc page to check whether the gateway has recovered

Check Gateway Health

1. Review the gateway's own logs for the time of the failure
2. Check gateway CPU, memory, and disk. A resource-starved gateway can return 5xx on Web API calls
3. If the errors coincide with policy installs or failovers, retry once the gateway settles

For the full setup, see the Check Point setup guide.