Advanced Search
Search Results
265 total results found
204000 - Azure CLI Not Installed
Agent error code #204000 is legacy. Current agents manage network security groups through the Azure SDK and do not need the Azure CLI, so a current agent does not produce this code. If you see #204000, the agent is an older version that shelled out to the az ...
204001 - Failed to Log In to Azure
Agent error code #204001 indicates that the service principal on the knoc failed to authenticate with Entra ID. The agent signs in with the service principal before it manages NSG rules, and Entra ID refused the credentials. Common causes include: The client I...
204002 - Unsupported Value in Azure Configuration
Agent error code #204002 indicates that one of the values configured on the Azure NSG knoc cannot be used to build a valid Azure request, so the agent stopped before contacting Azure. Two things trip the check: A value holds a control character (a carriage ret...
204003 - Azure Management API Timeout
Agent error code #204003 indicates that a call to the Azure management API did not return within the time the agent allows for it. The agent bounds every Azure call so one slow request cannot stall the grants queued behind it. Common causes include: A network ...
204004 - Failed to Look Up the Azure Subscription
Agent error code #204004 indicates that the knoc has no subscription ID set, and the call the agent makes to discover one did not come back. The subscription ID is optional. When it is blank, the agent asks Azure which subscriptions the integration's service p...
204005 - Could Not Determine Which Azure Subscription to Use
Agent error code #204005 indicates that the knoc has no subscription ID set, and the agent could not work out which one to use on its own. The subscription ID is optional. When it is blank, the agent asks Azure which subscriptions the integration's service pri...
204050 - Failed to List NSG Rules
Agent error code #204050 indicates that Knocknoc could not read the rules on the network security group, or read them and could not parse the response. This read runs before any change is made to the NSG, so the grant stops here. Common causes include: The NSG...
204051 - Failed to Create an NSG Rule
Agent error code #204051 indicates that the agent could not create an NSG rule. This is the operation that grants a user access. Common causes include: The service principal can read the NSG but not modify it The NSG has reached its rule limit Another process ...
204052 - Failed to Delete an NSG Rule
Agent error code #204052 indicates that the agent could not delete an NSG rule while revoking a grant. Access that should have been withdrawn may still be in place. Common causes include: The service principal can create rules but not delete them A resource lo...
204053 - No Available Rule Priority
Agent error code #204053 indicates that the agent could not find a free priority number to create the rule with. Every NSG rule needs a unique priority, and the agent searches the range 500 to 4096 for one that is unused. This code means either every priority ...
CHKP000 - Failed to Connect to Check Point Gateway
Agent error code #CHKP000 indicates that the Knocknoc agent could not open a network connection to the Check Point gateway's Identity Awareness Web API. The connection failed before any TLS handshake or authentication took place. This is a network-level failur...
CHKP001 - Check Point Connection Timed Out
Agent error code #CHKP001 indicates that the Knocknoc agent reached the network path to the Check Point gateway but the gateway did not respond within the request time budget. This differs from #CHKP000, where the connection could not be opened at all. With #C...
CHKP002 - Check Point TLS/SSL Certificate Error
Agent error code #CHKP002 indicates that the Knocknoc agent opened a connection to the Check Point gateway but could not establish a trusted TLS session. The gateway's certificate was not accepted by the agent host. Common causes include: The gateway presents ...
CHKP003 - Check Point Authentication Failed
Agent error code #CHKP003 indicates that the Check Point gateway rejected the shared secret the Knocknoc agent presented to the Identity Awareness Web API. The gateway returned an explicit "wrong password" response. This is distinct from #CHKP004, where the se...
CHKP004 - Check Point Source IP Not Authorized
Agent error code #CHKP004 indicates that the Check Point gateway recognized the shared secret but refused the request because the agent connected from an IP address the Identity Web API client does not accept. The Identity Web API enforces a source-IP allow-li...
CHKP005 - Check Point Request Refused
Agent error code #CHKP005 indicates that the Check Point gateway refused the request with a bare HTTP 404 or 403 and no specific error code in the body. The gateway gives the same response whether the shared secret is wrong or the agent's source IP is not auth...
CHKP050 - Failed to Push Identity to Check Point Gateway
Agent error code #CHKP050 indicates that the Knocknoc agent's request to register a user's identity on the Check Point gateway was rejected, and the rejection did not match a more specific cause. This is the generic "push failed" code. When Knocknoc can identi...
CHKP051 - Failed to Remove Identity from Check Point Gateway
Agent error code #CHKP051 indicates that the Knocknoc agent's request to remove a user's identity from the Check Point gateway was rejected on grant revocation or logout. A "not found" response on removal is not treated as this error. If the identity is alread...