Search Results

Agent error code #200050 occurs when the Knocknoc agent attempts to map a username to an IP address on a Palo Alto Networks firewall, but the firewall rejects the request. User-ID mapping is a PAN-OS feature that associates usernames with IP addresses. User ma...

Agent error code #200100 indicates that the Knocknoc agent was unable to verify whether an address object exists on the Palo Alto Networks firewall. This error occurs when using Active mode, where Knocknoc directly manages address objects and address groups on...

Agent error code #200101 indicates that the Knocknoc agent was unable to create an address object on the Palo Alto Networks firewall. This error occurs when using Active mode, where Knocknoc directly manages address objects and address groups on the firewall. ...

This error indicates that the Knocknoc agent was unable to retrieve the current members of an address group on the Palo Alto Networks firewall. This error occurs when using Active mode, where Knocknoc directly manages address objects and address groups on the ...

Agent error code #200103 indicates that the Knocknoc agent was unable to update an address group on the Palo Alto Networks firewall to include a new address object. This error occurs when using Active mode, where Knocknoc directly manages address objects and a...

This error indicates that the Knocknoc agent was unable to update an address group on the Palo Alto Networks firewall to remove an address object during access revocation. This error occurs when using Active mode, where Knocknoc directly manages address object...

This error indicates that the Knocknoc agent was unable to delete an address object from the Palo Alto Networks firewall during access revocation. This error occurs when using Active mode, where Knocknoc directly manages address objects and address groups on t...

Agent error code #200107 means the address group named on the knoc is not on the Palo Alto Networks firewall or in Panorama. The firewall answered the agent's read of that group with Object Not Present. This applies to a knoc in active mode, where Knocknoc ma...

Agent error code #200150 occurs when the Knocknoc agent asks a Palo Alto Networks firewall to register an IP-tag mapping and the firewall rejects the request. This is the Dynamic Address Group mode of the PAN-OS integration: Knocknoc registers the user's IP ag...

Agent error code #200151 occurs when a Knocknoc grant ends and the agent asks a Palo Alto Networks firewall to remove the IP-tag mapping it registered, but the firewall rejects the request. The user's access stays open until the mapping is gone or the tag's ow...

Agent error code #200152 means the Palo Alto Networks firewall turned a User-ID update away because its management plane was occupied, not because anything about the request was wrong. A commit or push in progress is the usual reason. Knocknoc retries these au...

Agent error code #200153 means Knocknoc sent an IP-tag registration through Panorama for a specific firewall serial number, and Panorama could not reach that firewall to pass the request on. This is the User-ID equivalent of #200000, which covers the same prob...

Agent error code #200154 means the Palo Alto Networks firewall rejected the timeout Knocknoc set on the IP-tag mapping. Knocknoc registers each tag with a timeout matching the remaining session length, so the firewall expires the mapping by itself if the agent...

Agent error code #200155 means the Palo Alto Networks firewall does not have the virtual system that the knoc names, so it rejected the IP-tag registration. A firewall in single-vsys mode has one virtual system called vsys1. A firewall in multi-vsys mode has ...

Agent error code #200156 means the Palo Alto Networks firewall or Panorama rejected the API key Knocknoc presented when registering an IP-tag mapping. The credential was refused, so nothing about the request itself was evaluated. This covers the User-ID path s...

Agent error code #200157 means the API key Knocknoc presented is valid, but the administrator it belongs to is not permitted to submit User-ID updates. The firewall authenticated the request and then refused the operation. Registering an IP-tag mapping through...

Agent error code #200158 means the Palo Alto Networks firewall refused a User-ID registration because it is already holding as many registered IP addresses as its model allows. This is a capacity limit, not a busy device. Knocknoc does not retry it, because th...

Agent error code #200159 occurs when a knoc's predefined source is a network, such as 192.168.100.48/29, and the knoc grants access by registering an IP against a dynamic address group tag. A registered IP is a single address, with no field for a netmask, and...