Search Results

Agent error code #CHKP052 indicates that the Access Role configured on the Knoc does not correspond to an Access Role object on the Check Point gateway. Knocknoc never creates or modifies Access Roles. It only assigns an existing role to authenticated user IPs...

Agent error code #CHKP053 indicates that the Check Point gateway's response showed the Identity Awareness blade is not active. Without that blade the Identity Web API is not served, so Knocknoc cannot register identities. A bare 404 or 403 without a clear "ide...

Agent error code #CHKP054 indicates that the per-identity session timeout Knocknoc sent with the identity was below the minimum the Check Point gateway will accept. The gateway rejected the registration as a result. When Knocknoc registers an identity it sets ...

Agent error code #CHKP055 occurs when a knoc's predefined source is a network, such as 192.168.100.48/29, and the knoc grants access through a Check Point Identity Awareness gateway. Identity Awareness maps one address per identity: add-identity takes a singl...

Agent error code #CHKP400 indicates that the Knocknoc agent received a response from the configured endpoint that it could not parse as an Identity Web API reply. This almost always means the Gateway Hostname or its port is pointing at something that is not th...

Agent error code #CHKP401 indicates that the Check Point gateway returned a server error (HTTP 5xx) in response to an Identity Web API request. The request reached the API but the gateway failed to process it on its side. Unlike the 4xx-class errors, this is a...

Agent error code #CFL000 indicates that the agent could not complete a request to the Cloudflare API. The failure happened at the network layer, so no HTTP status came back to classify. This is distinct from authentication failures (#CFL001) and authorization ...

Agent error code #CFL001 indicates that Cloudflare returned HTTP 401 for the API token configured on the knoc. The token was rejected before any permission check took place. Common causes include: The API token was revoked or has expired The token value on the...

Agent error code #CFL002 indicates that Cloudflare returned HTTP 403. The API token is valid and does not carry the permission the operation needs. This is distinct from #CFL001, where the token itself was rejected. Common causes include: The token lacks the A...

Agent error code #CFL050 indicates that Knocknoc could not send its list changes to Cloudflare. Changes are sent as a single bulk update, and that update was never accepted. A grant is only reported as applied once Cloudflare has taken the change. This code me...

Agent error code #CFL051 indicates that Cloudflare accepted the bulk operation and then reported it as failed. The request was well-formed enough to be queued, and the work itself did not complete. Common causes include: The list reached its maximum number of ...

Agent error code #CFL052 indicates that Cloudflare accepted the list update but had not finished applying it within the time Knocknoc waits. Cloudflare applies list updates in the background rather than as part of the request, so Knocknoc waits for it to repor...

Agent error code #CFL100 indicates that the Knocknoc Cloudflare Lists backend has neither a List ID nor a List Name configured. The agent cannot tell which Cloudflare rule list to update, so the grant fails before any Cloudflare API call is made. This is a con...

Agent error code #CFL101 indicates that the Knocknoc backend is configured with a Cloudflare list name, and no rule list with that name exists in the configured Cloudflare account. The agent looks the name up to resolve it to a list ID, and that lookup returne...

Agent error code #CFL102 indicates that the Knocknoc backend tried to resolve the configured Cloudflare list name to a list ID, but Cloudflare returned an unexpected response. The list may well exist; the request to enumerate lists did not succeed. This differ...

Agent error code #CFL400 indicates that Cloudflare answered with something the agent could not use. A response arrived, and it was neither a success nor a status the agent maps to a specific code. Common causes include: A proxy or captive portal between the ag...

Agent error code #299004 occurs when a knoc is assigned to an agent whose build does not include that knoc's backend type. Only this knoc is affected. Other knocs on the agent keep working. Steps to Resolve Upgrade the Agent The agent usually predates the back...

Agent error code #299005 occurs when an agent supports a knoc's backend type but is too old for the configuration format the server uses for it. The server can send older formats to older agents, down to a limit. Past that limit it refuses, so the agent cannot...