Search Results

Agent error code #203150 indicates that the agent attempted to update a GCP resource multiple times but each attempt failed due to a fingerprint conflict (HTTP 409 or 412). The agent exhausted its retry limit. GCP uses fingerprints (ETags) for optimistic concu...

Agent error code #203151 indicates that the GCP API returned HTTP 404 (Not Found) when the agent attempted to access a firewall rule or security policy rule. The specified resource does not exist in the configured GCP project. This error is typically surfaced ...

Agent error code #299000 is the fallback the agent reports when a backend operation failed without supplying a specific reason. It carries no detail of its own, so the useful information is in the agent log rather than in this message. Every backend has its ow...

Agent error code #299001 indicates that the agent could not decrypt a stored secret (such as an API token or password) before using it to authenticate to a backend. Credentials are held encrypted and decrypted only at the moment they are needed; this error mea...

Agent error code #299002 means the knoc does not name the object the agent is meant to write the granted address into. The agent stops before contacting the device, because there is nothing on the device for it to change. The message names which setting is mis...

Agent error code #299003 means the agent could not connect to the device behind this knoc, so it is holding back changes to it for a short time. The agent reported this without contacting the device. The agent pauses a knoc after two operations in a row fail t...

Agent error code #299008 means the agent fetching one of your blocked address lists could not download it. The connection to the list's server failed, timed out, or the address could not be used. The addresses from the last successful fetch keep blocking, and ...

Agent error code #299009 means the agent fetching one of your blocked address lists reached the list's server, and the server refused the request. The card shows the status it answered with, for example 403 Forbidden or 404 Not Found. The addresses from the ...

Agent error code #299010 means the blocked address list the agent downloaded is larger than Knocknoc accepts. The agent stops reading at the limit rather than sending part of a list, and the addresses from the last successful fetch keep blocking. A list can be...

Agent error code #299999 is reserved for unexpected internal agent failures that don't fit into any other category. It serves as a catch-all for unanticipated error conditions. If you encounter this error, it indicates an unexpected condition occurred within t...

Agent error code #298000 indicates that the agent failed to refresh an External Dynamic List (EDL) or dynamic external object on a firewall, for reasons that don't fall into more specific error categories. This error typically occurs when: The configured EDL o...

Agent error code #298001 indicates that the agent sent a request to a firewall and no response arrived before the agent gave up. It covers any call the agent makes to the device, not only an external object refresh: on a Palo Alto Networks firewall it also cov...

Agent error code #298002 indicates that the agent encountered a TLS/SSL certificate error when attempting to connect to a firewall. The secure connection could not be established because the certificate presented by the firewall failed validation. This error o...

Agent error code #298003 indicates that a firewall or load balancer rejected the credentials the agent presented. Refreshing an external object such as an External Dynamic List is the most common case, but any request the agent makes can fail this way, includi...

Agent error code #298004 indicates that the agent successfully authenticated with the firewall, but lacks the necessary permissions to perform the requested operation. This error is distinct from authentication errors (#298003), where the credentials themselve...

Agent error code #298005 indicates that the agent attempted to connect to a firewall, but the connection was actively refused. The firewall's host is reachable, but nothing is listening on the specified port, or a firewall rule is blocking the connection. This...

Agent error code #298006 indicates that the agent could not resolve the hostname configured for a firewall. The agent attempted to look up the firewall's hostname but the DNS query failed. This error is distinct from connection refused (#298005) or timeout (#2...

Agent error code #IPSET050 occurs when a knoc's predefined source is a network, such as 192.168.100.48/29, and the ipset the knoc points at stores single addresses rather than networks. An ipset has a type, fixed when the set is created. A hash:net set store...