Firewall Enforcement related Error Messages

Table below describes the error codes when issues occur with your L3 firewall enforcement.

Error Code

Error Message

Description

Corrective Action

GWE23592

Enforcer message from <enforcer-name> has unknown serial number <enforcer-serial-number>

This notification signifies that an invalid enforcer, which has an unrecognized serial number is being added to the system.

Ensure that a valid enforcer with correct serial number is added on Ivanti Policy Secure.

GWE24666

Platform mismatch for gateway with serial number <serial-number>. Connecting gateway has platform <platform-name> but is configured as <platform-name> with platform <platform-name>.

This notification signifies that the connection profile is misconfigured with an incorrect enforcer type.

Configure the enforcer with a valid gateway type. For example, SRX is configured as ScreenOS, ensure that the gateway type is correct.

GWE24024

Error configuring IPsec routing for Enforcer %1(%2): source and destination zones "%3" are the same

The IPsec routing policy is not configured correctly.

The policy should have different source and destination zone for IPsec configuration.

GWE30827

IC is not configured as RADIUS Auth Server on Ex enforcer <EX Switch Name>

Ivanti Policy Secure is not configured as a RADIUS server on Juniper EX switch.

Configure Ivanti Policy Secure as a RADIUS server on EX switch.

GWT31292

Enforcer:<Gateway Name> (<Gateway IP address>) Enforcer failed to execute <command-name> command for <Source IP>

The enforcer failed to execute the command for source IP address.

Check the network connectivity between Ivanti Policy Secure and Screen OS.

GWT31383

Gateway (Gateway IP address) request error: <Curl Error code>

A communication error has been encountered between Ivanti Policy Secure and PAN firewall.

Check the curl error code for corrective action. For more information, see Curl Error Codes.

GWT31291

Enforcer: <Enforcer Name> (<Enforcer IP address>) is unreachable

Indicates that the enforcer is offline and unreachable

Ivanti Policy Secure retries to connect automatically. If the problem persists, check the network connectivity with Firewall.

GWT31316

API Key retrieval for gateway IP address <Enforcer IP Address> has <Error code>

Logs the API key retrieval status.

Check the network connectivity and retry to retrieve the API key.