AFW-220 — Collector degraded (pass-through)

Area: Enforcement & data plane · All support codes · Reference table

Why this happened

The collector lost cloud connectivity longer than the offline grace window, or its entitlement lapsed, and switched to pass-through: traffic flows but is not inspected.

Fix

Restore outbound HTTPS from the collector to the cloud (check egress firewall/proxy), or renew the subscription if the plan lapsed. The collector recovers on its next successful sync.

---

If the fix doesn't resolve it, file a support ticket from the console — your workspace's diagnostics snapshot is attached automatically, so this code reaches support with its context.