Admin Guide

Knocknoc Knocknoc can ultimately act as an authentication portal for many use cases. To simplify...

SSH can be protected by Knocknoc in a number of ways: Local Linux firewall orchestration on th...

There are a number of ways to protect Remote Desktop (RDP) using Knocknoc. These include firewall...

There are various options for protecting your web application using Knocknoc Local Linux firew...

Ivanti Connect Secure devices that have an outer firewall or control layer can be protected from ...

Streaming low-latency video is a challenge for firewalls and VPNs, and Knocknoc is an excellent s...

Protect your existing Fortigate investments from direct internet exposure by introducing Knocknoc...

Having roaming users be able to use a handset from home, and protect your PABX from brute force a...

Knocknoc ships with a script for updating security groups in AWS. Checkout the backend documentat...

Azure Portal or specific Azure services can be further protected through the use of the Knocknoc ...

Knocknoc licensing and pricing can be found on the Knocknoc website. Once you have obtained your...

For the admin who knows what they need and needs a fast way to get it, you can use this command t...

For the admin who know what they need, and needs a fast way to get it, you can use this command t...

User creation varies depending on the authentication source in use. Local users will need to be c...

Groups in Knocknoc map users to ACLs and a user can be assigned to multiple groups, to create a g...

Admins in Knocknoc can login to /admin on their Knocknoc server, however they can't be granted AC...

The Settings in Knocknoc allows you to configure some of the basic setup like authentication sour...

Knocknoc supports local users, and many will find that the fastest way to evaluate if Knocknoc is...

Knocknoc can authenticate users to an LDAP server like Active Directory, by attempting to bind as...

SAML is an in-depth topic, however it represents the best option for securing users, and providin...

An overview of SAML principles and key terms to help you effectively configure and manage SAML wi...

The following example assumes your Knocknoc instance is located at https://demo.knoc.cloud. Where...

The following example assumes your Knocknoc instance is located at https://demo.knoc.cloud. Where...

Gsuite can be setup as an Identity Provider if you have Gsuite Business Startter or above plan. ...

The following example assumes your Knocknoc instance is located at https://demo.knoc.cloud. Where...

SAML for the admin interface is the same as SAML for the user base with a few very small alterati...

CyberArk integrates with Knocknoc via the "Web Apps" component, passing through SAML assertions. ...

The following example assumes your Knocknoc instance is located at https://your-knocknoc.cloud/. ...

IPsets are a powerful and highly efficient way of making a dynamic firewall on a normal Linux mac...

HAProxy is a fantastic reverse proxy with a massive amount of features. Knocknoc has supported HA...

This is an example that lets you use UFW (https://wiki.ubuntu.com/UncomplicatedFirewall) and IPse...

This is an example that lets you use Shorewall https://shorewall.org/index.html and IPsets to dyn...

The "script" backend type is simply a script the agent can execute that takes a fixed set of argu...

Knocknoc can easily connect to AWS using common utilities and IAM credentials, and update the all...

The scripting backend can be used for MikroTik RouterOS config updates as well. Here is a sample ...

Nginx support via script was added in knocknoc-agent version 1.0.30. This allows for flexible ACL...

Apache 2.4 and above have slightly different ACL syntax, so this page covers how you can use Knoc...

Released for wider testing in version 1.0.34 of knocknoc agent, the FortiOS integration allows Kn...

Overview This integration is designed to manage named locations in Microsoft Azure Conditional A...

The Allowlist backend makes a list of active IP address grants available via the Knocknoc server ...

An ACL in Knocknoc is an important mapping between a Backend and ACL name, which is an argument p...

NTP It's important that ALL the servers within the Knocknoc cluster and agents are synchronised ...

The Knocknoc server will need to be able to contact your LDAP server on port 389 or 636. This is ...

Running Knocknoc behind HAProxy could be a great option for people with existing HAProxy deployme...

Checking to see if an ACL is present in HAProxy For when you aren't sure if the whole process is...