Skip to main content

Integrations Overview

An integration is one firewall, proxy, cloud platform or on-host enforcement point, plus the agent that reaches it and the credentials that agent uses. Several Knocs can share one integration.

Manage integrations under Admin > Integrations.

image.png

Why integrations

When several Knocs protect services behind the same firewall, they share one integration.

  • Enter credentials once. You give Knocknoc the firewall's address and credentials when you create the integration. Each Knoc you add on that firewall uses the integration, so nobody types them in again.
  • Rotate them once. Change the password on the integration and every Knoc that uses it picks up the change.
  • See activity per integration. Its page shows which Knocs use it, who has been connecting, grant volumes, average wait times and failures. When a user can't get access, you can follow their Knoc back to the system enforcing it.

The Knoc still decides who gets access and on what terms. See the Knocs page for those rules.

Integration types

  • Firewalls such as FortiGate, PAN-OS and SonicWall.
  • Cloud platforms such as AWS, Azure and GCP.
  • Reverse proxies such as nginx and HAProxy.
  • On-host enforcement on the agent's own machine: ipset, nftables, pf, Windows Firewall, nginx, HAProxy or a script.

Each type has its own setup page in this chapter.

Managing integrations

Admin > Integrations has two tabs:

  • Inline / proxy. Firewalls, cloud platforms and proxies that sit in front of the protected service. The agent reaches them over the network with the integration's credentials.
  • On host. Enforcement on the agent's own machine, such as ipset, nftables or Windows Firewall. Each row is one agent and one enforcement type.

Open an integration to see the Knocs that use it.

Merge duplicate integrations

If several Knocs each hold their own copy of the same system's details, open Admin > Integrations > Find duplicates. Your agents compare the integrations they hold and report the ones that match, and you can merge each set into one shared integration. Every Knoc keeps its assignment.

  • What counts as a match. One agent holds both integrations, they are the same type and they point at the same address.
  • Update agents first. Older agents can't run the comparison, so update any agents the page lists before you start.
Back to top