Skip to main content

Search Shelves Books Log in

How Knocknoc removes attack surface

Use cases (overview)

Windows Servers

High security subnets and JIT network access

FortiOS, FortiProxy, Palo Alto, or SSL VPN

Financial services data partner, secure web upload

VPN and ransomware

Web applications (layer-7 filtering)

Remote desktop, simple small business example

Firewall Manager access (IT MSP)

AWS infrastructure

Ivanti Connect Secure

Getting Started

SaaS deployment

Server installation (on premise)

Licensing Knocknoc

Agent installation

Windows Agent Installation

Linux Agent Installation

OpenBSD Agent Installation

High availability

Agent as a Reverse Proxy

Knocker - a cli helper

Knocknoc client (scriptable login)

Knocknoc iOS & Android App

Knocs (backends)

Allowlist (EDLs)

IPSet (Linux Netfilter/IPTables)

Windows Firewall

PF (Packet Filter)

Cisco (SFMC/Firepower)

Sophos (SFOS/XGS)

Microsoft Azure NSG

Microsoft Entra (Named Location)

AWS (EC2) Security Groups

Google Cloud Platform (GCP)

Cloudflare IP lists

DigitalOcean Firewalls

Knocknoc Reverse Proxy

Apache Webserver

IPsets with UFW

IPsets with Shorewall

Kemp LoadMaster

Local Authentication (MFA included)

Entra ID (SSO, Azure AD)

G Suite (Google)

Session limits and disconnecting sessions

Grant and revoke process

Redirecting Users

Agentic Access and Companions

Click to grant/revoke

VPNs, internal addresses and access

Additional client IP addresses

LOOTOTL - Last One Out Turn Off The Lights

User authentication

Manage user sessions

Allowlist/EDL access

Agent registration

Troubleshooting

Debugging & log levels

Knocknoc server behind HAProxy

HAProxy tips and tricks

LDAP troubleshooting tips

Package Repository Key expired

Channels and Beta

Updates and upgrades

Moving from SQLite to PostgreSQL

Changelog and Roadmap

Knocs (backends)

nftables (TODO)

Page Revisions

Revision #4562

nftables (TODO)

Knocknoc YouTube LinkedIn

Back to top