Skip to main content

Search Shelves Books Log in

How Knocknoc removes attack surface

Use cases (overview)

Windows Servers

High security subnets and JIT network access

FortiOS, FortiProxy, Palo Alto, or SSL VPN

Financial services data partner, secure web upload

VPN and ransomware

Web applications (layer-7 filtering)

Remote desktop, simple small business example

Firewall Manager access (IT MSP)

AWS infrastructure

Ivanti Connect Secure

Getting Started

SaaS deployment

Server installation (on premise)

Licensing Knocknoc

Agent installation

Windows Agent Installation

Linux Agent Installation

OpenBSD Agent Installation

Identities overview

High availability

Agent as a Reverse Proxy

Knocker - a cli helper

Knocknoc client (scriptable login)

Knocknoc iOS & Android App

Knocs (backends)

Allowlist (EDLs)

IPSet (Linux Netfilter/IPTables)

Windows Firewall

PF (Packet Filter)

Cisco (SFMC/Firepower)

Sophos (SFOS/XGS)

Microsoft Azure NSG

Microsoft Entra (Named Location)

AWS (EC2) Security Groups

Google Cloud Platform (GCP)

Cloudflare IP lists

DigitalOcean Firewalls

Knocknoc Reverse Proxy

Apache Webserver

IPsets with UFW

IPsets with Shorewall

Local Authentication (MFA included)

Entra ID (SSO, Azure AD)

G Suite (Google)

Session limits and disconnecting sessions

Grant and revoke process

Redirecting Users

Agentic Access and Companions

Click to grant/revoke

VPNs, internal addresses and access

Additional client IP addresses

LOOTOTL - Last One Out Turn Off The Lights

User authentication

Manage user sessions

Allowlist/EDL access

Agent registration

Troubleshooting

Debugging & log levels

Knocknoc server behind HAProxy

HAProxy tips and tricks

LDAP troubleshooting tips

Package Repository Key expired

Channels and Beta

Updates and upgrades

Moving from SQLite to PostgreSQL

Changelog and Roadmap

Authentication

Page Revisions

Revision #4444

Session limits

Knocknoc YouTube LinkedIn

Back to top