Troubleshooting

"IP intelligence is degraded"

A banner at the top of the admin pages reads IP intelligence is degraded when a connected provider has refused its key, failed its last call, or lost a key your license provided. It names the provider and what to do about it, and says how many of your policies allow access while a source cannot answer versus apply their restrictions, since that setting decides access in the meantime.

A provider will not answer

If a provider times out or errors, each policy's If a data source cannot answer setting decides:decides. Allow access lets the connection through, while Apply the restrictions applies the conditions as if they had matched. Knocknoc first falls back to any recent answer it stored for the address, so a brief outage usually changes nothing. See How trust decisions are made.

A rejected key

If the provider rejects the key, waiting will not help. The Activity row says the provider refused the request and points you at the key on the Threat intelligence page. Check the key, or contact Knocknoc if the key came with your license.

A plan gap

On a free plan, or one without the IP-intelligence sources, only Country can be turned on, answered from the bundled database. Other conditions show a Paid plan badge and are stored but not evaluated, so they let connections through. Known networks reads no provider and keeps working. A condition you turned on while the plan covered it stays visible and locked; it is never deleted.

A blocked-address list will not update

• A list that cannot be fetched keeps blocking. The addresses from its last successful fetch stay in force, and the card says what went wrong.
• A list that comes back empty is treated as a failure, so an error page that happens to return nothing does not quietly wipe your blocking.
• A list on a private or local address must be confirmed before it saves, since the server fetches it from inside your network. A hostname that resolves to a local address is caught on the first fetch instead.

Use Fetch now on a list's card to pull it again straight away, and Download to see the addresses Knocknoc is currently enforcing from it.