Skip to main content

Web application

There are various options for protecting your web application using Knocknoc

  • FirewallLocal Linux firewall orchestration on the host (eg: using IPSets)
  • In-line firewall/control device orchestration (Fortigate, etc), via an adjacent Knocknoc Agent deployment
  • HAproxy can sit in front of the web application(s) and forward authorised traffic 
  • Public cloud orchestration (AWS, Azure) 

ProvideOne referencemajor examplesadvantage usingof relevantKnocknoc backendsparticularly for examplelegacy haproxy,web ipsetapplications without single-sign-on or AWSwhere Securityshared Groupspasswords are forced (eg: ICS/OT network equipment, embedded systems, soho routers etc) is that SSO and MFA are quickly added to these back-ends without change.