Skip to main content

v26.04

Knocknoc 26.04

Knocknoc 26.04.1 is a size-optimized release focused on expanding deployment flexibility, improving firewall and cloud integration options, refining installation workflows, and shipping some small bug fixes.

This release introduces Google GCP orchestration, a new Palo Alto/Panorama Active integration, improved support for air-gapped licensing, an overhauled interactive Server installer for self-hosted/on-premise installations, Let's Encrypt plugin support across multiple providers, and a range of fixes across the agent and backend components.

🚀 Highlights

  • New Palo Alto / Panorama "Active" integration
  • New interactive server installer (for on-premise/self-hosting setups), far far smoother (<3 TUI)
  • Google GCP orchestration support added

✨ New features

  • Palo Alto / Panorama "Active" integration, allowing you to quickly push Knoc matches through your Panorama/Palo Alto environment without the need for EDLs and Passive+ mode. It's quick! This also works without a Panorama directly on your Palo Alto firewalls, and has a high-availability failover mode for this deployment model.
  • Google GCP orchestration allows Knocknoc-integrated GCP firewall rules. See Google Cloud Platform (GCP) guide.
  • Improved air-gapped support for high-security offline/air-gapped deployments. Available via Enterprise+ licensing.
  • Agent version is now shown for cloud deployments in the admin experience.

🛠️ Installer / setup

  • New Server installer it's actually great now.
  • Let's Encrypt plugin support (Cloudflare, Digital Ocean, AWS and GCP) to automatically handle cert creation and renewals, linked in at your server install time

🧹 Housekeeping

  • Chart data tidy-up, it was too slow to render browser-side for our liking.

Release date: 8th April 2026

Knocknoc 26.04.2

This release also adds support for multiple Azure subscriptions (for NSG), improves the licensing UX, and updates Golang and related libraries to latest versions to address security concerns. Oh and one more thing (sorry, had to), we’ve been working on an Android app (iOS coming soon) for customers removing external attack surface from services often used on mobile - traditional Exchange, connectivity and collaboration apps too sensitive for raw Internet exposure, etc. It will be in the Play Store soon, but the APK is available now as Beta. You’ll need the new Server version running. 

🔌 Agent improvements

  • Azure NSG: Using multiple subscriptions were problematic, not anymore!
  • GCP: A bug in the UI has been fixed, if you're using GCP orchestration this is worth the upgrade.
  • Revocation: Improvements have been made to revocation. Upgrade!

🐛 Small stuff & bug fixes

  • Golang: Golang has been updated to latest along with relevant libraries, addressing non-critical (in our use) vulnerabilities.
  • Small fixes: The usual things.

📱 Android app (in Beta)

  • Android App! If you have a collaboration app, traditional Exchange or other apps you'd rather were only visible to your mobile workforce, without running an always-on VPN or made acessible to personal devices - this is for you.
  • Biometric login (multi-user), local expiry notifications, notification-permission overlay
  • Background status polling, efficient and battery friendly. Near zero impact, we love Android.
  • In the play store soon. Grab the Beta if you're keen.

Release date: 22nd April 2026

How do I upgrade?

We intentionally require you to update Knocknoc and any orchestration Agents through your operating system, such as Linux package management. This ensures you stay in control of change management and avoids automatic updates being pushed into critical systems.

Follow this guide to upgrade when you're ready.

Back to top