Use cases (overview)

Knocknoc use cases

Knocknoc enables just-in-time network access control. These are some of the ways it has been deployed.

SSH Bastion hosts: Network based IP allowlisting: add MFA, link in your IdP, remove the servers attack surface (read more)

High security subnets: Just in time network allowlisting, ingress or egress (read more) 

Remove VPN edge risks: Prevent stolen credentials and brute-force attacks, securing against zero-day exploits (read more)

Remove RDP attack surface: Require a central login before RDP is exposed at the network layer (read more)

Risky Web Apps: Secure with just-in-time access, removing raw internet exposure (read more)

Firewalls: Remove exposure to zero-day attacks (read more)

JIT AWS EC2 or Azure exposure: Just in time network allowlisting via dynamic IP-address trust updates

Windows RDP: Dynamically update Windows on-host firewall to prevent LAN exposure, deploy in minutes

Azure Portal: Restrict Azure Portal to allowlisted IP addresses only 

Manage MSSP Firewall changes - Don't expose your firewall management interfaces to the raw internet (read more)

Layer-7 reverse proxy filtering tied to your IdP, require a login before exposing "/admin" (read more)

These are only a few of the ways Knocknoc has been deployed to remove attack surface.