Use cases (overview)

Knocknoc use cases

Knocknoc isenables extremely versatile and can enable just in just-in-time network access controlcontrol. andThese solveare manysome useof casesthe acrossways variousit industrieshas andbeen technologies.deployed.

SSH Bastion hosts: Network based IP allowlisting: add MFA, link in your IdP, remove the servers attack surface (read more)

High security subnets: Just in time network allowlisting, ingress or egress (read more) 

Remove VPN edge risks: Prevent stolen credentials and brute-force attacks, securing against zero-day exploits (read more)

Remove RDP attack surface: Require a central login before RDP is exposed at the network layer (read more)

Risky Web Apps: Secure with just-in-time access, removing raw internet exposure (read more)

Firewalls: Remove exposure to zero-day attacks (read more)

JIT AWS EC2 or Azure exposure: Just in time network allowlisting via dynamic IP-address trust updates

Windows RDP: Dynamically update Windows on-host firewall to prevent LAN exposure, deploy in minutes

Azure Portal: Restrict Azure Portal to allowlisted IP addresses only 

Manage MSSP Firewall changes - Don't expose your firewall management interfaces to the raw internet (read more)

Layer-7 reverse proxy filtering tied to your IdP, require a login before exposing "/admin" (read more)

ThisThese isare only a few of the ways Knocknoc has been deployed to remove attack surface and enable just in time network level access control.surface.