Recently Updated Pages
FortiOS, FortiProxy, Palo Alto, or SSL VPN
Protect your existing Fortigate or Palo assets from direct internet or internal exposure by intro...
Palo Alto
Passive, Active or a combination Passive - Knocknoc's Allowlist features provides a passive inte...
Updates and Upgrades
The Knocknoc software is managed by your operating system, as such updates can be managed within ...
SAML with Authentik
In this example our Authentik instance is hosted at https://auth.example.com/ and is running vers...
Getting Started
Cloud SaaS or self-hosted server? You can run your Knocknoc server either as a managed cloud ins...
How Knocknoc removes attack surface
Knocknoc enables you to remove the attack surface of systems, by enacting just-in-time network/ap...
v7.5
Knocknoc 7.5 🚀 Knocknoc 7.5 marks a major milestone in our journey to redefine secure network a...
Custom Script
The "Custom Script" Knoc type is simply a script the agent can execute that takes a fixed set of ...
Additional client IP addresses
Capturing additional client IP addresses A client may exhibit behaviour where multiple IP addres...
v7.0
Announcing Knocknoc 7.0 We’re excited to introduce Knocknoc 7.0, a landmark release packed wit...
Click to Grant/Revoke
For additional security and temporal access control, Knoc's support a "click to grant" and "click...
Agent Installation
For the admin who know what they need, and needs a fast way to get it, you can use this command t...
HAProxy
HAProxy is a fantastic reverse proxy with a massive amount of features. Knocknoc has supported HA...
Allowlist (EDLs)
The Allowlist backend makes a list of active IP address grants available via the Knocknoc server ...
Juniper SRX
Passive, Active or a combination Passive - Knocknoc's Allowlist features provides a passive inte...
Fortigate Address Groups (Fortinet)
The FortiOS integration allows Knocknoc to dynamically add and remove user's source IP from a na...
v6.0
We're excited to announce the release of Knocknoc 6, a major leap forward in attack surface reduc...
IPSet (Linux Netfilter/IPTables)
IPsets are a powerful and highly efficient way of making a dynamic firewall on a normal Linux mac...
SAML with OKTA
The following example assumes your Knocknoc instance is located at https://demo.knoc.cloud. Where...
SAML with EntraID (Azure AD)
The following example assumes your Knocknoc instance is located at https://demo.knoc.cloud. Where...