Recently Updated Pages
v26.09
Our biggest release yet. Months of work behind the scenes, now ready. This update gives you more ...
Kemp LoadMaster
Knocknoc integrates with the Kemp LoadMaster to dynamically control network access. Knocknoc dyna...
User Guide
Welcome to the Knocknoc User Guide. This will cover basic operations including logging in, loggin...
Palo Alto
Knocknoc integrates with Palo Alto firewalls and the Panorama management system to dynamically gr...
Knocs
A Knoc is the access rule your users see. It says who can request access to a resource and under ...
Allowlist (EDLs)
The Allowlist backend makes a list of active IP address grants available via the Knocknoc server ...
Cisco (SFMC/Firepower)
The Cisco Secure Firewall Management Console (formerly known as Firepower) integration allows Kn...
Settings
The Settings page is where administrators configure how Knocknoc behaves across the whole deploym...
Fortinet
Knocknoc orchestrates Fortinet FortiGate firewalls - directly or via FortiManager - to dynamicall...
IPFilter
The Knocknoc Agent integrates with IPFilter to dynamically control network access on the host it ...
Specialized Agent
If you have not done so, read the Agent Installation page to learn about Knocknoc Orchestration A...
How trust decisions are made
This page covers the mechanics behind a policy. It explains when access is instant and when it wa...
Trust Engine Overview
The Trust Engine sets conditions on network access. For each Knoc you pick which facts about a co...
Trusted sources
A trusted source is a named list of networks you write down once and point at from several places...
User authentication
User sessions can be created using the API. This is handy for machine to machine authentication, ...
NFT400 - Invalid Response From nft
Agent error code #NFT400 indicates that the agent could not read the nftables sets. Either the li...
NFT100 - Failed to Remove the Address from the Set
Agent error code #NFT100 indicates that nft delete element failed while revoking a grant. The ad...
NFT053 - nftables Set Cannot Hold a Network
Agent error code #NFT053 occurs when a knoc's predefined source is a network, such as 192.168.10...
204053 - No Available Rule Priority
Agent error code #204053 indicates that the agent could not find a free priority number to create...
204052 - Failed to Delete an NSG Rule
Agent error code #204052 indicates that the agent could not delete an NSG rule while revoking a g...