Recently Updated Pages
Entra ID (SSO, Azure AD)
Single Sign On using Entra is simple, follow the guide below to configure Knocknoc User and/or Ad...
KEMP003 - Kemp LoadMaster TLS/SSL Certificate Error
Agent error code #KEMP003 indicates that Knocknoc could not establish a trusted TLS connection to...
FSTL003 - Fastly API TLS Error
Agent error code #FSTL003 indicates the TLS handshake with the Fastly API failed: the certificate...
F5003 - F5 BIG-IP TLS/SSL Certificate Error
Agent error code #F5003 indicates that the TLS handshake with the F5 BIG-IP management endpoint f...
PFS003 - pfSense TLS/SSL Certificate Error
Agent error code #PFS003 indicates that the agent could not verify the TLS certificate presented ...
OPN003 - OPNsense TLS Certificate Error
Agent error code #OPN003 indicates that the agent could not verify the TLS certificate presented ...
CHKP002 - Check Point TLS/SSL Certificate Error
Agent error code #CHKP002 indicates that the Knocknoc agent opened a connection to the Check Poin...
Integrations Overview
An integration is one firewall, proxy, cloud platform or on-host enforcement point, plus the agen...
298002 - TLS/SSL Certificate Error
Agent error code #298002 indicates that the agent encountered a TLS/SSL certificate error when at...
Channels and Beta
If you're after the very latest features or changes, and you know what you're doing - below is ho...
Blocked Address Lists
Note: Blocked address lists are a premium add-on. Your Knocknoc license must include them before ...
Legacy Knocs
Before the Trust Engine, each Knoc carried its own list of allowed source addresses and an option...
SIEM events
Knocknoc writes a structured line for every notable action and sends them wherever you set up und...
Troubleshooting
"IP intelligence degraded" The sidebar’s Health panel shows IP intelligence degraded when a conne...
Threat intelligence
Admin > Trust Engine > Threat intelligence is where you connect the sources a policy's restrictio...
Trust Engine Overview
The Trust Engine sets conditions on network access. For each Knoc you pick which facts about a co...
How trust decisions are made
This page covers the mechanics behind a policy. It explains when access is instant and when it wa...
Fortinet
Knocknoc orchestrates Fortinet FortiGate firewalls - directly or via FortiManager - to dynamicall...
Manage user sessions
Invalidating sessions from the admin portal You can sign users or admins out in bulk from the adm...
Secure configuration guide
Scope This guide meets the FedRAMP Secure Configuration Guide rule SCG-CSO-RSC. It covers how to ...