Recently Updated Pages
Agent installation
Agent requirements The agent will attempt to connect to your Knocknoc server using https on port...
Palo Alto
Passive, Active or a combination Passive - Knocknoc's Allowlist features provides a passive inte...
v8.0
Knocknoc 8.0 Knocknoc 8.0 delivers a powerful set of updates, enhancing validation on connecting...
Click to grant/revoke
For additional security and temporal access control, Knoc's support a "click to grant" and "click...
VPNs, internal addresses and access
You may want to limit the ability to access a Knoc, depending on where your user is logging in to...
Knocknoc client (scriptable login)
To gain access to underlying networks and systems, end-users log in to Knocknoc interactively vi...
FortiManager
The FortiManager is used to manage multiple Fortinet devices, including Fortigate firewalls, APs,...
Getting Started
Cloud SaaS or self-hosted server? You can run your Knocknoc server either as a managed cloud ins...
HAProxy + KAT
Sometimes IP address restrictions or IP-based allowlisting is not enough, think: airport lounge, ...
HAProxy
HAProxy is a fantastic reverse proxy with a massive amount of features. Knocknoc has supported HA...
IPSet (Linux Netfilter/IPTables)
IPsets are a powerful and highly efficient way of making a dynamic firewall on a normal Linux mac...
Microsoft Azure NSG
Overview This integration allows for IP addresses to be dynamically managed within Azure Network...
Updates and upgrades
The Knocknoc software is managed by your operating system, as such updates can be managed within ...
Create users
User creation varies depending on the authentication source in use. Local users will need to be c...
Settings
The Settings in Knocknoc allows you to configure some of the basic setup like authentication sour...
Admins
Admins in Knocknoc can login to /admin on their Knocknoc server, however they can't be granted AC...
Create groups
Groups in Knocknoc map users to Knocs. Users can be assigned to multiple groups, to create a grou...
How Knocknoc removes attack surface
Knocknoc enables you to remove the attack surface of systems, by enacting just-in-time network/ap...
LDAP troubleshooting tips
The Knocknoc server will need to be able to contact your LDAP server on port 389 or 636. This is ...
Agent registration
API keys can be created to allow just-in-time orchestration Agent registration, which is suitable...