Recently Updated Pages
IPsets with Shorewall
This is an example that lets you use Shorewall https://shorewall.org/index.html and IPsets to dyn...
Time for NTP
NTP It's important that ALL the servers within the Knocknoc cluster and agents are synchronized a...
IPsets with UFW
This is an example that lets you use UFW (https://wiki.ubuntu.com/UncomplicatedFirewall) and IPse...
IPSet (Linux Netfilter/IPTables)
Linux comes equipped with a built-in native firewall which Knocknoc orchestrates via "IPSets". IP...
v26.02
Knocknoc 26.02 Knocknoc 26.02 is a platform-expansion release with a security spine: we’ve pushed...
Web applications (layer-7 filtering)
There are various options for protecting your web application using Knocknoc Local Linux firewal...
Server installation (on premise)
On a Linux host as Root, execute the below command to setup and install your Knocknoc server. You...
User Guide
Welcome to the Knocknoc User Guide. This will cover basic operations including logging in, loggin...
v6.0
We're excited to announce the release of Knocknoc 6, a major leap forward in attack surface reduc...
v26.04
Knocknoc 26.04 Knocknoc 26.04.1 is a size-optimized release focused on expanding deployment flexi...
Cisco (SFMC/Firepower)
The Cisco Secure Firewall Management Console (formerly known as Firepower) integration allows Kn...
Firewall Manager access (IT MSP)
An IT managed services provider maintained multiple Fortinet firewalls on behalf of customers, of...
Financial services data partner, secure web upload
Use case: Trusted partners secure access to web application A financial services provider relied ...
LOOTOTL - Last One Out Turn Off The Lights
Knocknoc keeps a track of source IP addresses and tries to be kind to users that share IPs. Think...
SSH
Use case: Eliminating SSH attack surface in a distributed environment A large distributed enterpr...
Use cases (overview)
Knocknoc use cases Knocknoc is extremely versatile and can enable just in time network access con...
v25.12
Knocknoc 25.12 Knocknoc 25.12 is a Windows-first release focused on making Just-In-Time (JIT) acc...
AWS (EC2) Security Groups
Knocknoc can orchestrate Amazon AWS Security Groups, which essentially provide network level fire...
Licensing Knocknoc
Knocknoc licensing and pricing can be found on the Knocknoc website. Once you have obtained your ...
Agent as a Reverse Proxy
The orchestration agent can be configured to reverse-proxy traffic, simply by enabling this mode ...