Recently Updated Pages
FortiOS, FortiProxy, Palo Alto, or SSL VPN
Protect your existing Fortigate or Palo Alto assets from direct internet or internal exposure by ...
Apache Webserver
Apache 2.4 and above have slightly different ACL syntax, so this page covers how you can use Knoc...
HAProxy tips and tricks
Checking to see if an ACL is present in HAProxy For when you aren't sure if the whole process is ...
IPsets with Shorewall
This is an example that lets you use Shorewall https://shorewall.org/index.html and IPsets to dyn...
Time for NTP
NTP It's important that ALL the servers within the Knocknoc cluster and agents are synchronized a...
IPsets with UFW
This is an example that lets you use UFW (https://wiki.ubuntu.com/UncomplicatedFirewall) and IPse...
IPSet (Linux Netfilter/IPTables)
Linux comes equipped with a built-in native firewall which Knocknoc orchestrates via "IPSets". IP...
v26.02
Knocknoc 26.02 Knocknoc 26.02 is a platform-expansion release with a security spine: we’ve pushed...
Web applications (layer-7 filtering)
There are various options for protecting your web application using Knocknoc Local Linux firewal...
Server installation (on premise)
On a Linux host as Root, execute the below command to setup and install your Knocknoc server. You...
User Guide
Welcome to the Knocknoc User Guide. This will cover basic operations including logging in, loggin...
v6.0
We're excited to announce the release of Knocknoc 6, a major leap forward in attack surface reduc...
Cisco (SFMC/Firepower)
The Cisco Secure Firewall Management Console (formerly known as Firepower) integration allows Kn...
Firewall Manager access (IT MSP)
An IT managed services provider maintained multiple Fortinet firewalls on behalf of customers, of...
Financial services data partner, secure web upload
Use case: Trusted partners secure access to web application A financial services provider relied ...
LOOTOTL - Last One Out Turn Off The Lights
Knocknoc keeps a track of source IP addresses and tries to be kind to users that share IPs. Think...
SSH
Use case: Eliminating SSH attack surface in a distributed environment A large distributed enterpr...
Use cases (overview)
Knocknoc use cases Knocknoc is extremely versatile and can enable just in time network access con...
v25.12
Knocknoc 25.12 Knocknoc 25.12 is a Windows-first release focused on making Just-In-Time (JIT) acc...
AWS (EC2) Security Groups
Knocknoc can orchestrate Amazon AWS Security Groups, which essentially provide network level fire...