Search Results

Knocknoc integrates with Okta to dynamically control which IPs are allowed to access apps protected by Okta. The integration uses the Okta API to maintain a single Network Zone of type IP Zone. As users authenticate to Knocknoc and grants expire, the network z...

Knocknoc integrates with OPNsense by managing the contents of a pre-existing firewall alias via the OPNsense REST API. When a user authenticates the agent adds their IP to the alias; when the grant expires or the user logs out, the IP is removed. The agent nev...

Knocknoc integrates with pfSense to dynamically control network access.  The Knocknoc agent maintains a host alias on pfSense via the pfRest API. As users authenticate and grants expire, the alias's address list is updated and pending firewall changes are appl...

Agent error code #OPN000 indicates that the OPNsense API rejected the credentials provided by the agent. The firewall returned HTTP 401 (Unauthorized). This error is distinct from authorization failures (#OPN001), which occur when the credentials are valid but...

Agent error code #OPN001 indicates that the agent authenticated with OPNsense successfully, but the API user lacks the privileges required to manage aliases. OPNsense returned HTTP 403 (Forbidden). This error is distinct from authentication failures (#OPN000),...

Agent error code #OPN002 indicates that an OPNsense API call did not complete within the agent's timeout window. The firewall accepted the connection but did not return a response in time. This error is distinct from connection failures (#OPN004) and DNS failu...

Agent error code #OPN003 indicates that the agent could not verify the TLS certificate presented by OPNsense. The TLS handshake failed before any API request could be sent. This error is distinct from connection refused (#OPN004) or timeout (#OPN002) errors. E...

Agent error code #OPN004 indicates that the OPNsense host actively refused the connection from the agent. The TCP handshake reached the host but no service was listening on the requested port. This error is distinct from timeouts (#OPN002), which mean the host...

Agent error code #OPN005 indicates that the agent host could not resolve the OPNsense hostname to an IP address. The request failed before any network connection was attempted. This error is distinct from connection refused (#OPN004) and timeout (#OPN002), whi...

Agent error code #OPN006 is the fallback code for OPNsense API errors that don't match a more specific classification. The agent reached the firewall and the call completed, but the response indicated a transport-level or unclassified failure. This error is di...

Agent error code #OPN100 indicates that the alias name configured in the Knocknoc ACL does not exist on OPNsense. The firewall returned HTTP 404 when the agent looked up the alias. This error is distinct from authorization failures (#OPN001), which occur when ...

Agent error code #OPN101 indicates that the agent could reach the alias listing endpoint on OPNsense but the response was unexpected (non-2xx HTTP status or malformed body). The lookup is required before every grant and revocation, so this error blocks alias u...

Agent error code #OPN102 indicates that OPNsense rejected an attempt to add an entry to the configured alias. The agent located the alias successfully but the add request did not complete. This error is distinct from authorization failures (#OPN001), which pre...

Agent error code #OPN103 indicates that OPNsense rejected an attempt to remove an entry from the configured alias. The agent located the alias successfully but the delete request did not complete. This error is distinct from authorization failures (#OPN001), w...

Agent error code #OPN200 indicates that the alias entry was added or removed successfully, but the subsequent apply step failed. Without the apply, the change is not persisted to the saved configuration and will be lost on the next filter reload. This error is...

Agent error code #PFS000 indicates that the agent could not reach the pfSense REST API at all. The request failed before any authentication or alias operation could take place. This error is distinct from authentication failures (#PFS001), authorization failur...