Advanced Search
Search Results
28 total results found
Nginx
Nginx support via script was added in knocknoc-agent version 1.0.30. This allows for flexible ACL management from Knocknoc server for nginx. Setup for the Nginx server To get started, make sure you have knocknoc-agent version 1.0.30 or above installed. The ...
Apache Webserver
Apache 2.4 and above have slightly different ACL syntax, so this page covers how you can use Knocknoc to manage ACLs. The script for managing Apache ACLs as per this document was added to knocknoc-agent in version 1.0.31 Setup for your Apache webserver SSH t...
SAML with Gsuite as IDP
Gsuite can be setup as an Identity Provider if you have Gsuite Business Startter or above plan. The basis of this guide is the official docs here: https://support.google.com/a/answer/6087519?hl=en which should be referred to in case any thing changes from the...
Fortigate Address Groups (Fortinet)
The FortiOS integration allows Knocknoc to dynamically add and remove user's source IP from a named address group. This address group can then be used in whatever Firewall rule you like, opening up many possibilities for securing access to systems behind Fort...
Juniper SRX with Allowlist
Background Knocknoc's Allowlist features provides a very powerful integration with firewalls that support a Dynamic Address Lists. This feature pulls from the Knocknoc server a list of IPs of authenticated users, in the correct group/for the assigned firewal...
Knocker - a cli utility for agents
The Knocker utility is a command-line tool for managing various backends with ease. It provides commands for enabling, disabling, installing, uninstalling, and performing health checks for supported backends. Usage /opt/knocknoc-agent/knocker/knocker <comman...
AWS WAF Ipset
Below is a concise guide for a sysadmin (or developer) to set up and configure AWS WAF with a custom HTML 403 response and integrate it with your update-aws-waf-ipset.sh script (which follows the argument order <ACTION> <ACL_NAME_OR_ID> <IP_ADDRESS>). This gui...
LOOTOTL - Last One Out Turn Off The Lights
Knocknoc keeps a track of the IPs and tries to be kind to users that share IPs. This means that if two users are coming from the same IP, revoking a session for the first user will keep the ACL in place. This is the meaning of: Last One Out Turn Off The Lights...