Search Results

Knocknoc integrates with Palo Alto firewalls and the Panorama management system to dynamically grant and revoke network access based on authenticated user sessions. Knocknoc updates existing in-policy lists rather than changing policies overall, making dynamic...

If you're after the very latest features or changes, and you know what you're doing - below is how to change from the main release channel, to the Beta channel. This does mean you're running Beta code, YMMV, and while you can move from Beta back to Main, it's ...

Knocknoc keeps its data in files on disk and in a database, so back up both. Backing up the whole machine or VM covers everything on this page. Which database you are on decides which of the next two sections to follow. Recent installations use PostgreSQL, and...

For additional security and identity verification, Knocs support a "Require TOTP code when accessing grant" option. Note that this TOTP is within the Knocknoc product, and is in addition to any MFA provided during an SSO session. For example if you have Entra ...

Agent error code #298000 indicates that the agent failed to refresh an External Dynamic List (EDL) or dynamic external object on a firewall, for reasons that don't fall into more specific error categories. This error typically occurs when: The configured EDL o...

Agent error code #298002 indicates that the agent encountered a TLS/SSL certificate error when attempting to connect to a firewall. The secure connection could not be established because the certificate presented by the firewall failed validation. This error o...

Agent error code #298003 indicates that a firewall or load balancer rejected the credentials the agent presented. Refreshing an external object such as an External Dynamic List is the most common case, but any request the agent makes can fail this way, includi...

Agent error code #299999 is reserved for unexpected internal agent failures that don't fit into any other category. It serves as a catch-all for unanticipated error conditions. If you encounter this error, it indicates an unexpected condition occurred within t...

Knocknoc can orchestrate DigitalOcean Cloud Firewalls to provide dynamic IP network allowlisting for your Droplets, Load Balancers, and Kubernetes Clusters. Knocknoc manages individual firewall rules, adding and removing source (or destination) IP addresses as...

Agent error code #200050 occurs when the Knocknoc agent attempts to map a username to an IP address on a Palo Alto Networks firewall, but the firewall rejects the request. User-ID mapping is a PAN-OS feature that associates usernames with IP addresses. User ma...

Agent error code #298001 indicates that the agent sent a request to a firewall and no response arrived before the agent gave up. It covers any call the agent makes to the device, not only an external object refresh: on a Palo Alto Networks firewall it also cov...

Agent error code #298004 indicates that the agent successfully authenticated with the firewall, but lacks the necessary permissions to perform the requested operation. This error is distinct from authentication errors (#298003), where the credentials themselve...

Agent error code #298005 indicates that the agent attempted to connect to a firewall, but the connection was actively refused. The firewall's host is reachable, but nothing is listening on the specified port, or a firewall rule is blocking the connection. This...