Advanced Search
Search Results
458 total results found
v26.01
Knocknoc 26.01 Knocknoc 26.01 sharpens the Palo Alto experience for both administrators and end-users, introducing a much simpler configuration option and stronger safeguards. It also adds Cloudflare support, improves multi-node deployments, and delivers broa...
Palo Alto
Knocknoc integrates with Palo Alto firewalls and the Panorama management system to dynamically grant and revoke network access based on authenticated user sessions. Knocknoc updates existing in-policy lists rather than changing policies overall, making dynamic...
Channels and Beta
If you're after the very latest features or changes, and you know what you're doing - below is how to change from the main release channel, to the Beta channel. This does mean you're running Beta code, YMMV, and while you can move from Beta back to Main, it's ...
Backups
This document outlines database and application level backups which may be considered ahead of changes or as part of migrations or testing. We recommend backing up the entire Server and Agent host machines using your standard backup process. Knocknoc keeps its...
TOTP per Knoc
For additional security and identity verification, Knocs support a "Require TOTP code when accessing grant" option. Note that this TOTP is within the Knocknoc product, and is in addition to any MFA provided during an SSO session. For example if you have Entra ...
Agent Error Codes
Palo Alto
Generic External Object Refresh Errors
298000 - External Object Refresh Failed
Agent error code #298000 indicates that the agent failed to refresh an External Dynamic List (EDL) or dynamic external object on a firewall, for reasons that don't fall into more specific error categories. This error typically occurs when: The configured EDL o...
298002 - TLS/SSL Certificate Error
Agent error code #298002 indicates that the agent encountered a TLS/SSL certificate error when attempting to connect to a firewall. The secure connection could not be established because the certificate presented by the firewall failed validation. This error o...
298003 - Authentication Failed
Agent error code #298003 indicates that a firewall or load balancer rejected the credentials the agent presented. Refreshing an external object such as an External Dynamic List is the most common case, but any request the agent makes can fail this way, includi...
Generic Agent Errors
299999 - Internal Agent Error
Agent error code #299999 is reserved for unexpected internal agent failures that don't fit into any other category. It serves as a catch-all for unanticipated error conditions. If you encounter this error, it indicates an unexpected condition occurred within t...
DigitalOcean Firewalls
Knocknoc can orchestrate DigitalOcean Cloud Firewalls to provide dynamic IP network allowlisting for your Droplets, Load Balancers, and Kubernetes Clusters. Knocknoc manages individual firewall rules, adding and removing source (or destination) IP addresses as...
Sonicwall
200050 - Username Mapping Failed
Agent error code #200050 occurs when the Knocknoc agent attempts to map a username to an IP address on a Palo Alto Networks firewall, but the firewall rejects the request. User-ID mapping is a PAN-OS feature that associates usernames with IP addresses. User ma...
298001 - Connection Timed Out
Agent error code #298001 indicates that the agent sent a request to a firewall and no response arrived before the agent gave up. It covers any call the agent makes to the device, not only an external object refresh: on a Palo Alto Networks firewall it also cov...
298004 - Authorization Error
Agent error code #298004 indicates that the agent successfully authenticated with the firewall, but lacks the necessary permissions to perform the requested operation. This error is distinct from authentication errors (#298003), where the credentials themselve...