Search Results

Welcome to the Knocknoc User Guide. This will cover basic operations including logging in, logging out and troubleshooting. If you're looking for information on installing or administering Knocknoc, please check out the Admin Guide. Logging into Knocknoc Knock...

On a Linux host as Root, execute the below command to setup and install your Knocknoc server. You will be stepped through the process. The installer runs on Debian, Ubuntu, Redhat, Oracle and Amazon Linux. sudo curl -sSL https://packages.knocknoc.io/setup/setu...

The Orchestration Agent runs on a server to control network access for users on their behalf. This is not an end-user install. It operates in three modes In-line firewall orchestration. Eg: Palo Alto, Fortinet, Check Point, Azure NSG, AWS SG/WAF, Cloudflare, ....

HAProxy is a fantastic reverse proxy with a massive amount of features. Knocknoc has supported HAProxy for years, and integrates with it natively. HAProxy can be a little confusing at first due to its wide array of options and implementations, but for now we'l...

Knocknoc can orchestrate Amazon AWS Security Groups, which essentially provide network level firewalling across various asset types, including EC2 VMs, meaning just-in-time network exposure (and access) for authenticated users, tied to your IDP not to AWS IAM ...

The "Custom Script" Knoc type is simply a script the agent can execute directly on the Agent machine. Linux and macOS agents run shell scripts; from Knocknoc 26.06, Windows agents can also run scripts, executing them as PowerShell ( .ps1) scripts. Note: For se...

Linux comes equipped with a built-in native firewall which Knocknoc orchestrates via "IPSets". IPSets are a powerful and highly efficient way of making a dynamic firewall on a normal Linux machine. A native feature of the Netfilter code, an IPset is an in-memo...

We're excited to announce the release of Knocknoc 6, a major leap forward in attack surface reduction, implemented at speed. This release brings a host of new features and improvements that make Knocknoc even more efficient, user-friendly, and adaptable within...

Knocknoc can authenticate users to an LDAP server like Active Directory, by attempting to bind as that user with their password. This is useful when you have an on-premises LDAP server, and want to allow users to have a single password to manage. Knocknoc conf...

Knocknoc supports up to six identity providers for user logins, and one provider of its own for the admin portal. Separating the admin provider lets MSPs and security teams manage users and Knocs without being granted access to the services being protected. Se...

The following example assumes your Knocknoc instance is located at https://demo.knoc.cloud. Wherever you see that, please substitute it for your own instance URL. Setting Up the IdP Creating An Application Log in to your JumpCloud tenant as an administrator....

Single Sign On using Entra is simple, follow the guide below to configure Knocknoc User and/or Admin SSO, with Entra. The following example assumes your Knocknoc instance is located at https://<hosting instance>.knoc.cloud. Wherever you see that, please substi...

The following example assumes your Knocknoc instance is located at https://demo.knoc.cloud. Wherever you see that, please substitute it for your own instance URL. Setting Up the IdP Create an Application Click Create App Integration Select SAML 2.0 Set an App...

Knocknoc supports local users in addition to SAML/LDAP. Simply add a user, with a username and password. Then assign them to a group or link them within a Knoc. This is helpful for casual users, as you can set an expiry. So for example if you have a web applic...

Current version of Knocknoc server is: 5.0.62, released on Mon, 12 Feb 2024 Current version of knocknoc-agent is: 1.0.28, released on Sat, 24 Feb 2024 

This is an example that lets you use UFW (https://wiki.ubuntu.com/UncomplicatedFirewall) and IPsets to dynamically allowlist IPs for a common host-based firewall.  This is achieved in only a few steps: Install the Knocknoc orchestration agent on the UFW host ...

Knocknoc licensing and pricing can be found on the Knocknoc website. Once you have obtained your license and have either completed the self-hosted install or received the login details for your cloud hosted instance: Copy your license key from the Knocknoc Lic...

Groups in Knocknoc map users to Knocs, and a user can belong to multiple groups. To create a group: In the Knocknoc admin interface, open Identities, select the Groups tab, and click Create Group. Enter a Name. For SAML and Dynamic groups this must match the g...