https://cybertoolchain.io/tools/knocknoc New releases and features in Knocknoc, tracked by The Cyber Toolchain. en Thu, 29 Oct 2026 07:53:21 GMT https://docs.knocknoc.io/books/changelog-and-roadmap/page/v2610 https://docs.knocknoc.io/books/changelog-and-roadmap/page/v2610 Thu, 29 Oct 2026 07:53:21 GMT Knocknoc adds Spur and IPinfo threat intelligence, native Splunk, Cribl, and Microsoft Sentinel integrations, and predefined network management in v26.10⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Adds `Spur` and `IPinfo` threat intelligence integrations to the Trust Engine to assess connection risk — including residential proxies, commercial VPNs, and Tor exit nodes — after authentication but before network access opens, with support for `BYOK` (bring-your-own credentials) or Knocknoc-provided options, and sends Knocknoc security and access events directly to `Splunk`, `Splunk Cloud`, `Cribl`, and `Microsoft Sentinel` without additional log collectors or storage pipelines, supporting multiple simultaneous destinations and a new SIEM integration view showing delivery status and failure details.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Adds predefined networks that can be defined once and reused across access configurations and security policies, with controls to decide whether active access ends immediately or expires naturally when a network range is removed, and lets users select specific network sources rather than opening access to all available sources, where predefined networks are configured to allow this. • Improves device integrations: generates `Palo Alto` and `Panorama` device API keys directly within the Knocknoc setup workflow; processes access changes independently per device so a slow or unreachable firewall no longer holds up grants on healthy devices; adds network-range grant support across `MikroTik`, `SonicWall`, `Sophos`, `Cisco Firepower`, `Azure`, `Cloudflare`, `Fortinet`, `nftables`, and `ipset`; improves batching for `F5` and `Cloudflare` to reduce repetitive device writes during bursts of access activity; and moves `pfSense` to network-compatible alias types for new configurations while existing configurations continue working. • Adds a unified view of system and orchestration agent health — including certificate, licensing, threat-intelligence, agent compatibility, and server consistency issues — with historical performance data and links to troubleshooting guidance, and lets users save frequently used portal views and personalise layouts to return quickly to the information that matters most. • Configuration audit log now captures richer before-and-after change information, and sessions can be followed into the audit log with exportable identity and session detail. • Adds the ability to terminate administrator sessions on demand, in addition to the existing user-session termination feature, restricts where administrators can sign in, and applies smarter protection against account lockouts. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/knocknoc https://docs.knocknoc.io/books/changelog-and-roadmap https://docs.knocknoc.io/books/changelog-and-roadmap Wed, 02 Sep 2026 10:38:07 GMT Knocknoc 26.08 adds Fastly ACL integration and native nftables enforcement. • Adds Fastly ACL integration for network access control enforcement. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/knocknoc https://docs.knocknoc.io/books/changelog-and-roadmap/page/v2608 https://docs.knocknoc.io/books/changelog-and-roadmap/page/v2608 Tue, 01 Sep 2026 07:33:31 GMT Knocknoc v26.08 adds Fastly ACL and native nftables enforcement, plus improved Palo Alto visibility and admin diagnostics. • Adds Fastly ACL enforcement as a new supported enforcement target. • Adds native nftables enforcement support. • Improves Palo Alto visibility for administrators. • Improves operational diagnostics tooling for administrators. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/knocknoc