Risky Business · Friday, August 14, 2026
Adam Ponting explains that Knockknock provides a mitigation strategy for products like Fortinet and Palo Alto firewalls, which are often exposed on the internet. By using Knockknock to "firewall a firewall," organizations can hide these assets and gain time to patch, as relying solely on patching is no longer feasible.
“So we've got Fortinet, you've got Palo Alto, which were, you know, they're from security companies. Apparently, and they're getting people owned.”
“The joke is Yo-Yo Doggo, I heard you like firewalls, so I put a firewall on your firewall.”
“So the idea is you can actually use Knockknock to instrument the firewall on a Palo Alto or a Fortinet device to restrict itself from being seen.”
“So you've got a couple of options. You can apply a mitigation like Knockknock, which is going to extend the life you get out of that stuff. But there you options. Patching, it ain't going to do it.”