Ngrok creates a tunnel from the public internet to a port on the local machine. It securely exposes a local web server to the internet and capture all traffic for detailed inspection and replay.

This SonicWALL signature identifies legitimate Ngrok network traffic.