Documentation (features overview) — Defguard

Cited by

Facts read from this source

• Vpn MFA Report an error

  “Multi-Factor Authentication using our desktop client”

• Multiple vpn locations Report an error

  “Multiple VPN Locations (networks/sites) - with defined access (all users or only Admin group)”

• Self service device setup Report an error

  “Easy device setup by users themselves (self-service)”

• Automatic ip allocation Report an error

  “Automatic IP allocation”

• Wireguard support Report an error

  “Kernel (Linux, FreeBSD/OPNSense/PFSense) and userspace WireGuard support”

• Admin dashboard Report an error

  “Dashboard and statistics overview of connected users/devices for admins”

• Audit logging Report an error

  “User event logging with detailed metadata”

• Audit filtering Report an error

  “Advanced filtering and search by user, module, event type and time range”

• Role based log visibility Report an error

  “Role-based visibility - users can see only their events”

• Grouped logs Report an error

  “Grouped logs by modules (Defguard, enrollment, VPN)”

• Siem streaming Report an error

  “Real-time log streaming to SIEM tools (Enterprise feature)”

• Internal oidc Report an error

  “Defguard is an internal OIDC provider for Single Sign-On.”

• External oidc Report an error

  “Supports external OpenID providers for user authentication.”

• Firewall access rules Report an error

  “Access rules for VPN locations”

• Firewall user group rules Report an error

  “Allow or deny access based on users or groups”

• Firewall realtime Report an error

  “Changes are applied in real time”

• Device posture Report an error

  “Check the security state of a device before it connects to a location”

• Posture checks Report an error

  “Minimum operating system, Linux kernel and Defguard client versions”

• Posture disk encryption Report an error

  “Disk encryption, antivirus, Active Directory membership and device integrity conditions”

• Posture update age Report an error

  “Limits on the age of Windows security updates and Android security patches”

• Posture all checks Report an error

  “Several checks can be assigned to one location, and a device has to satisfy all of them”

• SSO oidc Report an error

  “OpenID Connect based SSO”

• External providers Report an error

  “External OpenID providers for login/account creation (Google/Microsoft/Custom)”

• Ldap sync Report an error

  “LDAP (tested on OpenLDAP) synchronization”

• User UI Report an error

  “Nice UI to manage users”

• User self service Report an error

  “Users self-service (besides typical data management, users can revoke access to granted apps, MFA, WireGuard, etc.)”

• MFA totp Report an error

  “Time-based One-Time Password Algorithm (TOTP - e.g. Google Authenticator)”

• MFA webauthn Report an error

  “WebAuthn / FIDO2 - for hardware key authentication support (e.g. YubiKey, Face ID, Touch ID, ...)”

• MFA email tokens Report an error

  “Email tokens”

• MFA biometric Report an error

  “Biometric-based using the mobile application”

• Remote enrollment Report an error

  “Secure remote (over the internet) user enrollment”

• Onboarding Report an error

  “User onboarding after enrollment”

• Password reset Report an error

  “Self-service for password reset”

• Network devices Report an error

  “Like regular user devices but designed to be used with the Defguard CLI client.”

• Service locations Report an error

  “Special kind of locations that allow establishing automatic VPN connections on system boot.”

• Static ip Report an error

  “Manually assign static IPs to user devices in the VPN network”

• High availability Report an error

  “Scale you deployment to make sure it's always available.”

• Gateway notifications Report an error

  “Gateway disconnect/reconnect notifications”

• Version notifications Report an error

  “New version notifications”

• Webhooks rest API Report an error

  “Webhooks & REST API”

• Implementation language Report an error

  “Build with Rust for portability, security, and speed.”

Scores citing this record

• The DevOps Engineer Access model & connectivity
• The DevOps Engineer Identity, access policy & device posture
• The DevOps Engineer Logs, audit trail & incident response
• The IT Lead Access model & connectivity
• The IT Lead Identity, access policy & device posture
• The IT Lead Logs, audit trail & incident response
• The MSP Technician Access model & connectivity
• The MSP Technician Logs, audit trail & incident response
• The Operations Manager Identity, access policy & device posture
• The Information Security Officer Access model & connectivity
• The Information Security Officer Identity, access policy & device posture
• The Information Security Officer Logs, audit trail & incident response
• The Skeptic Access model & connectivity
• The Skeptic Identity, access policy & device posture