Access model & connectivity — found from sitemap — Defguard

Cited by

Facts read from this source

• Self hosted Report an error

  “Self-hosted. Real MFA. Full control. No cloud dependency.”

• Components Report an error

  “WireGuard® VPN, built-in SSO/Identity Provider, granular firewall access control, and zero-touch device enrollment—all running on your infrastructure.”

• MFA on tunnel Report an error

  “TOTP/email + per-session pre-shared keys; every connection requires MFA, not just the app login”

• Biometric approval Report an error

  “Touch ID / Face ID via Mobile Client to authorize desktop connections”

• SSO idp support Report an error

  “Works with Google Workspace, Microsoft Entra ID, Okta, JumpCloud, and any OIDC provider”

• Isolated control plane Report an error

  “Fully isolated control plane — Core, database, and identity integrations are never exposed to the Internet”

• Attack surface Report an error

  “Minimal attack surface — only the Edge (HTTPS) and Gateway (single UDP port) are public”

• Mtls Report an error

  “mTLS everywhere — mutual TLS secures every internal component connection end-to-end”

• Gateway resilience Report an error

  “Resilient by default — gateways keep operating even if the Core goes down”

• Open source Report an error

  “Open source Inspect, audit, and contribute to the code running your infrastructure”

• Public pentests Report an error

  “Public pentests Independent security audits published openly”

• Sbom cve Report an error

  “Daily SBOM/CVE reports Signed images and binaries, supply-chain best practices”

• ISO 27001 certified Report an error

  “ISO 27001 certified Developed in the EU (Poland)”

• Internal SSO oidc Report an error

  “Internal SSO Full OpenID Connect provider out of the box”

• Ldap ad sync Report an error

  “Two-way LDAP & Active Directory sync Bi-directional, with automatic enrollment of synced users”

• Identity based acl Report an error

  “Identity-based ACL Firewall rules driven by SSO users and groups (RBAC)”

• Zero downtime rules Report an error

  “Zero-downtime rules deployment Aliases, pre-defined locations, no service interruption”

• Gateway platforms Report an error

  “Multi-platform gateways Linux, FreeBSD, NetBSD, and a native OPNsense plugin”

• Realtime sync Report an error

  “Real-time config sync Every change propagates to all clients in ~30 seconds (Enterprise)”

• Native clients Report an error

  “Native apps Windows, macOS, Linux, iOS, Android, plus a CLI client”

• Client vendor lockin Report an error

  “Any WireGuard® server The client isn’t locked to Defguard”

• Multi instances Report an error

  “Multiple instances & locations All sites and customers in one client; ideal for MSPs”

• Traffic policies Report an error

  “Traffic policies Full-tunnel or split routing, user-selectable or admin-enforced”

• Active active ha Report an error

  “Active-active HA Multiple gateways and edges per location, no single point of failure”

• Pre logon vpn Report an error

  “Pre-logon VPN Tunnel up before user login; domain auth and policy from boot”

• Always on vpn Report an error

  “Always-on VPN Persistent, auto-reconnecting connections for managed devices”

• Admin device management Report an error

  “Admin-only device management Block non-Defguard clients, lock down self-service”

• Audit logs Report an error

  “Activity & audit logs Every admin action and connection traceable”

• Siem streaming Report an error

  “SIEM log streaming Feed your existing security stack”

• Regulatory alignment Report an error

  “Supports ISO 27001, NIS2, GDPR, and HIPAA compliance; full data residency on your hardware”

• Entity Report an error

  “© 2026 defguard sp z o.o”

• Free license Report an error

  “Get free license”

Scores citing this record

• The DevOps Engineer Access model & connectivity
• The DevOps Engineer Identity, access policy & device posture
• The DevOps Engineer Deployment, API & administration
• The DevOps Engineer Architecture, reliability & security assurance
• The DevOps Engineer European sovereignty
• The IT Lead Access model & connectivity
• The IT Lead Identity, access policy & device posture
• The IT Lead Logs, audit trail & incident response
• The IT Lead Deployment, API & administration
• The IT Lead Architecture, reliability & security assurance
• The IT Lead European sovereignty
• The MSP Technician Access model & connectivity
• The MSP Technician Identity, access policy & device posture
• The MSP Technician Deployment, API & administration
• The MSP Technician Architecture, reliability & security assurance
• The Operations Manager Access model & connectivity
• The Operations Manager Identity, access policy & device posture
• The Operations Manager Logs, audit trail & incident response
• The Operations Manager Deployment, API & administration
• The Operations Manager Architecture, reliability & security assurance
• The Operations Manager European sovereignty
• The Information Security Officer Access model & connectivity
• The Information Security Officer Identity, access policy & device posture
• The Information Security Officer Deployment, API & administration
• The Information Security Officer Architecture, reliability & security assurance
• The Information Security Officer European sovereignty
• The Skeptic Access model & connectivity
• The Skeptic Identity, access policy & device posture
• The Skeptic Logs, audit trail & incident response
• The Skeptic Deployment, API & administration
• The Skeptic Architecture, reliability & security assurance