# Features

- [Overview](/2.0/features/overview.md)
- [Zero-Trust VPN with 2FA/MFA](/2.0/features/wireguard.md)
- [Create/Manage VPN Location](/2.0/features/wireguard/create-your-vpn-network.md)
- [Network overview](/2.0/features/wireguard/network-overview.md)
- [Multi-Factor Authentication (MFA/2FA)](/2.0/features/wireguard/multi-factor-authentication-mfa-2fa.md): Defguard is the sole VPN solution that genuinely implements Multi-Factor Authentication (MFA) before a WireGuard® VPN connection is established, significantly enhancing security against cyberattacks.
- [Internal SSO based MFA](/2.0/features/wireguard/multi-factor-authentication-mfa-2fa/internal-sso-based-mfa.md)
- [External SSO based MFA](/2.0/features/wireguard/multi-factor-authentication-mfa-2fa/external-sso-based-mfa.md)
- [Remote desktop client configuration](/2.0/features/wireguard/remote-desktop-activation.md): How to manually generate token for user as an administrator.
- [VPN & Client behaviour customization](/2.0/features/wireguard/behavior-customization.md)
- [DNS and domains](/2.0/features/wireguard/dns-and-domains.md)
- [Executing custom gateway commands](/2.0/features/wireguard/executing-custom-gateway-commands.md)
- [Remote user enrollment](/2.0/features/remote-user-enrollment.md)
- [User onboarding after enrollment](/2.0/features/remote-user-enrollment/user-onboarding-after-enrollment.md)
- [Automatic (real time) desktop client configuration & sync](/2.0/features/remote-user-enrollment/automatic-real-time-desktop-client-configuration.md)
- [Internal SSO (OpenID Connect Provider)](/2.0/features/openid-connect.md)
- [External SSO/OpenID providers](/2.0/features/external-openid-providers.md)
- [Google](/2.0/features/external-openid-providers/google.md)
- [Microsoft](/2.0/features/external-openid-providers/microsoft.md)
- [Okta](/2.0/features/external-openid-providers/okta.md)
- [JumpCloud](/2.0/features/external-openid-providers/jumpcloud.md)
- [Keycloak](/2.0/features/external-openid-providers/keycloak.md)
- [Zitadel](/2.0/features/external-openid-providers/zitadel.md)
- [Custom](/2.0/features/external-openid-providers/custom.md)
- [External OIDC secure enrollment](/2.0/features/external-openid-providers/external-oidc-secure-enrollment.md)
- [LDAP and Active Directory integration](/2.0/features/ldap-and-active-directory-integration.md)
- [Configuration](/2.0/features/ldap-and-active-directory-integration/configuration.md): How to configure connection between Defguard instance and LDAP.
- [Settings table](/2.0/features/ldap-and-active-directory-integration/settings-table.md): List with description of settings for LDAP found in settings page.
- [Two-way LDAP and Active Directory synchronization](/2.0/features/ldap-and-active-directory-integration/two-way-ldap-and-active-directory-synchronization.md)
- [Access Control List](/2.0/features/access-control-list.md)
- [ACL Aliases](/2.0/features/access-control-list/acl-aliases.md)
- [Implementation Details](/2.0/features/access-control-list/firewall-internals.md)
- [Network devices](/2.0/features/network-devices.md)
- [Activity & Audit logs](/2.0/features/activity-log.md)
- [Audit Log Streaming to SIEM systems](/2.0/features/activity-log/activity-log-streaming.md): This feature is designed to help teams centralize visibility into user actions, security events, and system behavior by integrating with tools they already use for monitoring and incident response.
- [Supported SIEM systems integrations](/2.0/features/activity-log/activity-log-streaming/activity-log-integrations.md): List of supported services to stream activity logs into.
- [Vector integration guide](/2.0/features/activity-log/activity-log-streaming/activity-log-integrations/vector-integration-guide.md): How to stream activity logs to vector.
- [Logstash integration guide](/2.0/features/activity-log/activity-log-streaming/activity-log-integrations/logstash-integration-guide.md): How to stream activity logs to logstash.
- [Notifications](/2.0/features/notifications.md)
- [Email notifications](/2.0/features/notifications/setting-up-smtp-for-email-notifications.md)
- [Gateway notifications](/2.0/features/notifications/gateway-notifications.md)
- [New version notifications](/2.0/features/notifications/new-version-notifications.md)
- [Integrations](/2.0/features/integrations.md)
- [Webhooks](/2.0/features/integrations/webhooks.md)
- [REST API](/2.0/features/integrations/api-tokens.md)
- [OPSense Configuartion](/2.0/features/gateway.md)
- [SSH Authentication](/2.0/features/ssh-authentication.md)
- [Forward auth](/2.0/features/forward-auth.md)
- [YubiKey Provisioning](/2.0/features/yubikey-provisioning.md): Provisioner repository: https://github.com/DefGuard/YubiKey-Provision
- [User SNAT bindings](/2.0/features/user-snat-bindings.md)
- [Service locations](/2.0/features/service-locations.md)
- [Desktop client auto-provisioning](/2.0/features/desktop-client-auto-provisioning.md)
- [Auto-provisioning in Windows environments](/2.0/features/desktop-client-auto-provisioning/auto-provisioning-in-windows-environments.md)
- [On-premise Active Directory](/2.0/features/desktop-client-auto-provisioning/auto-provisioning-in-windows-environments/on-premise-active-directory-environments.md)
- [Entra ID](/2.0/features/desktop-client-auto-provisioning/auto-provisioning-in-windows-environments/entra-id-environments.md)
- [Generating enrollment tokens with Defguard REST API](/2.0/features/desktop-client-auto-provisioning/generating-enrollment-tokens-with-defguard-rest-api.md)
- [Static IP assignment](/2.0/features/static-ip-assignment.md)