Features overview

Remote Access with WireGuard® VPN 2FA/MFA:

  • Multiple VPN Locations (networks/sites) - with defined access (all users or only Admin group)

  • Import your current WireGuard server configuration (with a wizard!)

  • Easy device setup by users themselves (self-service)

  • Automatic IP allocation

  • Kernel (Linux, FreeBSD/OPNSense/PFSense) and userspace WireGuard support

  • Dashboard and statistics overview of connected users/devices for admins

Defguard is not an official WireGuard project, and WireGuard is a registered trademark of Jason A. Donenfeld.

  • User event logging with detailed metadata

  • Advanced filtering and search by user, module, event type and time range

  • Role-based visibility - users can see only their events

  • Grouped logs by modules (Defguard, enrollment, VPN)

  • Real-time log streaming to SIEM tools (Enterprise feature)

OpenID Connect

  • Access rules for VPN locations

  • Allow or deny access based on users or groups

  • Changes are applied in real time

Identity Management:

Multi-Factor/2FA Authentication

Account Lifecycle Management:

Like regular user devices but designed to be used with the Defguard CLI client.

Special kind of locations that allow establishing automatic VPN connections on system boot.

Manually assign static IPs to user devices in the VPN network

Scale you deployment to make sure it's always available.

Notifications

Integrations

Webhooks & REST API

Build with Rust for portability, security, and speed.

Was this helpful?