License limits

How to check license limits and current usage?

General information

1. Click on limits in top right corner

   
2. In this view, you can check how much of your limit is left.

   

Detailed information

1. Go to "Settings"

   
2. Go to "License" tab

   
3. Check "License management" section

   

Here you can check:

• Current plan

• License type

• Support type

• Licence expiry date

• Current usage

• Available limits

• Enterprise features (Feature flags)

Trying to exceed license limits

When trying to perform action that would exceed your current limits (for example, creating a user). Your action will be blocked and modal will be shown.

What will happen after reaching license limits?

After reaching license limits you will still be able to use Business/Enterprise features.

However, creating new locations/users will be blocked (depending on which limits you have exceeded).

If you want to increase your limits or modify existing license, contact [e-mail]

Can I exceed license limits?

Defguard doesn't let you go over the user limit of your license. Once the limit is reached, you can't add new users, and no new accounts are created through LDAP or OpenID directory synchronization.

In rare edge cases the limit can still be exceeded. This shouldn't happen during normal use, but if it does, nothing is deleted or disabled and VPN connections keep working. However, Defguard stops treating the license as valid. All Business and Enterprise features are turned off, logging in through OpenID is not possible, LDAP synchronization is switched off in the settings, and Directory Sync stops running.

Disaster recovery

To get back within your license limit, disable or delete users you no longer need. Disabled users don't count toward the limit, so disabling is enough if you want to keep their accounts. Once you're under the limit, the license becomes valid again and Business/Enterprise features come back.

If you can't access your instance through the web interface, you can manage it from the command line instead. See Managing Defguard via CLI.