VPN & Client behavior customization

After purchasing the Enterprise License the Enterprise features tab will be activated, enabling the administrator to configure additional features:

Additional Enterprise Features

Disable for users to manage their devices

When this option is enabled, only users in the Admin group can manage devices in user profile, for any other users adding/editing/removing their VPN devices is disabled.

Disable ability to configure other VPN clients then defguard desktop client

If 'Disable users' ability to manually configure WireGuard client' option is enabled, then any user has only possibility to configure defguard desktop client.

This option will not be available for users:

Disable All Traffic option in the desktop client

Of of defguard desktop client uniqe features is the possibility for the user to automatically route All network traffic from their device through the connected VPN Location, when the user checks All traffic option:

But there are scenarios that administrator would like that users have only access to the Predefined traffic (meaning Allowed IPs in the Network VPN configuration) and the possibility to access all networks disabled.

When enabling this option, users will only have Predefined traffic available in their desktop client and the All traffic option disabled.

Last updated

Was this helpful?