VPN & Client behavior customization
Last updated
Last updated
After purchasing the Enterprise License the Enterprise features tab will be activated, enabling the administrator to configure additional features:
When this option is enabled, only users in the Admin group can manage devices in user profile, for any other users adding/editing/removing their VPN devices is disabled.
If 'Disable users' ability to manually configure WireGuard client' option is enabled, then any user has only possibility to configure defguard desktop client.
This option will not be available for users:
Please note that defguard has only desktop clients and no official mobile client, thus when using this option users will not be able to configure their mobile WireGuard clients.
Of of defguard desktop client uniqe features is the possibility for the user to automatically route All network traffic from their device through the connected VPN Location, when the user checks All traffic option:
But there are scenarios that administrator would like that users have only access to the Predefined traffic (meaning Allowed IPs in the Network VPN configuration) and the possibility to access all networks disabled.
When enabling this option, users will only have Predefined traffic available in their desktop client and the All traffic option disabled.