Client behaviour customization

Availability

This feature is available from Business license. See the pricing page for details.

Navigate to Settings → Client behaviour.

Client configuration Permissions

Options that affect ability to interact with device management for users.

Device management

This option defines if users can create / manage their own devices.

WireGuard configuration

This option disables ability to create native WireGuard configurations for users. This way users can only enroll new devices via Defguard client applications.

Client traffic rules

One of the unique features of Defguard desktop client is the ability for users to choose whether to route only predefined network traffic or all traffic from their device through a connected VPN location.

However, in some cases administrators may want to enforce a specific behavior - allowing access only to predefined traffic or requiring all traffic to pass through the VPN.

The Client Traffic Policy setting enables administrators to control this behavior as needed. The available options are:

• None - Users can freely choose between routing predefined traffic or all traffic through the VPN.

• Disable all traffic - Only predefined traffic is allowed, the "All traffic" option is disabled for users.

• Force all traffic - All traffic is routed through the VPN, the "All traffic" option is enforced and cannot be changed by users.

Please note that this option is only client-side enforced, meaning the user may manually modify Wireguard interface to force all traffic to go through the VPN.