# defguard

## 1.4

- [Welcome](https://docs.defguard.net/1.4/readme.md)
- [Getting help](https://docs.defguard.net/1.4/support.md)
- [About Defguard](https://docs.defguard.net/1.4/about/about-defguard.md)
- [Features overview](https://docs.defguard.net/1.4/about/features-overview.md)
- [One-line install script](https://docs.defguard.net/1.4/getting-started/one-line-install.md)
- [Overview](https://docs.defguard.net/1.4/features/overview.md)
- [Zero-Trust VPN with 2FA/MFA](https://docs.defguard.net/1.4/features/wireguard.md)
- [Create/Manage VPN Location](https://docs.defguard.net/1.4/features/wireguard/create-your-vpn-network.md)
- [Network overview](https://docs.defguard.net/1.4/features/wireguard/network-overview.md)
- [Multi-Factor Authentication (MFA/2FA)](https://docs.defguard.net/1.4/features/wireguard/multi-factor-authentication-mfa-2fa.md): Defguard is the sole VPN solution that genuinely implements Multi-Factor Authentication (MFA) before a WireGuard® VPN connection is established, significantly enhancing security against cyberattacks.
- [Internal SSO based MFA](https://docs.defguard.net/1.4/features/wireguard/multi-factor-authentication-mfa-2fa/internal-sso-based-mfa.md)
- [External SSO based MFA](https://docs.defguard.net/1.4/features/wireguard/multi-factor-authentication-mfa-2fa/external-sso-based-mfa.md)
- [Remote desktop client configuration](https://docs.defguard.net/1.4/features/wireguard/remote-desktop-activation.md): How to manually generate token for user as an administrator.
- [VPN & Client behaviour customization](https://docs.defguard.net/1.4/features/wireguard/behavior-customization.md)
- [DNS and domains](https://docs.defguard.net/1.4/features/wireguard/dns-and-domains.md)
- [Executing custom gateway commands](https://docs.defguard.net/1.4/features/wireguard/executing-custom-gateway-commands.md)
- [Remote user enrollment](https://docs.defguard.net/1.4/features/remote-user-enrollment.md)
- [User onboarding after enrollment](https://docs.defguard.net/1.4/features/remote-user-enrollment/user-onboarding-after-enrollment.md)
- [Automatic (real time) desktop client configuration & sync](https://docs.defguard.net/1.4/features/remote-user-enrollment/automatic-real-time-desktop-client-configuration.md)
- [Internal SSO (OpenID Connect Provider)](https://docs.defguard.net/1.4/features/openid-connect.md)
- [Portainer](https://docs.defguard.net/1.4/features/openid-connect/portainer.md)
- [Grafana setup](https://docs.defguard.net/1.4/features/openid-connect/grafana-setup.md)
- [Proxmox](https://docs.defguard.net/1.4/features/openid-connect/proxmox.md)
- [Matrix / Synapse](https://docs.defguard.net/1.4/features/openid-connect/proxmox-1.md)
- [Django](https://docs.defguard.net/1.4/features/openid-connect/django.md)
- [MinIO](https://docs.defguard.net/1.4/features/openid-connect/minio.md)
- [Vault](https://docs.defguard.net/1.4/features/openid-connect/vault.md)
- [External SSO/OpenID providers](https://docs.defguard.net/1.4/features/external-openid-providers.md)
- [Google](https://docs.defguard.net/1.4/features/external-openid-providers/google.md)
- [Microsoft](https://docs.defguard.net/1.4/features/external-openid-providers/microsoft.md)
- [Okta](https://docs.defguard.net/1.4/features/external-openid-providers/okta.md)
- [JumpCloud](https://docs.defguard.net/1.4/features/external-openid-providers/jumpcloud.md)
- [Keycloak](https://docs.defguard.net/1.4/features/external-openid-providers/keycloak.md)
- [Zitadel](https://docs.defguard.net/1.4/features/external-openid-providers/zitadel.md)
- [Custom](https://docs.defguard.net/1.4/features/external-openid-providers/custom.md)
- [External OIDC secure enrollment](https://docs.defguard.net/1.4/features/external-openid-providers/external-oidc-secure-enrollment.md)
- [LDAP and Active Directory integration](https://docs.defguard.net/1.4/features/ldap-and-active-directory-integration.md)
- [Configuration](https://docs.defguard.net/1.4/features/ldap-and-active-directory-integration/configuration.md): How to configure connection between Defguard instance and LDAP.
- [Settings table](https://docs.defguard.net/1.4/features/ldap-and-active-directory-integration/settings-table.md): List with description of settings for LDAP found in settings page.
- [Two-way LDAP and Active Directory synchronization](https://docs.defguard.net/1.4/features/ldap-and-active-directory-integration/two-way-ldap-and-active-directory-synchronization.md)
- [Access Control List](https://docs.defguard.net/1.4/features/access-control-list.md)
- [ACL Aliases](https://docs.defguard.net/1.4/features/access-control-list/acl-aliases.md)
- [Implementation Details](https://docs.defguard.net/1.4/features/access-control-list/firewall-internals.md)
- [Network devices](https://docs.defguard.net/1.4/features/network-devices.md)
- [Activity & Audit logs](https://docs.defguard.net/1.4/features/activity-log.md)
- [Audit Log Streaming to SIEM systems](https://docs.defguard.net/1.4/features/activity-log/activity-log-streaming.md): This feature is designed to help teams centralize visibility into user actions, security events, and system behavior by integrating with tools they already use for monitoring and incident response.
- [Supported SIEM systems integrations](https://docs.defguard.net/1.4/features/activity-log/activity-log-streaming/activity-log-integrations.md): List of supported services to stream activity logs into.
- [Vector integration guide](https://docs.defguard.net/1.4/features/activity-log/activity-log-streaming/activity-log-integrations/vector-integration-guide.md): How to stream activity logs to vector.
- [Logstash integration guide](https://docs.defguard.net/1.4/features/activity-log/activity-log-streaming/activity-log-integrations/logstash-integration-guide.md): How to stream activity logs to vector.
- [Notifications](https://docs.defguard.net/1.4/features/notifications.md)
- [Email notifications](https://docs.defguard.net/1.4/features/notifications/setting-up-smtp-for-email-notifications.md)
- [Gateway notifications](https://docs.defguard.net/1.4/features/notifications/gateway-notifications.md)
- [New version notifications](https://docs.defguard.net/1.4/features/notifications/new-version-notifications.md)
- [Integrations](https://docs.defguard.net/1.4/features/integrations.md)
- [Webhooks](https://docs.defguard.net/1.4/features/integrations/webhooks.md)
- [REST API](https://docs.defguard.net/1.4/features/integrations/api-tokens.md)
- [OPSense Configuartion](https://docs.defguard.net/1.4/features/gateway.md)
- [SSH Authentication](https://docs.defguard.net/1.4/features/ssh-authentication.md)
- [Forward auth](https://docs.defguard.net/1.4/features/forward-auth.md)
- [YubiKey Provisioning](https://docs.defguard.net/1.4/features/yubikey-provisioning.md): Provisioner repository: https://github.com/DefGuard/YubiKey-Provision
- [User SNAT bindings](https://docs.defguard.net/1.4/features/user-snat-bindings.md)
- [Overview](https://docs.defguard.net/1.4/deployment-strategies/setting-up-your-instance.md)
- [Hardware, OS, network and firewall recommendations](https://docs.defguard.net/1.4/deployment-strategies/hardware-os-network-and-firewall-recommendations.md): Before Defguard can be deployed please get familiar with the following recommendations
- [Standalone package based installation](https://docs.defguard.net/1.4/deployment-strategies/standalone-package-based-installation.md)
- [Docker images and tags](https://docs.defguard.net/1.4/deployment-strategies/docker-images-and-tags.md)
- [Docker Compose](https://docs.defguard.net/1.4/deployment-strategies/docker-compose.md)
- [Kubernetes](https://docs.defguard.net/1.4/deployment-strategies/kubernetes.md)
- [Terraform](https://docs.defguard.net/1.4/deployment-strategies/terraform.md)
- [AMIs and AWS CloudFormation](https://docs.defguard.net/1.4/deployment-strategies/amis-and-aws-cloudformation.md)
- [High Availability and Failover](https://docs.defguard.net/1.4/deployment-strategies/high-availability-and-failover.md)
- [Upgrading](https://docs.defguard.net/1.4/deployment-strategies/upgrading.md): Notes on upgrading Defguard and its components
- [Pre-production and development releases](https://docs.defguard.net/1.4/deployment-strategies/pre-production-and-development-releases.md)
- [Gateway](https://docs.defguard.net/1.4/deployment-strategies/gateway.md)
- [Running gateway on MikroTik routers](https://docs.defguard.net/1.4/deployment-strategies/gateway/running-gateway-on-mikrotik-routers.md)
- [Securing gRPC communication](https://docs.defguard.net/1.4/deployment-strategies/grpc-ssl-communication.md)
- [OpenID RSA key](https://docs.defguard.net/1.4/deployment-strategies/openid-rsa-key.md)
- [Health check](https://docs.defguard.net/1.4/deployment-strategies/health-check.md)
- [Configuration](https://docs.defguard.net/1.4/deployment-strategies/configuration.md)
- [License](https://docs.defguard.net/1.4/enterprise/license.md)
- [Enterprise features](https://docs.defguard.net/1.4/enterprise/enterprise-features.md)
- [Overview](https://docs.defguard.net/1.4/using-defguard-for-end-users/overwiew.md)
- [Mobile Client](https://docs.defguard.net/1.4/using-defguard-for-end-users/mobile-client.md)
- [Desktop Client](https://docs.defguard.net/1.4/using-defguard-for-end-users/desktop-client.md)
- [Instance configuration](https://docs.defguard.net/1.4/using-defguard-for-end-users/desktop-client/instance-configuration.md): In this guide, you will learn how to add, remove and update Instance in Defguard desktop client.
- [Using Multi-Factor Authentication (MFA)](https://docs.defguard.net/1.4/using-defguard-for-end-users/desktop-client/using-multi-factor-authentication-mfa.md)
- [CLI Client](https://docs.defguard.net/1.4/using-defguard-for-end-users/cli-client.md)
- [Other WireGuard® Clients](https://docs.defguard.net/1.4/using-defguard-for-end-users/adding-wireguard-devices.md)
- [Configuring a device for new VPN Location manually](https://docs.defguard.net/1.4/using-defguard-for-end-users/adding-wireguard-devices/configuring-a-device-for-a-new-vpn-location.md)
- [Password change / Reset](https://docs.defguard.net/1.4/using-defguard-for-end-users/changing-your-password.md)
- [Enrollment & Onboarding](https://docs.defguard.net/1.4/using-defguard-for-end-users/enrollment.md)
- [With internal Defguard SSO](https://docs.defguard.net/1.4/using-defguard-for-end-users/enrollment/with-internal-defguard-sso.md)
- [With external SSO (Google/Microsoft/Custom)](https://docs.defguard.net/1.4/using-defguard-for-end-users/enrollment/with-external-sso-google-microsoft-custom.md)
- [Setting up 2FA/MFA](https://docs.defguard.net/1.4/using-defguard-for-end-users/setting-up-2fa-mfa.md)
- [Step by step setting up a VPN server](https://docs.defguard.net/1.4/tutorials/step-by-step-setting-up-a-vpn-server.md)
- [Adding additional VPN locations](https://docs.defguard.net/1.4/tutorials/step-by-step-setting-up-a-vpn-server/adding-additional-vpn-locations.md)
- [Architecture Decision Records](https://docs.defguard.net/1.4/in-depth/architecture-decision-records.md): What are Defguard's Architecture Decision Records?
- [1.4](https://docs.defguard.net/1.4/in-depth/architecture-decision-records/1.4.md)
- [1.3](https://docs.defguard.net/1.4/in-depth/architecture-decision-records/1.3.md)
- [Pre-1.3](https://docs.defguard.net/1.4/in-depth/architecture-decision-records/pre-1.3.md)
- [Architecture](https://docs.defguard.net/1.4/in-depth/architecture.md)
- [MFA Architecture](https://docs.defguard.net/1.4/in-depth/architecture/architecture.md)
- [How do VPN statistics work](https://docs.defguard.net/1.4/in-depth/architecture/how-do-vpn-statistics-work.md)
- [Security concepts](https://docs.defguard.net/1.4/in-depth/architecture/security-concepts.md)
- [Roadmap](https://docs.defguard.net/1.4/in-depth/roadmap.md): This is a high-level project roadmap of planned features.
- [Release cycle](https://docs.defguard.net/1.4/in-depth/release-cycle.md)
- [Contributing](https://docs.defguard.net/1.4/for-developers/contributing.md)
- [Environment setup](https://docs.defguard.net/1.4/for-developers/dev-env-setup.md)
- [Translations (core/web)](https://docs.defguard.net/1.4/for-developers/dev-env-setup/translations-web.md)
- [Switching language](https://docs.defguard.net/1.4/for-developers/dev-env-setup/translations-web/switching-language.md)
- [Adding translations](https://docs.defguard.net/1.4/for-developers/dev-env-setup/translations-web/adding-translations.md)
- [Translations (client)](https://docs.defguard.net/1.4/for-developers/dev-env-setup/translations-client.md)
- [Adding translations](https://docs.defguard.net/1.4/for-developers/dev-env-setup/translations-client/adding-translations.md)
- [Troubleshooting Guide](https://docs.defguard.net/1.4/resources/troubleshooting.md): Here are some common issues / problems that are frequently encountered.
- [Sending support information](https://docs.defguard.net/1.4/resources/troubleshooting/sending-support-info.md)
- [Client Windows installer exit codes](https://docs.defguard.net/1.4/resources/troubleshooting/windows-installer-exit-codes.md): Desktop Client windows installer exist codes list.
- [Client "All traffic" connection issues](https://docs.defguard.net/1.4/resources/troubleshooting/client-all-traffic-connection-issues.md)
- [WebAuthn security keys](https://docs.defguard.net/1.4/resources/troubleshooting/webauthn-security-keys.md)

## 1.5

- [Welcome](https://docs.defguard.net/1.5/readme.md)
- [Getting help](https://docs.defguard.net/1.5/support.md)
- [About Defguard](https://docs.defguard.net/1.5/about/about-defguard.md)
- [Features overview](https://docs.defguard.net/1.5/about/features-overview.md)
- [One-line install script](https://docs.defguard.net/1.5/getting-started/one-line-install.md)
- [Overview](https://docs.defguard.net/1.5/features/overview.md)
- [Zero-Trust VPN with 2FA/MFA](https://docs.defguard.net/1.5/features/wireguard.md)
- [Create/Manage VPN Location](https://docs.defguard.net/1.5/features/wireguard/create-your-vpn-network.md)
- [Network overview](https://docs.defguard.net/1.5/features/wireguard/network-overview.md)
- [Multi-Factor Authentication (MFA/2FA)](https://docs.defguard.net/1.5/features/wireguard/multi-factor-authentication-mfa-2fa.md): Defguard is the sole VPN solution that genuinely implements Multi-Factor Authentication (MFA) before a WireGuard® VPN connection is established, significantly enhancing security against cyberattacks.
- [Internal SSO based MFA](https://docs.defguard.net/1.5/features/wireguard/multi-factor-authentication-mfa-2fa/internal-sso-based-mfa.md)
- [External SSO based MFA](https://docs.defguard.net/1.5/features/wireguard/multi-factor-authentication-mfa-2fa/external-sso-based-mfa.md)
- [Remote desktop client configuration](https://docs.defguard.net/1.5/features/wireguard/remote-desktop-activation.md): How to manually generate token for user as an administrator.
- [VPN & Client behaviour customization](https://docs.defguard.net/1.5/features/wireguard/behavior-customization.md)
- [DNS and domains](https://docs.defguard.net/1.5/features/wireguard/dns-and-domains.md)
- [Executing custom gateway commands](https://docs.defguard.net/1.5/features/wireguard/executing-custom-gateway-commands.md)
- [Remote user enrollment](https://docs.defguard.net/1.5/features/remote-user-enrollment.md)
- [User onboarding after enrollment](https://docs.defguard.net/1.5/features/remote-user-enrollment/user-onboarding-after-enrollment.md)
- [Automatic (real time) desktop client configuration & sync](https://docs.defguard.net/1.5/features/remote-user-enrollment/automatic-real-time-desktop-client-configuration.md)
- [Internal SSO (OpenID Connect Provider)](https://docs.defguard.net/1.5/features/openid-connect.md)
- [Portainer](https://docs.defguard.net/1.5/features/openid-connect/portainer.md)
- [Grafana setup](https://docs.defguard.net/1.5/features/openid-connect/grafana-setup.md)
- [Proxmox](https://docs.defguard.net/1.5/features/openid-connect/proxmox.md)
- [Matrix / Synapse](https://docs.defguard.net/1.5/features/openid-connect/proxmox-1.md)
- [Django](https://docs.defguard.net/1.5/features/openid-connect/django.md)
- [MinIO](https://docs.defguard.net/1.5/features/openid-connect/minio.md)
- [Vault](https://docs.defguard.net/1.5/features/openid-connect/vault.md)
- [External SSO/OpenID providers](https://docs.defguard.net/1.5/features/external-openid-providers.md)
- [Google](https://docs.defguard.net/1.5/features/external-openid-providers/google.md)
- [Microsoft](https://docs.defguard.net/1.5/features/external-openid-providers/microsoft.md)
- [Okta](https://docs.defguard.net/1.5/features/external-openid-providers/okta.md)
- [JumpCloud](https://docs.defguard.net/1.5/features/external-openid-providers/jumpcloud.md)
- [Keycloak](https://docs.defguard.net/1.5/features/external-openid-providers/keycloak.md)
- [Zitadel](https://docs.defguard.net/1.5/features/external-openid-providers/zitadel.md)
- [Custom](https://docs.defguard.net/1.5/features/external-openid-providers/custom.md)
- [External OIDC secure enrollment](https://docs.defguard.net/1.5/features/external-openid-providers/external-oidc-secure-enrollment.md)
- [LDAP and Active Directory integration](https://docs.defguard.net/1.5/features/ldap-and-active-directory-integration.md)
- [Configuration](https://docs.defguard.net/1.5/features/ldap-and-active-directory-integration/configuration.md): How to configure connection between Defguard instance and LDAP.
- [Settings table](https://docs.defguard.net/1.5/features/ldap-and-active-directory-integration/settings-table.md): List with description of settings for LDAP found in settings page.
- [Two-way LDAP and Active Directory synchronization](https://docs.defguard.net/1.5/features/ldap-and-active-directory-integration/two-way-ldap-and-active-directory-synchronization.md)
- [Access Control List](https://docs.defguard.net/1.5/features/access-control-list.md)
- [ACL Aliases](https://docs.defguard.net/1.5/features/access-control-list/acl-aliases.md)
- [Implementation Details](https://docs.defguard.net/1.5/features/access-control-list/firewall-internals.md)
- [Network devices](https://docs.defguard.net/1.5/features/network-devices.md)
- [Activity & Audit logs](https://docs.defguard.net/1.5/features/activity-log.md)
- [Audit Log Streaming to SIEM systems](https://docs.defguard.net/1.5/features/activity-log/activity-log-streaming.md): This feature is designed to help teams centralize visibility into user actions, security events, and system behavior by integrating with tools they already use for monitoring and incident response.
- [Supported SIEM systems integrations](https://docs.defguard.net/1.5/features/activity-log/activity-log-streaming/activity-log-integrations.md): List of supported services to stream activity logs into.
- [Vector integration guide](https://docs.defguard.net/1.5/features/activity-log/activity-log-streaming/activity-log-integrations/vector-integration-guide.md): How to stream activity logs to vector.
- [Logstash integration guide](https://docs.defguard.net/1.5/features/activity-log/activity-log-streaming/activity-log-integrations/logstash-integration-guide.md): How to stream activity logs to logstash.
- [Notifications](https://docs.defguard.net/1.5/features/notifications.md)
- [Email notifications](https://docs.defguard.net/1.5/features/notifications/setting-up-smtp-for-email-notifications.md)
- [Gateway notifications](https://docs.defguard.net/1.5/features/notifications/gateway-notifications.md)
- [New version notifications](https://docs.defguard.net/1.5/features/notifications/new-version-notifications.md)
- [Integrations](https://docs.defguard.net/1.5/features/integrations.md)
- [Webhooks](https://docs.defguard.net/1.5/features/integrations/webhooks.md)
- [REST API](https://docs.defguard.net/1.5/features/integrations/api-tokens.md)
- [OPSense Configuartion](https://docs.defguard.net/1.5/features/gateway.md)
- [SSH Authentication](https://docs.defguard.net/1.5/features/ssh-authentication.md)
- [Forward auth](https://docs.defguard.net/1.5/features/forward-auth.md)
- [YubiKey Provisioning](https://docs.defguard.net/1.5/features/yubikey-provisioning.md): Provisioner repository: https://github.com/DefGuard/YubiKey-Provision
- [User SNAT bindings](https://docs.defguard.net/1.5/features/user-snat-bindings.md)
- [Overview](https://docs.defguard.net/1.5/deployment-strategies/setting-up-your-instance.md): This documentation will guide you through the process of deploying your Defguard instance.
- [Deploying to Production](https://docs.defguard.net/1.5/deployment-strategies/deploying-to-production.md)
- [Hardware, OS, network and firewall recommendations](https://docs.defguard.net/1.5/deployment-strategies/hardware-os-network-and-firewall-recommendations.md): Before Defguard can be deployed please get familiar with the following recommendations
- [Standalone package based installation](https://docs.defguard.net/1.5/deployment-strategies/standalone-package-based-installation.md)
- [Defguard APT repository](https://docs.defguard.net/1.5/deployment-strategies/standalone-package-based-installation/defguard-apt-repository.md)
- [Docker Compose](https://docs.defguard.net/1.5/deployment-strategies/docker-compose.md)
- [Kubernetes](https://docs.defguard.net/1.5/deployment-strategies/kubernetes.md)
- [Terraform](https://docs.defguard.net/1.5/deployment-strategies/terraform.md)
- [Amazon Machine Image (AMI)](https://docs.defguard.net/1.5/deployment-strategies/amis-and-aws-cloudformation.md)
- [Configuring HTTPS using AWS Certificate Manager](https://docs.defguard.net/1.5/deployment-strategies/amis-and-aws-cloudformation/configuring-https-using-aws-certificate-manager.md)
- [Adding a location and getting a Gateway token](https://docs.defguard.net/1.5/deployment-strategies/gateway.md): This documentation will guide you through adding a new location and proceeding with the Gateway deployment, enabling your devices to connect to it via VPN.
- [Configuration](https://docs.defguard.net/1.5/deployment-strategies/configuration.md)
- [Running Gateway on OPNsense firewall](https://docs.defguard.net/1.5/deployment-strategies/running-gateway-on-opnsense-firewall.md)
- [Running Gateway on MikroTik routers](https://docs.defguard.net/1.5/deployment-strategies/running-gateway-on-mikrotik-routers.md)
- [Reverse Proxy configuration using Nginx](https://docs.defguard.net/1.5/deployment-strategies/reverse-proxy-configuration-using-nginx.md)
- [High Availability and Failover](https://docs.defguard.net/1.5/deployment-strategies/high-availability-and-failover.md)
- [Updating and version compatibility](https://docs.defguard.net/1.5/deployment-strategies/updating-and-version-compatibility.md)
- [Migration guides](https://docs.defguard.net/1.5/deployment-strategies/upgrading.md): Notes on upgrading Defguard and its components
- [Using a userspace wireguard-go implementation](https://docs.defguard.net/1.5/deployment-strategies/using-a-userspace-wireguard-go-implementation.md)
- [Pre-production and development releases](https://docs.defguard.net/1.5/deployment-strategies/pre-production-and-development-releases.md)
- [Securing gRPC communication](https://docs.defguard.net/1.5/deployment-strategies/grpc-ssl-communication.md)
- [Using RSA instead of HMAC for OpenID key](https://docs.defguard.net/1.5/deployment-strategies/openid-rsa-key.md)
- [Health check](https://docs.defguard.net/1.5/deployment-strategies/health-check.md)
- [Production deployment verification guide](https://docs.defguard.net/1.5/deployment-strategies/production-deployment-verification-guide.md)
- [License](https://docs.defguard.net/1.5/enterprise/license.md)
- [Enterprise features](https://docs.defguard.net/1.5/enterprise/enterprise-features.md)
- [Overview](https://docs.defguard.net/1.5/using-defguard-for-end-users/overwiew.md)
- [Mobile Client](https://docs.defguard.net/1.5/using-defguard-for-end-users/mobile-client.md)
- [Adding new Instance](https://docs.defguard.net/1.5/using-defguard-for-end-users/mobile-client/instance-adding.md)
- [Connecting to Instance](https://docs.defguard.net/1.5/using-defguard-for-end-users/mobile-client/instance-connect.md)
- [Managing your Instance](https://docs.defguard.net/1.5/using-defguard-for-end-users/mobile-client/instance-manage.md)
- [Using Biometry as MFA method](https://docs.defguard.net/1.5/using-defguard-for-end-users/mobile-client/using-biometry-as-mfa-method.md)
- [Desktop Client](https://docs.defguard.net/1.5/using-defguard-for-end-users/desktop-client.md)
- [Instance configuration](https://docs.defguard.net/1.5/using-defguard-for-end-users/desktop-client/instance-configuration.md): In this guide, you will learn how to add, remove and update Instance in Defguard desktop client.
- [Using Multi-Factor Authentication (MFA)](https://docs.defguard.net/1.5/using-defguard-for-end-users/desktop-client/using-multi-factor-authentication-mfa.md)
- [CLI Client](https://docs.defguard.net/1.5/using-defguard-for-end-users/cli-client.md)
- [Other WireGuard® Clients](https://docs.defguard.net/1.5/using-defguard-for-end-users/adding-wireguard-devices.md)
- [Configuring a device for new VPN Location manually](https://docs.defguard.net/1.5/using-defguard-for-end-users/adding-wireguard-devices/configuring-a-device-for-a-new-vpn-location.md)
- [Password change / Reset](https://docs.defguard.net/1.5/using-defguard-for-end-users/changing-your-password.md)
- [Enrollment & Onboarding](https://docs.defguard.net/1.5/using-defguard-for-end-users/enrollment.md)
- [With internal Defguard SSO](https://docs.defguard.net/1.5/using-defguard-for-end-users/enrollment/with-internal-defguard-sso.md)
- [With external SSO (Google/Microsoft/Custom)](https://docs.defguard.net/1.5/using-defguard-for-end-users/enrollment/with-external-sso-google-microsoft-custom.md)
- [Setting up 2FA/MFA](https://docs.defguard.net/1.5/using-defguard-for-end-users/setting-up-2fa-mfa.md)
- [How to submit an issue](https://docs.defguard.net/1.5/support-1/how-to-submit-an-issue.md)
- [Troubleshooting Guide](https://docs.defguard.net/1.5/support-1/troubleshooting.md): Here are some common issues / problems that are frequently encountered.
- [Sending support information](https://docs.defguard.net/1.5/support-1/troubleshooting/sending-support-info.md)
- [Client Windows installer exit codes](https://docs.defguard.net/1.5/support-1/troubleshooting/windows-installer-exit-codes.md): Desktop Client windows installer exist codes list.
- [Client "All traffic" connection issues](https://docs.defguard.net/1.5/support-1/troubleshooting/client-all-traffic-connection-issues.md)
- [WebAuthn security keys](https://docs.defguard.net/1.5/support-1/troubleshooting/webauthn-security-keys.md)
- [Desktop Client connectivity issues](https://docs.defguard.net/1.5/support-1/troubleshooting/desktop-client-connectivity-issues.md)
- [Server migration and licence transfer](https://docs.defguard.net/1.5/support-1/server-migration-and-licence-transfer.md)
- [Step by step setting up a VPN server](https://docs.defguard.net/1.5/tutorials/step-by-step-setting-up-a-vpn-server.md)
- [Adding additional VPN locations](https://docs.defguard.net/1.5/tutorials/step-by-step-setting-up-a-vpn-server/adding-additional-vpn-locations.md)
- [Custom HTTPS Configuration](https://docs.defguard.net/1.5/tutorials/step-by-step-setting-up-a-vpn-server/custom-https-configuration.md)
- [Architecture](https://docs.defguard.net/1.5/in-depth/architecture.md)
- [How do VPN statistics work](https://docs.defguard.net/1.5/in-depth/architecture/how-do-vpn-statistics-work.md)
- [Security concepts](https://docs.defguard.net/1.5/in-depth/architecture/security-concepts.md)
- [MFA Architecture](https://docs.defguard.net/1.5/in-depth/architecture/architecture.md)
- [Architecture Decision Records](https://docs.defguard.net/1.5/in-depth/architecture-decision-records.md): What are Defguard's Architecture Decision Records?
- [1.5](https://docs.defguard.net/1.5/in-depth/architecture-decision-records/1.5.md)
- [1.4](https://docs.defguard.net/1.5/in-depth/architecture-decision-records/1.4.md)
- [1.3](https://docs.defguard.net/1.5/in-depth/architecture-decision-records/1.3.md)
- [Pre-1.3](https://docs.defguard.net/1.5/in-depth/architecture-decision-records/pre-1.3.md)
- [Roadmap](https://docs.defguard.net/1.5/in-depth/roadmap.md): This is a high-level project roadmap of planned features.
- [Release cycle](https://docs.defguard.net/1.5/in-depth/release-cycle.md)
- [Contributing](https://docs.defguard.net/1.5/for-developers/contributing.md)
- [Environment setup](https://docs.defguard.net/1.5/for-developers/dev-env-setup.md)
- [Translations (core/web)](https://docs.defguard.net/1.5/for-developers/dev-env-setup/translations-web.md)
- [Switching language](https://docs.defguard.net/1.5/for-developers/dev-env-setup/translations-web/switching-language.md)
- [Adding translations](https://docs.defguard.net/1.5/for-developers/dev-env-setup/translations-web/adding-translations.md)
- [Translations (client)](https://docs.defguard.net/1.5/for-developers/dev-env-setup/translations-client.md)
- [Adding translations](https://docs.defguard.net/1.5/for-developers/dev-env-setup/translations-client/adding-translations.md)

## 1.6

- [Welcome](https://docs.defguard.net/1.6/readme.md)
- [Getting help](https://docs.defguard.net/1.6/support.md)
- [About Defguard](https://docs.defguard.net/1.6/about/about-defguard.md)
- [Features overview](https://docs.defguard.net/1.6/about/features-overview.md)
- [One-line install script](https://docs.defguard.net/1.6/getting-started/one-line-install.md)
- [Overview](https://docs.defguard.net/1.6/features/overview.md)
- [Zero-Trust VPN with 2FA/MFA](https://docs.defguard.net/1.6/features/wireguard.md)
- [Create/Manage VPN Location](https://docs.defguard.net/1.6/features/wireguard/create-your-vpn-network.md)
- [Network overview](https://docs.defguard.net/1.6/features/wireguard/network-overview.md)
- [Multi-Factor Authentication (MFA/2FA)](https://docs.defguard.net/1.6/features/wireguard/multi-factor-authentication-mfa-2fa.md): Defguard is the sole VPN solution that genuinely implements Multi-Factor Authentication (MFA) before a WireGuard® VPN connection is established, significantly enhancing security against cyberattacks.
- [Internal SSO based MFA](https://docs.defguard.net/1.6/features/wireguard/multi-factor-authentication-mfa-2fa/internal-sso-based-mfa.md)
- [External SSO based MFA](https://docs.defguard.net/1.6/features/wireguard/multi-factor-authentication-mfa-2fa/external-sso-based-mfa.md)
- [Remote desktop client configuration](https://docs.defguard.net/1.6/features/wireguard/remote-desktop-activation.md): How to manually generate token for user as an administrator.
- [VPN & Client behaviour customization](https://docs.defguard.net/1.6/features/wireguard/behavior-customization.md)
- [DNS and domains](https://docs.defguard.net/1.6/features/wireguard/dns-and-domains.md)
- [Executing custom gateway commands](https://docs.defguard.net/1.6/features/wireguard/executing-custom-gateway-commands.md)
- [Remote user enrollment](https://docs.defguard.net/1.6/features/remote-user-enrollment.md)
- [User onboarding after enrollment](https://docs.defguard.net/1.6/features/remote-user-enrollment/user-onboarding-after-enrollment.md)
- [Automatic (real time) desktop client configuration & sync](https://docs.defguard.net/1.6/features/remote-user-enrollment/automatic-real-time-desktop-client-configuration.md)
- [Internal SSO (OpenID Connect Provider)](https://docs.defguard.net/1.6/features/openid-connect.md)
- [Portainer](https://docs.defguard.net/1.6/features/openid-connect/portainer.md)
- [Grafana setup](https://docs.defguard.net/1.6/features/openid-connect/grafana-setup.md)
- [Proxmox](https://docs.defguard.net/1.6/features/openid-connect/proxmox.md)
- [Matrix / Synapse](https://docs.defguard.net/1.6/features/openid-connect/proxmox-1.md)
- [Django](https://docs.defguard.net/1.6/features/openid-connect/django.md)
- [MinIO](https://docs.defguard.net/1.6/features/openid-connect/minio.md)
- [Vault](https://docs.defguard.net/1.6/features/openid-connect/vault.md)
- [External SSO/OpenID providers](https://docs.defguard.net/1.6/features/external-openid-providers.md)
- [Google](https://docs.defguard.net/1.6/features/external-openid-providers/google.md)
- [Microsoft](https://docs.defguard.net/1.6/features/external-openid-providers/microsoft.md)
- [Okta](https://docs.defguard.net/1.6/features/external-openid-providers/okta.md)
- [JumpCloud](https://docs.defguard.net/1.6/features/external-openid-providers/jumpcloud.md)
- [Keycloak](https://docs.defguard.net/1.6/features/external-openid-providers/keycloak.md)
- [Zitadel](https://docs.defguard.net/1.6/features/external-openid-providers/zitadel.md)
- [Custom](https://docs.defguard.net/1.6/features/external-openid-providers/custom.md)
- [External OIDC secure enrollment](https://docs.defguard.net/1.6/features/external-openid-providers/external-oidc-secure-enrollment.md)
- [LDAP and Active Directory integration](https://docs.defguard.net/1.6/features/ldap-and-active-directory-integration.md)
- [Configuration](https://docs.defguard.net/1.6/features/ldap-and-active-directory-integration/configuration.md): How to configure connection between Defguard instance and LDAP.
- [Settings table](https://docs.defguard.net/1.6/features/ldap-and-active-directory-integration/settings-table.md): List with description of settings for LDAP found in settings page.
- [Two-way LDAP and Active Directory synchronization](https://docs.defguard.net/1.6/features/ldap-and-active-directory-integration/two-way-ldap-and-active-directory-synchronization.md)
- [Access Control List](https://docs.defguard.net/1.6/features/access-control-list.md)
- [ACL Aliases](https://docs.defguard.net/1.6/features/access-control-list/acl-aliases.md)
- [Implementation Details](https://docs.defguard.net/1.6/features/access-control-list/firewall-internals.md)
- [Network devices](https://docs.defguard.net/1.6/features/network-devices.md)
- [Activity & Audit logs](https://docs.defguard.net/1.6/features/activity-log.md)
- [Audit Log Streaming to SIEM systems](https://docs.defguard.net/1.6/features/activity-log/activity-log-streaming.md): This feature is designed to help teams centralize visibility into user actions, security events, and system behavior by integrating with tools they already use for monitoring and incident response.
- [Supported SIEM systems integrations](https://docs.defguard.net/1.6/features/activity-log/activity-log-streaming/activity-log-integrations.md): List of supported services to stream activity logs into.
- [Vector integration guide](https://docs.defguard.net/1.6/features/activity-log/activity-log-streaming/activity-log-integrations/vector-integration-guide.md): How to stream activity logs to vector.
- [Logstash integration guide](https://docs.defguard.net/1.6/features/activity-log/activity-log-streaming/activity-log-integrations/logstash-integration-guide.md): How to stream activity logs to logstash.
- [Notifications](https://docs.defguard.net/1.6/features/notifications.md)
- [Email notifications](https://docs.defguard.net/1.6/features/notifications/setting-up-smtp-for-email-notifications.md)
- [Gateway notifications](https://docs.defguard.net/1.6/features/notifications/gateway-notifications.md)
- [New version notifications](https://docs.defguard.net/1.6/features/notifications/new-version-notifications.md)
- [Integrations](https://docs.defguard.net/1.6/features/integrations.md)
- [Webhooks](https://docs.defguard.net/1.6/features/integrations/webhooks.md)
- [REST API](https://docs.defguard.net/1.6/features/integrations/api-tokens.md)
- [OPNsense Configuration](https://docs.defguard.net/1.6/features/gateway.md)
- [SSH Authentication](https://docs.defguard.net/1.6/features/ssh-authentication.md)
- [Forward auth](https://docs.defguard.net/1.6/features/forward-auth.md)
- [YubiKey Provisioning](https://docs.defguard.net/1.6/features/yubikey-provisioning.md): Provisioner repository: https://github.com/DefGuard/YubiKey-Provision
- [User SNAT bindings](https://docs.defguard.net/1.6/features/user-snat-bindings.md)
- [Service locations](https://docs.defguard.net/1.6/features/service-locations.md)
- [Desktop client auto-provisioning](https://docs.defguard.net/1.6/features/desktop-client-auto-provisioning.md)
- [Auto-provisioning in Windows environments](https://docs.defguard.net/1.6/features/desktop-client-auto-provisioning/auto-provisioning-in-windows-environments.md)
- [On-premise Active Directory](https://docs.defguard.net/1.6/features/desktop-client-auto-provisioning/auto-provisioning-in-windows-environments/on-premise-active-directory-environments.md)
- [Entra ID](https://docs.defguard.net/1.6/features/desktop-client-auto-provisioning/auto-provisioning-in-windows-environments/entra-id-environments.md)
- [Generating enrollment tokens with Defguard REST API](https://docs.defguard.net/1.6/features/desktop-client-auto-provisioning/generating-enrollment-tokens-with-defguard-rest-api.md)
- [Overview](https://docs.defguard.net/1.6/deployment-strategies/setting-up-your-instance.md): This documentation will guide you through the process of deploying your Defguard instance.
- [Deploying to Production](https://docs.defguard.net/1.6/deployment-strategies/deploying-to-production.md)
- [Hardware, OS, network and firewall recommendations](https://docs.defguard.net/1.6/deployment-strategies/hardware-os-network-and-firewall-recommendations.md): Before Defguard can be deployed please get familiar with the following recommendations
- [Standalone package based installation](https://docs.defguard.net/1.6/deployment-strategies/standalone-package-based-installation.md)
- [Defguard APT repository](https://docs.defguard.net/1.6/deployment-strategies/standalone-package-based-installation/defguard-apt-repository.md)
- [Docker Compose](https://docs.defguard.net/1.6/deployment-strategies/docker-compose.md)
- [Kubernetes](https://docs.defguard.net/1.6/deployment-strategies/kubernetes.md)
- [Terraform](https://docs.defguard.net/1.6/deployment-strategies/terraform.md)
- [Amazon Machine Image (AMI)](https://docs.defguard.net/1.6/deployment-strategies/amis-and-aws-cloudformation.md)
- [Configuring HTTPS using AWS Certificate Manager](https://docs.defguard.net/1.6/deployment-strategies/amis-and-aws-cloudformation/configuring-https-using-aws-certificate-manager.md)
- [Adding a location and getting a Gateway token](https://docs.defguard.net/1.6/deployment-strategies/gateway.md): This documentation will guide you through adding a new location and proceeding with the Gateway deployment, enabling your devices to connect to it via VPN.
- [Configuration](https://docs.defguard.net/1.6/deployment-strategies/configuration.md)
- [Running Gateway on OPNsense firewall](https://docs.defguard.net/1.6/deployment-strategies/running-gateway-on-opnsense-firewall.md)
- [Running Gateway on MikroTik routers](https://docs.defguard.net/1.6/deployment-strategies/running-gateway-on-mikrotik-routers.md)
- [Reverse Proxy configuration using NGINX](https://docs.defguard.net/1.6/deployment-strategies/reverse-proxy-configuration-using-nginx.md)
- [High Availability and Failover](https://docs.defguard.net/1.6/deployment-strategies/high-availability-and-failover.md)
- [Updating and version compatibility](https://docs.defguard.net/1.6/deployment-strategies/updating-and-version-compatibility.md)
- [Migration guides](https://docs.defguard.net/1.6/deployment-strategies/upgrading.md): Notes on upgrading Defguard and its components
- [Using a userspace wireguard-go implementation](https://docs.defguard.net/1.6/deployment-strategies/using-a-userspace-wireguard-go-implementation.md)
- [Pre-production and development releases](https://docs.defguard.net/1.6/deployment-strategies/pre-production-and-development-releases.md)
- [Securing gRPC communication](https://docs.defguard.net/1.6/deployment-strategies/grpc-ssl-communication.md)
- [Using RSA instead of HMAC for OpenID key](https://docs.defguard.net/1.6/deployment-strategies/openid-rsa-key.md)
- [Health check](https://docs.defguard.net/1.6/deployment-strategies/health-check.md)
- [Production deployment verification guide](https://docs.defguard.net/1.6/deployment-strategies/production-deployment-verification-guide.md)
- [Linux Kernel WireGuard tuning](https://docs.defguard.net/1.6/deployment-strategies/linux-kernel-wireguard-tuning.md): This technical guide addresses requirements regarding WireGuard VPN latency, throughput, resilience, and scalability by tuning Linux Kernel parameters (as WireGuard is part of Linux Kernel).
- [Deployment automation](https://docs.defguard.net/1.6/deployment-strategies/deployment-automation.md)
- [Purchasing and using the license](https://docs.defguard.net/1.6/enterprise/license.md)
- [Overview](https://docs.defguard.net/1.6/using-defguard-for-end-users/overwiew.md)
- [Mobile Client](https://docs.defguard.net/1.6/using-defguard-for-end-users/mobile-client.md)
- [Adding new Instance](https://docs.defguard.net/1.6/using-defguard-for-end-users/mobile-client/instance-adding.md)
- [Connecting to Instance](https://docs.defguard.net/1.6/using-defguard-for-end-users/mobile-client/instance-connect.md)
- [Managing your Instance](https://docs.defguard.net/1.6/using-defguard-for-end-users/mobile-client/instance-manage.md)
- [Using Biometry as MFA method](https://docs.defguard.net/1.6/using-defguard-for-end-users/mobile-client/using-biometry-as-mfa-method.md)
- [Desktop Client](https://docs.defguard.net/1.6/using-defguard-for-end-users/desktop-client.md)
- [Instance configuration](https://docs.defguard.net/1.6/using-defguard-for-end-users/desktop-client/instance-configuration.md): In this guide, you will learn how to add, remove and update Instance in Defguard desktop client.
- [Using Multi-Factor Authentication (MFA)](https://docs.defguard.net/1.6/using-defguard-for-end-users/desktop-client/using-multi-factor-authentication-mfa.md)
- [MTU Setting](https://docs.defguard.net/1.6/using-defguard-for-end-users/desktop-client/mtu-setting.md)
- [CLI Client](https://docs.defguard.net/1.6/using-defguard-for-end-users/cli-client.md)
- [Other WireGuard® Clients](https://docs.defguard.net/1.6/using-defguard-for-end-users/adding-wireguard-devices.md)
- [Configuring a device for new VPN Location manually](https://docs.defguard.net/1.6/using-defguard-for-end-users/adding-wireguard-devices/configuring-a-device-for-a-new-vpn-location.md)
- [Password change / Reset](https://docs.defguard.net/1.6/using-defguard-for-end-users/changing-your-password.md)
- [Enrollment & Onboarding](https://docs.defguard.net/1.6/using-defguard-for-end-users/enrollment.md)
- [With internal Defguard SSO](https://docs.defguard.net/1.6/using-defguard-for-end-users/enrollment/with-internal-defguard-sso.md)
- [With external SSO (Google/Microsoft/Custom)](https://docs.defguard.net/1.6/using-defguard-for-end-users/enrollment/with-external-sso-google-microsoft-custom.md)
- [Setting up 2FA/MFA](https://docs.defguard.net/1.6/using-defguard-for-end-users/setting-up-2fa-mfa.md)
- [How to submit an issue](https://docs.defguard.net/1.6/support-1/how-to-submit-an-issue.md)
- [Troubleshooting Guide](https://docs.defguard.net/1.6/support-1/troubleshooting.md): Here are some common issues / problems that are frequently encountered.
- [Sending support information](https://docs.defguard.net/1.6/support-1/troubleshooting/sending-support-info.md)
- [Client Windows installer exit codes](https://docs.defguard.net/1.6/support-1/troubleshooting/windows-installer-exit-codes.md): Desktop Client windows installer exist codes list.
- [Client "All traffic" connection issues](https://docs.defguard.net/1.6/support-1/troubleshooting/client-all-traffic-connection-issues.md)
- [WebAuthn security keys](https://docs.defguard.net/1.6/support-1/troubleshooting/webauthn-security-keys.md)
- [Desktop Client connectivity issues](https://docs.defguard.net/1.6/support-1/troubleshooting/desktop-client-connectivity-issues.md)
- [Client opening issues on Linux](https://docs.defguard.net/1.6/support-1/troubleshooting/client-opening-issues-on-linux.md)
- [Server migration and licence transfer](https://docs.defguard.net/1.6/support-1/server-migration-and-licence-transfer.md)
- [Step by step setting up a VPN server](https://docs.defguard.net/1.6/tutorials/step-by-step-setting-up-a-vpn-server.md)
- [Adding additional VPN locations](https://docs.defguard.net/1.6/tutorials/step-by-step-setting-up-a-vpn-server/adding-additional-vpn-locations.md)
- [Secure By Design](https://docs.defguard.net/1.6/in-depth/secure-by-design.md)
- [Architecture](https://docs.defguard.net/1.6/in-depth/architecture.md)
- [How do VPN statistics work](https://docs.defguard.net/1.6/in-depth/architecture/how-do-vpn-statistics-work.md)
- [Security concepts](https://docs.defguard.net/1.6/in-depth/architecture/security-concepts.md)
- [MFA Architecture](https://docs.defguard.net/1.6/in-depth/architecture/architecture.md)
- [Architecture Decision Records](https://docs.defguard.net/1.6/in-depth/architecture-decision-records.md): What are Defguard's Architecture Decision Records?
- [1.6](https://docs.defguard.net/1.6/in-depth/architecture-decision-records/1.6.md)
- [1.5](https://docs.defguard.net/1.6/in-depth/architecture-decision-records/1.5.md)
- [1.4](https://docs.defguard.net/1.6/in-depth/architecture-decision-records/1.4.md)
- [1.3](https://docs.defguard.net/1.6/in-depth/architecture-decision-records/1.3.md)
- [Pre-1.3](https://docs.defguard.net/1.6/in-depth/architecture-decision-records/pre-1.3.md)
- [Roadmap](https://docs.defguard.net/1.6/in-depth/roadmap.md): This is a high-level project roadmap of planned features.
- [Release cycle](https://docs.defguard.net/1.6/in-depth/release-cycle.md)
- [Client application feature compatibility](https://docs.defguard.net/1.6/in-depth/client-application-feature-compatibility.md)
- [Contributing](https://docs.defguard.net/1.6/for-developers/contributing.md)
- [Environment setup](https://docs.defguard.net/1.6/for-developers/dev-env-setup.md)
- [Translations (core/web)](https://docs.defguard.net/1.6/for-developers/dev-env-setup/translations-web.md)
- [Switching language](https://docs.defguard.net/1.6/for-developers/dev-env-setup/translations-web/switching-language.md)
- [Adding translations](https://docs.defguard.net/1.6/for-developers/dev-env-setup/translations-web/adding-translations.md)
- [Translations (client)](https://docs.defguard.net/1.6/for-developers/dev-env-setup/translations-client.md)
- [Adding translations](https://docs.defguard.net/1.6/for-developers/dev-env-setup/translations-client/adding-translations.md)

## 2.0

- [Welcome](https://docs.defguard.net/readme.md)
- [Getting help](https://docs.defguard.net/support.md)
- [About Defguard](https://docs.defguard.net/about/about-defguard.md)
- [Features overview](https://docs.defguard.net/about/features-overview.md)
- [One-line install script](https://docs.defguard.net/getting-started/one-line-install.md)
- [Overview](https://docs.defguard.net/features/overview.md)
- [Zero-Trust VPN with 2FA/MFA](https://docs.defguard.net/features/wireguard.md)
- [Create/Manage VPN Location](https://docs.defguard.net/features/wireguard/create-your-vpn-network.md)
- [Split Tunnel Configuration](https://docs.defguard.net/features/wireguard/create-your-vpn-network/split-tunnel-configuration.md)
- [Network overview](https://docs.defguard.net/features/wireguard/network-overview.md)
- [Multi-Factor Authentication (MFA/2FA)](https://docs.defguard.net/features/wireguard/multi-factor-authentication-mfa-2fa.md): Defguard is the sole VPN solution that genuinely implements Multi-Factor Authentication (MFA) before a WireGuard® VPN connection is established, significantly enhancing security against cyberattacks.
- [Internal SSO based MFA](https://docs.defguard.net/features/wireguard/multi-factor-authentication-mfa-2fa/internal-sso-based-mfa.md)
- [External SSO based MFA](https://docs.defguard.net/features/wireguard/multi-factor-authentication-mfa-2fa/external-sso-based-mfa.md)
- [Adding client device](https://docs.defguard.net/features/wireguard/remote-desktop-activation.md): How to manually generate token for user as an administrator.
- [Client behaviour customization](https://docs.defguard.net/features/wireguard/behavior-customization.md)
- [DNS and domains](https://docs.defguard.net/features/wireguard/dns-and-domains.md)
- [Executing custom gateway commands](https://docs.defguard.net/features/wireguard/executing-custom-gateway-commands.md)
- [Remote user enrollment](https://docs.defguard.net/features/remote-user-enrollment.md)
- [User onboarding after enrollment](https://docs.defguard.net/features/remote-user-enrollment/user-onboarding-after-enrollment.md)
- [Automatic (real time) desktop client configuration & sync](https://docs.defguard.net/features/remote-user-enrollment/automatic-real-time-desktop-client-configuration.md)
- [Internal SSO (OpenID Connect Provider)](https://docs.defguard.net/features/openid-connect.md)
- [Portainer](https://docs.defguard.net/features/openid-connect/portainer.md)
- [Grafana setup](https://docs.defguard.net/features/openid-connect/grafana-setup.md)
- [Proxmox](https://docs.defguard.net/features/openid-connect/proxmox.md)
- [Matrix / Synapse](https://docs.defguard.net/features/openid-connect/proxmox-1.md)
- [Django](https://docs.defguard.net/features/openid-connect/django.md)
- [MinIO](https://docs.defguard.net/features/openid-connect/minio.md)
- [Vault](https://docs.defguard.net/features/openid-connect/vault.md)
- [External SSO/OpenID providers](https://docs.defguard.net/features/external-openid-providers.md)
- [Google](https://docs.defguard.net/features/external-openid-providers/google.md)
- [Microsoft](https://docs.defguard.net/features/external-openid-providers/microsoft.md)
- [Okta](https://docs.defguard.net/features/external-openid-providers/okta.md)
- [JumpCloud](https://docs.defguard.net/features/external-openid-providers/jumpcloud.md)
- [Keycloak](https://docs.defguard.net/features/external-openid-providers/keycloak.md)
- [Zitadel](https://docs.defguard.net/features/external-openid-providers/zitadel.md)
- [Custom](https://docs.defguard.net/features/external-openid-providers/custom.md)
- [External OIDC secure enrollment](https://docs.defguard.net/features/external-openid-providers/external-oidc-secure-enrollment.md)
- [LDAP and Active Directory integration](https://docs.defguard.net/features/ldap-and-active-directory-integration.md)
- [LDAP Configuration](https://docs.defguard.net/features/ldap-and-active-directory-integration/configuration.md): How to configure the connection between a Defguard instance and LDAP.
- [Example configurations](https://docs.defguard.net/features/ldap-and-active-directory-integration/examples.md)
- [Settings table](https://docs.defguard.net/features/ldap-and-active-directory-integration/settings-table.md): A list describing the LDAP settings available on the settings page.
- [Two-way LDAP and Active Directory synchronization](https://docs.defguard.net/features/ldap-and-active-directory-integration/two-way-ldap-and-active-directory-synchronization.md)
- [Firewall](https://docs.defguard.net/features/firewall.md)
- [Aliases and Destinations](https://docs.defguard.net/features/firewall/aliases-and-destinations.md)
- [Troubleshooting](https://docs.defguard.net/features/firewall/troubleshooting.md)
- [Implementation Details](https://docs.defguard.net/features/firewall/firewall-internals.md)
- [Network devices](https://docs.defguard.net/features/network-devices.md)
- [Activity & Audit logs](https://docs.defguard.net/features/activity-log.md)
- [Audit Log Streaming to SIEM systems](https://docs.defguard.net/features/activity-log/activity-log-streaming.md): This feature is designed to help teams centralize visibility into user actions, security events, and system behavior by integrating with tools they already use for monitoring and incident response.
- [Supported SIEM systems integrations](https://docs.defguard.net/features/activity-log/activity-log-streaming/activity-log-integrations.md): List of supported services to stream activity logs into.
- [Vector integration guide](https://docs.defguard.net/features/activity-log/activity-log-streaming/activity-log-integrations/vector-integration-guide.md): How to stream activity logs to vector.
- [Logstash integration guide](https://docs.defguard.net/features/activity-log/activity-log-streaming/activity-log-integrations/logstash-integration-guide.md): How to stream activity logs to logstash.
- [Notifications](https://docs.defguard.net/features/notifications.md)
- [Email notifications](https://docs.defguard.net/features/notifications/setting-up-smtp-for-email-notifications.md)
- [Gateway notifications](https://docs.defguard.net/features/notifications/gateway-notifications.md)
- [New version notifications](https://docs.defguard.net/features/notifications/new-version-notifications.md)
- [Integrations](https://docs.defguard.net/features/integrations.md)
- [Webhooks](https://docs.defguard.net/features/integrations/webhooks.md)
- [REST API](https://docs.defguard.net/features/integrations/api-tokens.md)
- [OPNSense Configuration](https://docs.defguard.net/features/gateway.md)
- [SSH Authentication](https://docs.defguard.net/features/ssh-authentication.md)
- [Forward auth](https://docs.defguard.net/features/forward-auth.md)
- [User SNAT bindings](https://docs.defguard.net/features/user-snat-bindings.md)
- [Service locations](https://docs.defguard.net/features/service-locations.md)
- [Desktop client auto-provisioning](https://docs.defguard.net/features/desktop-client-auto-provisioning.md)
- [Auto-provisioning in Windows environments](https://docs.defguard.net/features/desktop-client-auto-provisioning/auto-provisioning-in-windows-environments.md)
- [On-premise Active Directory](https://docs.defguard.net/features/desktop-client-auto-provisioning/auto-provisioning-in-windows-environments/on-premise-active-directory-environments.md)
- [Entra ID](https://docs.defguard.net/features/desktop-client-auto-provisioning/auto-provisioning-in-windows-environments/entra-id-environments.md)
- [Generating enrollment tokens with Defguard REST API](https://docs.defguard.net/features/desktop-client-auto-provisioning/generating-enrollment-tokens-with-defguard-rest-api.md)
- [Static IP assignment](https://docs.defguard.net/features/static-ip-assignment.md)
- [Certificate management](https://docs.defguard.net/features/certificate-management.md)
- [Overview](https://docs.defguard.net/deployment-strategies/overview.md): This documentation will guide you through the process of deploying your Defguard instance.
- [Deploying to Production](https://docs.defguard.net/deployment-strategies/deploying-to-production.md)
- [Migration guides](https://docs.defguard.net/deployment-strategies/upgrading.md): Notes on upgrading Defguard and its components
- [Hardware, OS, network and firewall recommendations](https://docs.defguard.net/deployment-strategies/hardware-os-network-and-firewall-recommendations.md): Before Defguard can be deployed please get familiar with the following recommendations
- [Standalone package based installation](https://docs.defguard.net/deployment-strategies/standalone-package-based-installation.md)
- [PostgreSQL database](https://docs.defguard.net/deployment-strategies/standalone-package-based-installation/database.md)
- [Defguard Core](https://docs.defguard.net/deployment-strategies/standalone-package-based-installation/core.md)
- [Defguard Edge](https://docs.defguard.net/deployment-strategies/standalone-package-based-installation/edge.md)
- [Defguard Gateway](https://docs.defguard.net/deployment-strategies/standalone-package-based-installation/gateway.md)
- [Defguard APT repository](https://docs.defguard.net/deployment-strategies/standalone-package-based-installation/defguard-apt-repository.md)
- [Docker Compose](https://docs.defguard.net/deployment-strategies/docker-compose.md)
- [Kubernetes](https://docs.defguard.net/deployment-strategies/kubernetes.md)
- [OVA](https://docs.defguard.net/deployment-strategies/ova.md)
- [Configuration](https://docs.defguard.net/deployment-strategies/configuration.md)
- [Running Gateway on OPNsense firewall](https://docs.defguard.net/deployment-strategies/running-gateway-on-opnsense-firewall.md)
- [Running Gateway on VyOS](https://docs.defguard.net/deployment-strategies/running-gateway-on-vyos.md)
- [Reverse Proxy configuration using NGINX](https://docs.defguard.net/deployment-strategies/reverse-proxy-configuration-using-nginx.md)
- [High Availability and Failover](https://docs.defguard.net/deployment-strategies/high-availability-and-failover.md)
- [WireGuard UDP load-balancing](https://docs.defguard.net/deployment-strategies/high-availability-and-failover/wireguard-udp-load-balancing.md)
- [Gateway with CARP](https://docs.defguard.net/deployment-strategies/high-availability-and-failover/gateway-with-carp.md)
- [Updating and version compatibility](https://docs.defguard.net/deployment-strategies/updating-and-version-compatibility.md)
- [Using a userspace WireGuard implementation](https://docs.defguard.net/deployment-strategies/using-a-userspace-wireguard-implementation.md)
- [Pre-production and development releases](https://docs.defguard.net/deployment-strategies/pre-production-and-development-releases.md)
- [Health check](https://docs.defguard.net/deployment-strategies/health-check.md)
- [Production deployment verification guide](https://docs.defguard.net/deployment-strategies/production-deployment-verification-guide.md)
- [Linux Kernel WireGuard tuning](https://docs.defguard.net/deployment-strategies/linux-kernel-wireguard-tuning.md): This technical guide addresses WireGuard VPN latency, throughput, resilience, and scalability requirements by tuning Linux kernel parameters (as WireGuard is part of the Linux kernel).
- [Programmatic gateway adoption](https://docs.defguard.net/deployment-strategies/programmatic-gateway-adoption.md)
- [Purchasing and using the license](https://docs.defguard.net/enterprise/license.md)
- [Overview](https://docs.defguard.net/using-defguard-for-end-users/overwiew.md)
- [Mobile Client](https://docs.defguard.net/using-defguard-for-end-users/mobile-client.md)
- [Adding new Instance](https://docs.defguard.net/using-defguard-for-end-users/mobile-client/instance-adding.md)
- [Connecting to Instance](https://docs.defguard.net/using-defguard-for-end-users/mobile-client/instance-connect.md)
- [Managing your Instance](https://docs.defguard.net/using-defguard-for-end-users/mobile-client/instance-manage.md)
- [Using Biometry as MFA method](https://docs.defguard.net/using-defguard-for-end-users/mobile-client/using-biometry-as-mfa-method.md)
- [Desktop Client](https://docs.defguard.net/using-defguard-for-end-users/desktop-client.md)
- [Instance configuration](https://docs.defguard.net/using-defguard-for-end-users/desktop-client/instance-configuration.md): In this guide, you will learn how to add, remove and update Instance in Defguard desktop client.
- [Using Multi-Factor Authentication (MFA)](https://docs.defguard.net/using-defguard-for-end-users/desktop-client/using-multi-factor-authentication-mfa.md)
- [MTU Setting](https://docs.defguard.net/using-defguard-for-end-users/desktop-client/mtu-setting.md)
- [CLI Client](https://docs.defguard.net/using-defguard-for-end-users/cli-client.md)
- [Other WireGuard® Clients](https://docs.defguard.net/using-defguard-for-end-users/adding-wireguard-devices.md)
- [Configuring a device for new VPN Location manually](https://docs.defguard.net/using-defguard-for-end-users/adding-wireguard-devices/configuring-a-device-for-a-new-vpn-location.md)
- [Password change / Reset](https://docs.defguard.net/using-defguard-for-end-users/changing-your-password.md)
- [Enrollment & Onboarding](https://docs.defguard.net/using-defguard-for-end-users/enrollment.md)
- [With internal Defguard SSO](https://docs.defguard.net/using-defguard-for-end-users/enrollment/with-internal-defguard-sso.md)
- [With external SSO (Google/Microsoft/Custom)](https://docs.defguard.net/using-defguard-for-end-users/enrollment/with-external-sso-google-microsoft-custom.md)
- [Setting up 2FA/MFA](https://docs.defguard.net/using-defguard-for-end-users/setting-up-2fa-mfa.md)
- [How to submit an issue](https://docs.defguard.net/support-1/how-to-submit-an-issue.md)
- [Sending support information](https://docs.defguard.net/support-1/sending-support-information.md)
- [Core](https://docs.defguard.net/support-1/sending-support-information/core.md)
- [Desktop Client](https://docs.defguard.net/support-1/sending-support-information/desktop-client.md)
- [Mobile client](https://docs.defguard.net/support-1/sending-support-information/mobile-client.md)
- [Troubleshooting Guides](https://docs.defguard.net/support-1/troubleshooting-guides.md): Before contacting support, check whether your problem is covered here.
- [Core](https://docs.defguard.net/support-1/troubleshooting-guides/core.md)
- [h2 protocol error from reverse proxy](https://docs.defguard.net/support-1/troubleshooting-guides/core/h2-protocol-error-from-reverse-proxy.md)
- [Unable to sign in with correct credentials](https://docs.defguard.net/support-1/troubleshooting-guides/core/unable-to-sign-in-with-correct-credentials.md)
- [User lost access to their 2FA methods](https://docs.defguard.net/support-1/troubleshooting-guides/core/user-lost-access-to-their-2fa-methods.md)
- [Enrollment URL Changed](https://docs.defguard.net/support-1/troubleshooting-guides/core/enrollment-url-changed.md)
- [Failed to parse duration](https://docs.defguard.net/support-1/troubleshooting-guides/core/failed-to-parse-duration.md)
- [Core cannot connect to Gateway or Edge after restart on single-host deployments](https://docs.defguard.net/support-1/troubleshooting-guides/core/core-cannot-connect-to-gateway-or-edge-after-restart-on-single-host-deployments.md)
- [Desktop Client](https://docs.defguard.net/support-1/troubleshooting-guides/desktop-client.md)
- [Unix socket permission error on connect (Linux)](https://docs.defguard.net/support-1/troubleshooting-guides/desktop-client/unix-socket-permission-error-on-connect-linux.md)
- [MFA location disconnected after X-time](https://docs.defguard.net/support-1/troubleshooting-guides/desktop-client/mfa-location-disconnected-after-x-time.md)
- [High disk usage](https://docs.defguard.net/support-1/troubleshooting-guides/desktop-client/high-disk-usage.md)
- [Failed to configure DNS (Linux)](https://docs.defguard.net/support-1/troubleshooting-guides/desktop-client/failed-to-configure-dns-linux.md)
- [Failed to parse IP address](https://docs.defguard.net/support-1/troubleshooting-guides/desktop-client/failed-to-parse-ip-address.md)
- [Disconnecting shows "Connection failed" (Linux / NetworkManager)](https://docs.defguard.net/support-1/troubleshooting-guides/desktop-client/disconnecting-shows-connection-failed-linux-networkmanager.md)
- [resolvconf not found (Debian)](https://docs.defguard.net/support-1/troubleshooting-guides/desktop-client/resolvconf-not-found-debian.md)
- [Unix socket does not exist (Linux)](https://docs.defguard.net/support-1/troubleshooting-guides/desktop-client/unix-socket-does-not-exist-linux.md)
- [Disconnected after MFA timeout](https://docs.defguard.net/support-1/troubleshooting-guides/desktop-client/disconnected-after-mfa-timeout.md)
- [Could not start MFA process](https://docs.defguard.net/support-1/troubleshooting-guides/desktop-client/could-not-start-mfa-process.md)
- [Client connects but cannot reach VPN servers (MTU)](https://docs.defguard.net/support-1/troubleshooting-guides/desktop-client/client-connects-but-cannot-reach-vpn-servers-mtu.md)
- [Desktop client real-time / auto sync does not work](https://docs.defguard.net/support-1/troubleshooting-guides/desktop-client/desktop-client-real-time-auto-sync-does-not-work.md)
- [Windows client unable to connect](https://docs.defguard.net/support-1/troubleshooting-guides/desktop-client/windows-client-unable-to-connect.md)
- ["All traffic" connection issues](https://docs.defguard.net/support-1/troubleshooting-guides/desktop-client/client-all-traffic-connection-issues.md)
- [Windows installer exit codes](https://docs.defguard.net/support-1/troubleshooting-guides/desktop-client/windows-installer-exit-codes.md): Desktop Client windows installer exist codes list.
- [Mobile Client](https://docs.defguard.net/support-1/troubleshooting-guides/mobile-client.md)
- [Android "Failed host lookup" error](https://docs.defguard.net/support-1/troubleshooting-guides/mobile-client/android-failed-host-lookup-error.md)
- [Edge Component](https://docs.defguard.net/support-1/troubleshooting-guides/edge-component.md)
- [There was a network error. Can't reach Edge](https://docs.defguard.net/support-1/troubleshooting-guides/edge-component/there-was-a-network-error.-cant-reach-edge.md)
- [Gateway](https://docs.defguard.net/support-1/troubleshooting-guides/gateway.md)
- [No buffer space available](https://docs.defguard.net/support-1/troubleshooting-guides/gateway/no-buffer-space-available.md)
- [TOTP / email codes for MFA do not work](https://docs.defguard.net/support-1/troubleshooting-guides/totp-email-codes-for-mfa-do-not-work.md)
- [WebAuthn security keys](https://docs.defguard.net/support-1/troubleshooting-guides/webauthn-security-keys.md)
- [Can access VPN but not local network or internet](https://docs.defguard.net/support-1/troubleshooting-guides/can-access-vpn-but-not-local-network-or-internet.md)
- [How to verify the VPN is working](https://docs.defguard.net/support-1/troubleshooting-guides/how-to-verify-the-vpn-is-working.md)
- [Testing VPN speed](https://docs.defguard.net/support-1/troubleshooting-guides/testing-vpn-speed.md): VPN Speed Testing Guide: Linux Server & Windows/Linux Clients
- [Server migration and licence transfer](https://docs.defguard.net/support-1/server-migration-and-licence-transfer.md)
- [Troubleshooting Guide V1 legacy backup](https://docs.defguard.net/support-1/troubleshooting.md): Here are some common issues / problems that are frequently encountered.
- [Sending support information](https://docs.defguard.net/support-1/troubleshooting/sending-support-info.md)
- [Client Windows installer exit codes](https://docs.defguard.net/support-1/troubleshooting/windows-installer-exit-codes.md): Desktop Client windows installer exist codes list.
- [Client "All traffic" connection issues](https://docs.defguard.net/support-1/troubleshooting/client-all-traffic-connection-issues.md)
- [WebAuthn security keys](https://docs.defguard.net/support-1/troubleshooting/webauthn-security-keys.md)
- [Initial Setup Wizard: setting up from scratch](https://docs.defguard.net/tutorials/initial-setup-wizard-setting-up-from-scratch.md)
- [Migrating from Defguard 1.6 to 2.0](https://docs.defguard.net/tutorials/migrating-from-defguard-1.6-to-2.0.md)
- [Adding Edge component](https://docs.defguard.net/tutorials/adding-edge-component.md)
- [Defguard Compliance](https://docs.defguard.net/compliance/defguard-compliance.md)
- [Secure by design](https://docs.defguard.net/in-depth/secure-by-design.md)
- [Architecture](https://docs.defguard.net/in-depth/architecture.md)
- [How do VPN statistics work](https://docs.defguard.net/in-depth/architecture/how-do-vpn-statistics-work.md)
- [Security concepts](https://docs.defguard.net/in-depth/architecture/security-concepts.md)
- [MFA Architecture](https://docs.defguard.net/in-depth/architecture/architecture.md)
- [Architecture Decision Records](https://docs.defguard.net/in-depth/architecture-decision-records.md): What are Defguard's Architecture Decision Records?
- [2.0](https://docs.defguard.net/in-depth/architecture-decision-records/2.0.md)
- [1.6](https://docs.defguard.net/in-depth/architecture-decision-records/1.6.md)
- [1.5](https://docs.defguard.net/in-depth/architecture-decision-records/1.5.md)
- [1.4](https://docs.defguard.net/in-depth/architecture-decision-records/1.4.md)
- [1.3](https://docs.defguard.net/in-depth/architecture-decision-records/1.3.md)
- [Pre-1.3](https://docs.defguard.net/in-depth/architecture-decision-records/pre-1.3.md)
- [Client application feature compatibility](https://docs.defguard.net/in-depth/client-application-feature-compatibility.md)
- [Defguard Open Organisation](https://docs.defguard.net/in-depth/defguard-open-organisation.md)
- [Product Development Procedure](https://docs.defguard.net/in-depth/defguard-open-organisation/product-development-procedure.md)
- [Roadmap](https://docs.defguard.net/in-depth/defguard-open-organisation/roadmap.md): This is a high-level project roadmap of planned features.
- [BoringTun](https://docs.defguard.net/in-depth/boringtun.md)
- [Contributing](https://docs.defguard.net/for-developers/contributing.md)
- [Environment setup](https://docs.defguard.net/for-developers/dev-env-setup.md)
- [Translations (core/web)](https://docs.defguard.net/for-developers/dev-env-setup/translations-web.md)
- [Switching language](https://docs.defguard.net/for-developers/dev-env-setup/translations-web/switching-language.md)
- [Adding translations](https://docs.defguard.net/for-developers/dev-env-setup/translations-web/adding-translations.md)
- [Translations (client)](https://docs.defguard.net/for-developers/dev-env-setup/translations-client.md)
- [Adding translations](https://docs.defguard.net/for-developers/dev-env-setup/translations-client/adding-translations.md)

## 2.1

- [Welcome](https://docs.defguard.net/2.1/readme.md)
- [Getting help](https://docs.defguard.net/2.1/support.md)
- [About Defguard](https://docs.defguard.net/2.1/about/about-defguard.md)
- [Features overview](https://docs.defguard.net/2.1/about/features-overview.md)
- [One-line install script](https://docs.defguard.net/2.1/getting-started/one-line-install.md)
- [Overview](https://docs.defguard.net/2.1/features/overview.md)
- [Zero-Trust VPN with 2FA/MFA](https://docs.defguard.net/2.1/features/wireguard.md)
- [Create/Manage VPN Location](https://docs.defguard.net/2.1/features/wireguard/create-your-vpn-network.md)
- [Split Tunnel Configuration](https://docs.defguard.net/2.1/features/wireguard/create-your-vpn-network/split-tunnel-configuration.md)
- [Network overview](https://docs.defguard.net/2.1/features/wireguard/network-overview.md)
- [Multi-Factor Authentication (MFA/2FA)](https://docs.defguard.net/2.1/features/wireguard/multi-factor-authentication-mfa-2fa.md): Defguard is the sole VPN solution that genuinely implements Multi-Factor Authentication (MFA) before a WireGuard® VPN connection is established, significantly enhancing security against cyberattacks.
- [Internal SSO based MFA](https://docs.defguard.net/2.1/features/wireguard/multi-factor-authentication-mfa-2fa/internal-sso-based-mfa.md)
- [External SSO based MFA](https://docs.defguard.net/2.1/features/wireguard/multi-factor-authentication-mfa-2fa/external-sso-based-mfa.md)
- [Adding client device](https://docs.defguard.net/2.1/features/wireguard/remote-desktop-activation.md): How to manually generate token for user as an administrator.
- [Client behaviour customization](https://docs.defguard.net/2.1/features/wireguard/behavior-customization.md)
- [DNS and domains](https://docs.defguard.net/2.1/features/wireguard/dns-and-domains.md)
- [Executing custom gateway commands](https://docs.defguard.net/2.1/features/wireguard/executing-custom-gateway-commands.md)
- [Remote user enrollment](https://docs.defguard.net/2.1/features/remote-user-enrollment.md)
- [User onboarding after enrollment](https://docs.defguard.net/2.1/features/remote-user-enrollment/user-onboarding-after-enrollment.md)
- [Automatic (real time) desktop client configuration & sync](https://docs.defguard.net/2.1/features/remote-user-enrollment/automatic-real-time-desktop-client-configuration.md)
- [Internal SSO (OpenID Connect Provider)](https://docs.defguard.net/2.1/features/openid-connect.md)
- [Portainer](https://docs.defguard.net/2.1/features/openid-connect/portainer.md)
- [Grafana setup](https://docs.defguard.net/2.1/features/openid-connect/grafana-setup.md)
- [Proxmox](https://docs.defguard.net/2.1/features/openid-connect/proxmox.md)
- [Matrix / Synapse](https://docs.defguard.net/2.1/features/openid-connect/proxmox-1.md)
- [Django](https://docs.defguard.net/2.1/features/openid-connect/django.md)
- [MinIO](https://docs.defguard.net/2.1/features/openid-connect/minio.md)
- [Vault](https://docs.defguard.net/2.1/features/openid-connect/vault.md)
- [External SSO/OpenID providers](https://docs.defguard.net/2.1/features/external-openid-providers.md)
- [Google](https://docs.defguard.net/2.1/features/external-openid-providers/google.md)
- [Microsoft](https://docs.defguard.net/2.1/features/external-openid-providers/microsoft.md)
- [Okta](https://docs.defguard.net/2.1/features/external-openid-providers/okta.md)
- [JumpCloud](https://docs.defguard.net/2.1/features/external-openid-providers/jumpcloud.md)
- [Keycloak](https://docs.defguard.net/2.1/features/external-openid-providers/keycloak.md)
- [Zitadel](https://docs.defguard.net/2.1/features/external-openid-providers/zitadel.md)
- [Custom](https://docs.defguard.net/2.1/features/external-openid-providers/custom.md)
- [External OIDC secure enrollment](https://docs.defguard.net/2.1/features/external-openid-providers/external-oidc-secure-enrollment.md)
- [LDAP and Active Directory integration](https://docs.defguard.net/2.1/features/ldap-and-active-directory-integration.md)
- [LDAP Configuration](https://docs.defguard.net/2.1/features/ldap-and-active-directory-integration/configuration.md): How to configure the connection between a Defguard instance and LDAP.
- [Example configurations](https://docs.defguard.net/2.1/features/ldap-and-active-directory-integration/examples.md)
- [Settings table](https://docs.defguard.net/2.1/features/ldap-and-active-directory-integration/settings-table.md): A list describing the LDAP settings available on the settings page.
- [Two-way LDAP and Active Directory synchronization](https://docs.defguard.net/2.1/features/ldap-and-active-directory-integration/two-way-ldap-and-active-directory-synchronization.md)
- [Firewall](https://docs.defguard.net/2.1/features/firewall.md)
- [Aliases and Destinations](https://docs.defguard.net/2.1/features/firewall/aliases-and-destinations.md)
- [Troubleshooting](https://docs.defguard.net/2.1/features/firewall/troubleshooting.md)
- [Implementation Details](https://docs.defguard.net/2.1/features/firewall/firewall-internals.md)
- [Network devices](https://docs.defguard.net/2.1/features/network-devices.md)
- [Activity & Audit logs](https://docs.defguard.net/2.1/features/activity-log.md)
- [Audit Log Streaming to SIEM systems](https://docs.defguard.net/2.1/features/activity-log/activity-log-streaming.md): This feature is designed to help teams centralize visibility into user actions, security events, and system behavior by integrating with tools they already use for monitoring and incident response.
- [Supported SIEM systems integrations](https://docs.defguard.net/2.1/features/activity-log/activity-log-streaming/activity-log-integrations.md): List of supported services to stream activity logs into.
- [Vector integration guide](https://docs.defguard.net/2.1/features/activity-log/activity-log-streaming/activity-log-integrations/vector-integration-guide.md): How to stream activity logs to vector.
- [Logstash integration guide](https://docs.defguard.net/2.1/features/activity-log/activity-log-streaming/activity-log-integrations/logstash-integration-guide.md): How to stream activity logs to logstash.
- [Notifications](https://docs.defguard.net/2.1/features/notifications.md)
- [Email notifications](https://docs.defguard.net/2.1/features/notifications/setting-up-smtp-for-email-notifications.md)
- [Gateway notifications](https://docs.defguard.net/2.1/features/notifications/gateway-notifications.md)
- [New version notifications](https://docs.defguard.net/2.1/features/notifications/new-version-notifications.md)
- [Integrations](https://docs.defguard.net/2.1/features/integrations.md)
- [Webhooks](https://docs.defguard.net/2.1/features/integrations/webhooks.md)
- [REST API](https://docs.defguard.net/2.1/features/integrations/api-tokens.md)
- [OPNSense Configuration](https://docs.defguard.net/2.1/features/gateway.md)
- [SSH Authentication](https://docs.defguard.net/2.1/features/ssh-authentication.md)
- [Forward auth](https://docs.defguard.net/2.1/features/forward-auth.md)
- [User SNAT bindings](https://docs.defguard.net/2.1/features/user-snat-bindings.md)
- [Service locations](https://docs.defguard.net/2.1/features/service-locations.md)
- [Desktop client auto-provisioning](https://docs.defguard.net/2.1/features/desktop-client-auto-provisioning.md)
- [Auto-provisioning in Windows environments](https://docs.defguard.net/2.1/features/desktop-client-auto-provisioning/auto-provisioning-in-windows-environments.md)
- [On-premise Active Directory](https://docs.defguard.net/2.1/features/desktop-client-auto-provisioning/auto-provisioning-in-windows-environments/on-premise-active-directory-environments.md)
- [Entra ID](https://docs.defguard.net/2.1/features/desktop-client-auto-provisioning/auto-provisioning-in-windows-environments/entra-id-environments.md)
- [Generating enrollment tokens with Defguard REST API](https://docs.defguard.net/2.1/features/desktop-client-auto-provisioning/generating-enrollment-tokens-with-defguard-rest-api.md)
- [Static IP assignment](https://docs.defguard.net/2.1/features/static-ip-assignment.md)
- [Certificate management](https://docs.defguard.net/2.1/features/certificate-management.md)
- [Device posture verification](https://docs.defguard.net/2.1/features/device-posture-verification.md)
- [Overview](https://docs.defguard.net/2.1/deployment-strategies/overview.md): This documentation will guide you through the process of deploying your Defguard instance.
- [Deploying to Production](https://docs.defguard.net/2.1/deployment-strategies/deploying-to-production.md)
- [Migration guides](https://docs.defguard.net/2.1/deployment-strategies/upgrading.md): Notes on upgrading Defguard and its components
- [Hardware, OS, network and firewall recommendations](https://docs.defguard.net/2.1/deployment-strategies/hardware-os-network-and-firewall-recommendations.md): Before Defguard can be deployed please get familiar with the following recommendations
- [Standalone package based installation](https://docs.defguard.net/2.1/deployment-strategies/standalone-package-based-installation.md)
- [PostgreSQL database](https://docs.defguard.net/2.1/deployment-strategies/standalone-package-based-installation/database.md)
- [Defguard Core](https://docs.defguard.net/2.1/deployment-strategies/standalone-package-based-installation/core.md)
- [Defguard Edge](https://docs.defguard.net/2.1/deployment-strategies/standalone-package-based-installation/edge.md)
- [Defguard Gateway](https://docs.defguard.net/2.1/deployment-strategies/standalone-package-based-installation/gateway.md)
- [Defguard APT repository](https://docs.defguard.net/2.1/deployment-strategies/standalone-package-based-installation/defguard-apt-repository.md)
- [Docker Compose](https://docs.defguard.net/2.1/deployment-strategies/docker-compose.md)
- [Kubernetes](https://docs.defguard.net/2.1/deployment-strategies/kubernetes.md)
- [Terraform](https://docs.defguard.net/2.1/deployment-strategies/terraform.md)
- [OVA](https://docs.defguard.net/2.1/deployment-strategies/ova.md)
- [Amazon Machine Image (AMI)](https://docs.defguard.net/2.1/deployment-strategies/amis-and-aws-cloudformation.md)
- [Configuring HTTPS using AWS Certificate Manager](https://docs.defguard.net/2.1/deployment-strategies/amis-and-aws-cloudformation/configuring-https-using-aws-certificate-manager.md)
- [Configuration](https://docs.defguard.net/2.1/deployment-strategies/configuration.md)
- [Running Gateway on OPNsense firewall](https://docs.defguard.net/2.1/deployment-strategies/running-gateway-on-opnsense-firewall.md)
- [Running Gateway on VyOS](https://docs.defguard.net/2.1/deployment-strategies/running-gateway-on-vyos.md)
- [Reverse Proxy configuration using NGINX](https://docs.defguard.net/2.1/deployment-strategies/reverse-proxy-configuration-using-nginx.md)
- [High Availability and Failover](https://docs.defguard.net/2.1/deployment-strategies/high-availability-and-failover.md)
- [WireGuard UDP load-balancing](https://docs.defguard.net/2.1/deployment-strategies/high-availability-and-failover/wireguard-udp-load-balancing.md)
- [Gateway with CARP](https://docs.defguard.net/2.1/deployment-strategies/high-availability-and-failover/gateway-with-carp.md)
- [Updating and version compatibility](https://docs.defguard.net/2.1/deployment-strategies/updating-and-version-compatibility.md)
- [Using a userspace WireGuard implementation](https://docs.defguard.net/2.1/deployment-strategies/using-a-userspace-wireguard-implementation.md)
- [Pre-production and development releases](https://docs.defguard.net/2.1/deployment-strategies/pre-production-and-development-releases.md)
- [Health check](https://docs.defguard.net/2.1/deployment-strategies/health-check.md)
- [Production deployment verification guide](https://docs.defguard.net/2.1/deployment-strategies/production-deployment-verification-guide.md)
- [Linux Kernel WireGuard tuning](https://docs.defguard.net/2.1/deployment-strategies/linux-kernel-wireguard-tuning.md): This technical guide addresses WireGuard VPN latency, throughput, resilience, and scalability requirements by tuning Linux kernel parameters (as WireGuard is part of the Linux kernel).
- [Programmatic gateway adoption](https://docs.defguard.net/2.1/deployment-strategies/programmatic-gateway-adoption.md)
- [Purchasing and using the license](https://docs.defguard.net/2.1/enterprise/license.md)
- [Overview](https://docs.defguard.net/2.1/using-defguard-for-end-users/overwiew.md)
- [Mobile Client](https://docs.defguard.net/2.1/using-defguard-for-end-users/mobile-client.md)
- [Adding new Instance](https://docs.defguard.net/2.1/using-defguard-for-end-users/mobile-client/instance-adding.md)
- [Connecting to Instance](https://docs.defguard.net/2.1/using-defguard-for-end-users/mobile-client/instance-connect.md)
- [Managing your Instance](https://docs.defguard.net/2.1/using-defguard-for-end-users/mobile-client/instance-manage.md)
- [Using Biometry as MFA method](https://docs.defguard.net/2.1/using-defguard-for-end-users/mobile-client/using-biometry-as-mfa-method.md)
- [Desktop Client](https://docs.defguard.net/2.1/using-defguard-for-end-users/desktop-client.md)
- [Instance configuration](https://docs.defguard.net/2.1/using-defguard-for-end-users/desktop-client/instance-configuration.md): In this guide, you will learn how to add, remove and update Instance in Defguard desktop client.
- [Using Multi-Factor Authentication (MFA)](https://docs.defguard.net/2.1/using-defguard-for-end-users/desktop-client/using-multi-factor-authentication-mfa.md)
- [MTU Setting](https://docs.defguard.net/2.1/using-defguard-for-end-users/desktop-client/mtu-setting.md)
- [Command-line (defguard-cli)](https://docs.defguard.net/2.1/using-defguard-for-end-users/desktop-client/command-line-defguard-cli.md)
- [CLI Client](https://docs.defguard.net/2.1/using-defguard-for-end-users/cli-client.md)
- [Other WireGuard® Clients](https://docs.defguard.net/2.1/using-defguard-for-end-users/adding-wireguard-devices.md)
- [Configuring a device for new VPN Location manually](https://docs.defguard.net/2.1/using-defguard-for-end-users/adding-wireguard-devices/configuring-a-device-for-a-new-vpn-location.md)
- [Password change / Reset](https://docs.defguard.net/2.1/using-defguard-for-end-users/changing-your-password.md)
- [Enrollment & Onboarding](https://docs.defguard.net/2.1/using-defguard-for-end-users/enrollment.md)
- [With internal Defguard SSO](https://docs.defguard.net/2.1/using-defguard-for-end-users/enrollment/with-internal-defguard-sso.md)
- [With external SSO (Google/Microsoft/Custom)](https://docs.defguard.net/2.1/using-defguard-for-end-users/enrollment/with-external-sso-google-microsoft-custom.md)
- [Setting up 2FA/MFA](https://docs.defguard.net/2.1/using-defguard-for-end-users/setting-up-2fa-mfa.md)
- [Resolving Posture Check Failures](https://docs.defguard.net/2.1/using-defguard-for-end-users/resolving-posture-check-failures.md)
- [How to submit an issue](https://docs.defguard.net/2.1/support-1/how-to-submit-an-issue.md)
- [Sending support information](https://docs.defguard.net/2.1/support-1/sending-support-information.md)
- [Core](https://docs.defguard.net/2.1/support-1/sending-support-information/core.md)
- [Desktop Client](https://docs.defguard.net/2.1/support-1/sending-support-information/desktop-client.md)
- [Mobile client](https://docs.defguard.net/2.1/support-1/sending-support-information/mobile-client.md)
- [Using the Support Portal](https://docs.defguard.net/2.1/support-1/using-the-support-portal.md)
- [Troubleshooting Guides](https://docs.defguard.net/2.1/support-1/troubleshooting-guides.md): Before contacting support, check whether your problem is covered here.
- [Core](https://docs.defguard.net/2.1/support-1/troubleshooting-guides/core.md)
- [h2 protocol error from reverse proxy](https://docs.defguard.net/2.1/support-1/troubleshooting-guides/core/h2-protocol-error-from-reverse-proxy.md)
- [Unable to sign in with correct credentials](https://docs.defguard.net/2.1/support-1/troubleshooting-guides/core/unable-to-sign-in-with-correct-credentials.md)
- [User lost access to their 2FA methods](https://docs.defguard.net/2.1/support-1/troubleshooting-guides/core/user-lost-access-to-their-2fa-methods.md)
- [Enrollment URL Changed](https://docs.defguard.net/2.1/support-1/troubleshooting-guides/core/enrollment-url-changed.md)
- [Failed to parse duration](https://docs.defguard.net/2.1/support-1/troubleshooting-guides/core/failed-to-parse-duration.md)
- [Core cannot connect to Gateway or Edge after restart on single-host deployments](https://docs.defguard.net/2.1/support-1/troubleshooting-guides/core/core-cannot-connect-to-gateway-or-edge-after-restart-on-single-host-deployments.md)
- [Desktop Client](https://docs.defguard.net/2.1/support-1/troubleshooting-guides/desktop-client.md)
- [Unix socket permission error on connect (Linux)](https://docs.defguard.net/2.1/support-1/troubleshooting-guides/desktop-client/unix-socket-permission-error-on-connect-linux.md)
- [MFA location disconnected after X-time](https://docs.defguard.net/2.1/support-1/troubleshooting-guides/desktop-client/mfa-location-disconnected-after-x-time.md)
- [High disk usage](https://docs.defguard.net/2.1/support-1/troubleshooting-guides/desktop-client/high-disk-usage.md)
- [Failed to configure DNS (Linux)](https://docs.defguard.net/2.1/support-1/troubleshooting-guides/desktop-client/failed-to-configure-dns-linux.md)
- [Failed to parse IP address](https://docs.defguard.net/2.1/support-1/troubleshooting-guides/desktop-client/failed-to-parse-ip-address.md)
- [Disconnecting shows "Connection failed" (Linux / NetworkManager)](https://docs.defguard.net/2.1/support-1/troubleshooting-guides/desktop-client/disconnecting-shows-connection-failed-linux-networkmanager.md)
- [resolvconf not found (Debian)](https://docs.defguard.net/2.1/support-1/troubleshooting-guides/desktop-client/resolvconf-not-found-debian.md)
- [Unix socket does not exist (Linux)](https://docs.defguard.net/2.1/support-1/troubleshooting-guides/desktop-client/unix-socket-does-not-exist-linux.md)
- [Disconnected after MFA timeout](https://docs.defguard.net/2.1/support-1/troubleshooting-guides/desktop-client/disconnected-after-mfa-timeout.md)
- [Could not start MFA process](https://docs.defguard.net/2.1/support-1/troubleshooting-guides/desktop-client/could-not-start-mfa-process.md)
- [Client connects but cannot reach VPN servers (MTU)](https://docs.defguard.net/2.1/support-1/troubleshooting-guides/desktop-client/client-connects-but-cannot-reach-vpn-servers-mtu.md)
- [Desktop client real-time / auto sync does not work](https://docs.defguard.net/2.1/support-1/troubleshooting-guides/desktop-client/desktop-client-real-time-auto-sync-does-not-work.md)
- [Windows client unable to connect](https://docs.defguard.net/2.1/support-1/troubleshooting-guides/desktop-client/windows-client-unable-to-connect.md)
- ["All traffic" connection issues](https://docs.defguard.net/2.1/support-1/troubleshooting-guides/desktop-client/client-all-traffic-connection-issues.md)
- [Windows installer exit codes](https://docs.defguard.net/2.1/support-1/troubleshooting-guides/desktop-client/windows-installer-exit-codes.md): Desktop Client windows installer exist codes list.
- [VPN location is missing from client](https://docs.defguard.net/2.1/support-1/troubleshooting-guides/desktop-client/vpn-location-is-missing-from-client.md)
- [Mobile Client](https://docs.defguard.net/2.1/support-1/troubleshooting-guides/mobile-client.md)
- [Android "Failed host lookup" error](https://docs.defguard.net/2.1/support-1/troubleshooting-guides/mobile-client/android-failed-host-lookup-error.md)
- [Edge Component](https://docs.defguard.net/2.1/support-1/troubleshooting-guides/edge-component.md)
- [There was a network error. Can't reach Edge](https://docs.defguard.net/2.1/support-1/troubleshooting-guides/edge-component/there-was-a-network-error.-cant-reach-edge.md)
- [Gateway](https://docs.defguard.net/2.1/support-1/troubleshooting-guides/gateway.md)
- [No buffer space available](https://docs.defguard.net/2.1/support-1/troubleshooting-guides/gateway/no-buffer-space-available.md)
- [TOTP / email codes for MFA do not work](https://docs.defguard.net/2.1/support-1/troubleshooting-guides/totp-email-codes-for-mfa-do-not-work.md)
- [WebAuthn security keys](https://docs.defguard.net/2.1/support-1/troubleshooting-guides/webauthn-security-keys.md)
- [Can access VPN but not local network or internet](https://docs.defguard.net/2.1/support-1/troubleshooting-guides/can-access-vpn-but-not-local-network-or-internet.md)
- [How to verify the VPN is working](https://docs.defguard.net/2.1/support-1/troubleshooting-guides/how-to-verify-the-vpn-is-working.md)
- [Testing VPN speed](https://docs.defguard.net/2.1/support-1/troubleshooting-guides/testing-vpn-speed.md): VPN Speed Testing Guide: Linux Server & Windows/Linux Clients
- [Server migration and licence transfer](https://docs.defguard.net/2.1/support-1/server-migration-and-licence-transfer.md)
- [Troubleshooting Guide V1 legacy backup](https://docs.defguard.net/2.1/support-1/troubleshooting.md): Here are some common issues / problems that are frequently encountered.
- [Sending support information](https://docs.defguard.net/2.1/support-1/troubleshooting/sending-support-info.md)
- [Client Windows installer exit codes](https://docs.defguard.net/2.1/support-1/troubleshooting/windows-installer-exit-codes.md): Desktop Client windows installer exist codes list.
- [Client "All traffic" connection issues](https://docs.defguard.net/2.1/support-1/troubleshooting/client-all-traffic-connection-issues.md)
- [WebAuthn security keys](https://docs.defguard.net/2.1/support-1/troubleshooting/webauthn-security-keys.md)
- [Initial Setup Wizard: setting up from scratch](https://docs.defguard.net/2.1/tutorials/initial-setup-wizard-setting-up-from-scratch.md)
- [Migrating from Defguard 1.6 to 2.0](https://docs.defguard.net/2.1/tutorials/migrating-from-defguard-1.6-to-2.0.md)
- [Adding Edge component](https://docs.defguard.net/2.1/tutorials/adding-edge-component.md)
- [Defguard Compliance](https://docs.defguard.net/2.1/compliance/defguard-compliance.md)
- [Secure by design](https://docs.defguard.net/2.1/in-depth/secure-by-design.md)
- [Architecture](https://docs.defguard.net/2.1/in-depth/architecture.md)
- [How do VPN statistics work](https://docs.defguard.net/2.1/in-depth/architecture/how-do-vpn-statistics-work.md)
- [Security concepts](https://docs.defguard.net/2.1/in-depth/architecture/security-concepts.md)
- [MFA Architecture](https://docs.defguard.net/2.1/in-depth/architecture/architecture.md)
- [Architecture Decision Records](https://docs.defguard.net/2.1/in-depth/architecture-decision-records.md): What are Defguard's Architecture Decision Records?
- [2.0](https://docs.defguard.net/2.1/in-depth/architecture-decision-records/2.0.md)
- [1.6](https://docs.defguard.net/2.1/in-depth/architecture-decision-records/1.6.md)
- [1.5](https://docs.defguard.net/2.1/in-depth/architecture-decision-records/1.5.md)
- [1.4](https://docs.defguard.net/2.1/in-depth/architecture-decision-records/1.4.md)
- [1.3](https://docs.defguard.net/2.1/in-depth/architecture-decision-records/1.3.md)
- [Pre-1.3](https://docs.defguard.net/2.1/in-depth/architecture-decision-records/pre-1.3.md)
- [Client application feature compatibility](https://docs.defguard.net/2.1/in-depth/client-application-feature-compatibility.md)
- [Defguard Open Organisation](https://docs.defguard.net/2.1/in-depth/defguard-open-organisation.md)
- [Product Development Procedure](https://docs.defguard.net/2.1/in-depth/defguard-open-organisation/product-development-procedure.md)
- [Roadmap](https://docs.defguard.net/2.1/in-depth/defguard-open-organisation/roadmap.md): This is a high-level project roadmap of planned features.
- [BoringTun](https://docs.defguard.net/2.1/in-depth/boringtun.md)
- [Contributing](https://docs.defguard.net/2.1/for-developers/contributing.md)
- [Environment setup](https://docs.defguard.net/2.1/for-developers/dev-env-setup.md)
- [Translations (core/web)](https://docs.defguard.net/2.1/for-developers/dev-env-setup/translations-web.md)
- [Switching language](https://docs.defguard.net/2.1/for-developers/dev-env-setup/translations-web/switching-language.md)
- [Adding translations](https://docs.defguard.net/2.1/for-developers/dev-env-setup/translations-web/adding-translations.md)
- [Translations (client)](https://docs.defguard.net/2.1/for-developers/dev-env-setup/translations-client.md)
- [Adding translations](https://docs.defguard.net/2.1/for-developers/dev-env-setup/translations-client/adding-translations.md)


---

# Agent Instructions
This documentation is published with GitBook. GitBook is the documentation platform designed so that both humans and AI agents can read, navigate, and reason over technical content effectively. Learn more at gitbook.com.

## Querying This Documentation
If you need additional information, you can query the documentation dynamically by asking a question.
Perform an HTTP GET request on a page URL with the `ask` query parameter:
```
GET https://docs.defguard.net/readme.md?ask=<question>
```
The question should be specific, self-contained, and written in natural language.
The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.
Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.