# defguard

## 1.4

- [Welcome](https://docs.defguard.net/1.4/readme.md)
- [Getting help](https://docs.defguard.net/1.4/support.md)
- [About Defguard](https://docs.defguard.net/1.4/about/about-defguard.md)
- [Features overview](https://docs.defguard.net/1.4/about/features-overview.md)
- [One-line install script](https://docs.defguard.net/1.4/getting-started/one-line-install.md)
- [Overview](https://docs.defguard.net/1.4/features/overview.md)
- [Zero-Trust VPN with 2FA/MFA](https://docs.defguard.net/1.4/features/wireguard.md)
- [Create/Manage VPN Location](https://docs.defguard.net/1.4/features/wireguard/create-your-vpn-network.md)
- [Network overview](https://docs.defguard.net/1.4/features/wireguard/network-overview.md)
- [Multi-Factor Authentication (MFA/2FA)](https://docs.defguard.net/1.4/features/wireguard/multi-factor-authentication-mfa-2fa.md): Defguard is the sole VPN solution that genuinely implements Multi-Factor Authentication (MFA) before a WireGuard® VPN connection is established, significantly enhancing security against cyberattacks.
- [Internal SSO based MFA](https://docs.defguard.net/1.4/features/wireguard/multi-factor-authentication-mfa-2fa/internal-sso-based-mfa.md)
- [External SSO based MFA](https://docs.defguard.net/1.4/features/wireguard/multi-factor-authentication-mfa-2fa/external-sso-based-mfa.md)
- [Remote desktop client configuration](https://docs.defguard.net/1.4/features/wireguard/remote-desktop-activation.md): How to manually generate token for user as an administrator.
- [VPN & Client behaviour customization](https://docs.defguard.net/1.4/features/wireguard/behavior-customization.md)
- [DNS and domains](https://docs.defguard.net/1.4/features/wireguard/dns-and-domains.md)
- [Executing custom gateway commands](https://docs.defguard.net/1.4/features/wireguard/executing-custom-gateway-commands.md)
- [Remote user enrollment](https://docs.defguard.net/1.4/features/remote-user-enrollment.md)
- [User onboarding after enrollment](https://docs.defguard.net/1.4/features/remote-user-enrollment/user-onboarding-after-enrollment.md)
- [Automatic (real time) desktop client configuration & sync](https://docs.defguard.net/1.4/features/remote-user-enrollment/automatic-real-time-desktop-client-configuration.md)
- [Internal SSO (OpenID Connect Provider)](https://docs.defguard.net/1.4/features/openid-connect.md)
- [Portainer](https://docs.defguard.net/1.4/features/openid-connect/portainer.md)
- [Grafana setup](https://docs.defguard.net/1.4/features/openid-connect/grafana-setup.md)
- [Proxmox](https://docs.defguard.net/1.4/features/openid-connect/proxmox.md)
- [Matrix / Synapse](https://docs.defguard.net/1.4/features/openid-connect/proxmox-1.md)
- [Django](https://docs.defguard.net/1.4/features/openid-connect/django.md)
- [MinIO](https://docs.defguard.net/1.4/features/openid-connect/minio.md)
- [Vault](https://docs.defguard.net/1.4/features/openid-connect/vault.md)
- [External SSO/OpenID providers](https://docs.defguard.net/1.4/features/external-openid-providers.md)
- [Google](https://docs.defguard.net/1.4/features/external-openid-providers/google.md)
- [Microsoft](https://docs.defguard.net/1.4/features/external-openid-providers/microsoft.md)
- [Okta](https://docs.defguard.net/1.4/features/external-openid-providers/okta.md)
- [JumpCloud](https://docs.defguard.net/1.4/features/external-openid-providers/jumpcloud.md)
- [Keycloak](https://docs.defguard.net/1.4/features/external-openid-providers/keycloak.md)
- [Zitadel](https://docs.defguard.net/1.4/features/external-openid-providers/zitadel.md)
- [Custom](https://docs.defguard.net/1.4/features/external-openid-providers/custom.md)
- [External OIDC secure enrollment](https://docs.defguard.net/1.4/features/external-openid-providers/external-oidc-secure-enrollment.md)
- [LDAP and Active Directory integration](https://docs.defguard.net/1.4/features/ldap-and-active-directory-integration.md)
- [Configuration](https://docs.defguard.net/1.4/features/ldap-and-active-directory-integration/configuration.md): How to configure connection between Defguard instance and LDAP.
- [Settings table](https://docs.defguard.net/1.4/features/ldap-and-active-directory-integration/settings-table.md): List with description of settings for LDAP found in settings page.
- [Two-way LDAP and Active Directory synchronization](https://docs.defguard.net/1.4/features/ldap-and-active-directory-integration/two-way-ldap-and-active-directory-synchronization.md)
- [Access Control List](https://docs.defguard.net/1.4/features/access-control-list.md)
- [ACL Aliases](https://docs.defguard.net/1.4/features/access-control-list/acl-aliases.md)
- [Implementation Details](https://docs.defguard.net/1.4/features/access-control-list/firewall-internals.md)
- [Network devices](https://docs.defguard.net/1.4/features/network-devices.md)
- [Activity & Audit logs](https://docs.defguard.net/1.4/features/activity-log.md)
- [Audit Log Streaming to SIEM systems](https://docs.defguard.net/1.4/features/activity-log/activity-log-streaming.md): This feature is designed to help teams centralize visibility into user actions, security events, and system behavior by integrating with tools they already use for monitoring and incident response.
- [Supported SIEM systems integrations](https://docs.defguard.net/1.4/features/activity-log/activity-log-streaming/activity-log-integrations.md): List of supported services to stream activity logs into.
- [Vector integration guide](https://docs.defguard.net/1.4/features/activity-log/activity-log-streaming/activity-log-integrations/vector-integration-guide.md): How to stream activity logs to vector.
- [Logstash integration guide](https://docs.defguard.net/1.4/features/activity-log/activity-log-streaming/activity-log-integrations/logstash-integration-guide.md): How to stream activity logs to vector.
- [Notifications](https://docs.defguard.net/1.4/features/notifications.md)
- [Email notifications](https://docs.defguard.net/1.4/features/notifications/setting-up-smtp-for-email-notifications.md)
- [Gateway notifications](https://docs.defguard.net/1.4/features/notifications/gateway-notifications.md)
- [New version notifications](https://docs.defguard.net/1.4/features/notifications/new-version-notifications.md)
- [Integrations](https://docs.defguard.net/1.4/features/integrations.md)
- [Webhooks](https://docs.defguard.net/1.4/features/integrations/webhooks.md)
- [REST API](https://docs.defguard.net/1.4/features/integrations/api-tokens.md)
- [OPSense Configuartion](https://docs.defguard.net/1.4/features/gateway.md)
- [SSH Authentication](https://docs.defguard.net/1.4/features/ssh-authentication.md)
- [Forward auth](https://docs.defguard.net/1.4/features/forward-auth.md)
- [YubiKey Provisioning](https://docs.defguard.net/1.4/features/yubikey-provisioning.md): Provisioner repository: https://github.com/DefGuard/YubiKey-Provision
- [User SNAT bindings](https://docs.defguard.net/1.4/features/user-snat-bindings.md)
- [Overview](https://docs.defguard.net/1.4/deployment-strategies/setting-up-your-instance.md)
- [Hardware, OS, network and firewall recommendations](https://docs.defguard.net/1.4/deployment-strategies/hardware-os-network-and-firewall-recommendations.md): Before Defguard can be deployed please get familiar with the following recommendations
- [Standalone package based installation](https://docs.defguard.net/1.4/deployment-strategies/standalone-package-based-installation.md)
- [Docker images and tags](https://docs.defguard.net/1.4/deployment-strategies/docker-images-and-tags.md)
- [Docker Compose](https://docs.defguard.net/1.4/deployment-strategies/docker-compose.md)
- [Kubernetes](https://docs.defguard.net/1.4/deployment-strategies/kubernetes.md)
- [Terraform](https://docs.defguard.net/1.4/deployment-strategies/terraform.md)
- [AMIs and AWS CloudFormation](https://docs.defguard.net/1.4/deployment-strategies/amis-and-aws-cloudformation.md)
- [High Availability and Failover](https://docs.defguard.net/1.4/deployment-strategies/high-availability-and-failover.md)
- [Upgrading](https://docs.defguard.net/1.4/deployment-strategies/upgrading.md): Notes on upgrading Defguard and its components
- [Pre-production and development releases](https://docs.defguard.net/1.4/deployment-strategies/pre-production-and-development-releases.md)
- [Gateway](https://docs.defguard.net/1.4/deployment-strategies/gateway.md)
- [Running gateway on MikroTik routers](https://docs.defguard.net/1.4/deployment-strategies/gateway/running-gateway-on-mikrotik-routers.md)
- [Securing gRPC communication](https://docs.defguard.net/1.4/deployment-strategies/grpc-ssl-communication.md)
- [OpenID RSA key](https://docs.defguard.net/1.4/deployment-strategies/openid-rsa-key.md)
- [Health check](https://docs.defguard.net/1.4/deployment-strategies/health-check.md)
- [Configuration](https://docs.defguard.net/1.4/deployment-strategies/configuration.md)
- [License](https://docs.defguard.net/1.4/enterprise/license.md)
- [Enterprise features](https://docs.defguard.net/1.4/enterprise/enterprise-features.md)
- [Overview](https://docs.defguard.net/1.4/using-defguard-for-end-users/overwiew.md)
- [Mobile Client](https://docs.defguard.net/1.4/using-defguard-for-end-users/mobile-client.md)
- [Desktop Client](https://docs.defguard.net/1.4/using-defguard-for-end-users/desktop-client.md)
- [Instance configuration](https://docs.defguard.net/1.4/using-defguard-for-end-users/desktop-client/instance-configuration.md): In this guide, you will learn how to add, remove and update Instance in Defguard desktop client.
- [Using Multi-Factor Authentication (MFA)](https://docs.defguard.net/1.4/using-defguard-for-end-users/desktop-client/using-multi-factor-authentication-mfa.md)
- [CLI Client](https://docs.defguard.net/1.4/using-defguard-for-end-users/cli-client.md)
- [Other WireGuard® Clients](https://docs.defguard.net/1.4/using-defguard-for-end-users/adding-wireguard-devices.md)
- [Configuring a device for new VPN Location manually](https://docs.defguard.net/1.4/using-defguard-for-end-users/adding-wireguard-devices/configuring-a-device-for-a-new-vpn-location.md)
- [Password change / Reset](https://docs.defguard.net/1.4/using-defguard-for-end-users/changing-your-password.md)
- [Enrollment & Onboarding](https://docs.defguard.net/1.4/using-defguard-for-end-users/enrollment.md)
- [With internal Defguard SSO](https://docs.defguard.net/1.4/using-defguard-for-end-users/enrollment/with-internal-defguard-sso.md)
- [With external SSO (Google/Microsoft/Custom)](https://docs.defguard.net/1.4/using-defguard-for-end-users/enrollment/with-external-sso-google-microsoft-custom.md)
- [Setting up 2FA/MFA](https://docs.defguard.net/1.4/using-defguard-for-end-users/setting-up-2fa-mfa.md)
- [Step by step setting up a VPN server](https://docs.defguard.net/1.4/tutorials/step-by-step-setting-up-a-vpn-server.md)
- [Adding additional VPN locations](https://docs.defguard.net/1.4/tutorials/step-by-step-setting-up-a-vpn-server/adding-additional-vpn-locations.md)
- [Architecture Decision Records](https://docs.defguard.net/1.4/in-depth/architecture-decision-records.md): What are Defguard's Architecture Decision Records?
- [1.4](https://docs.defguard.net/1.4/in-depth/architecture-decision-records/1.4.md)
- [1.3](https://docs.defguard.net/1.4/in-depth/architecture-decision-records/1.3.md)
- [Pre-1.3](https://docs.defguard.net/1.4/in-depth/architecture-decision-records/pre-1.3.md)
- [Architecture](https://docs.defguard.net/1.4/in-depth/architecture.md)
- [MFA Architecture](https://docs.defguard.net/1.4/in-depth/architecture/architecture.md)
- [How do VPN statistics work](https://docs.defguard.net/1.4/in-depth/architecture/how-do-vpn-statistics-work.md)
- [Security concepts](https://docs.defguard.net/1.4/in-depth/architecture/security-concepts.md)
- [Roadmap](https://docs.defguard.net/1.4/in-depth/roadmap.md): This is a high-level project roadmap of planned features.
- [Release cycle](https://docs.defguard.net/1.4/in-depth/release-cycle.md)
- [Contributing](https://docs.defguard.net/1.4/for-developers/contributing.md)
- [Environment setup](https://docs.defguard.net/1.4/for-developers/dev-env-setup.md)
- [Translations (core/web)](https://docs.defguard.net/1.4/for-developers/dev-env-setup/translations-web.md)
- [Switching language](https://docs.defguard.net/1.4/for-developers/dev-env-setup/translations-web/switching-language.md)
- [Adding translations](https://docs.defguard.net/1.4/for-developers/dev-env-setup/translations-web/adding-translations.md)
- [Translations (client)](https://docs.defguard.net/1.4/for-developers/dev-env-setup/translations-client.md)
- [Adding translations](https://docs.defguard.net/1.4/for-developers/dev-env-setup/translations-client/adding-translations.md)
- [Troubleshooting Guide](https://docs.defguard.net/1.4/resources/troubleshooting.md): Here are some common issues / problems that are frequently encountered.
- [Sending support information](https://docs.defguard.net/1.4/resources/troubleshooting/sending-support-info.md)
- [Client Windows installer exit codes](https://docs.defguard.net/1.4/resources/troubleshooting/windows-installer-exit-codes.md): Desktop Client windows installer exist codes list.
- [Client "All traffic" connection issues](https://docs.defguard.net/1.4/resources/troubleshooting/client-all-traffic-connection-issues.md)
- [WebAuthn security keys](https://docs.defguard.net/1.4/resources/troubleshooting/webauthn-security-keys.md)

## 1.5

- [Welcome](https://docs.defguard.net/1.5/readme.md)
- [Getting help](https://docs.defguard.net/1.5/support.md)
- [About Defguard](https://docs.defguard.net/1.5/about/about-defguard.md)
- [Features overview](https://docs.defguard.net/1.5/about/features-overview.md)
- [One-line install script](https://docs.defguard.net/1.5/getting-started/one-line-install.md)
- [Overview](https://docs.defguard.net/1.5/features/overview.md)
- [Zero-Trust VPN with 2FA/MFA](https://docs.defguard.net/1.5/features/wireguard.md)
- [Create/Manage VPN Location](https://docs.defguard.net/1.5/features/wireguard/create-your-vpn-network.md)
- [Network overview](https://docs.defguard.net/1.5/features/wireguard/network-overview.md)
- [Multi-Factor Authentication (MFA/2FA)](https://docs.defguard.net/1.5/features/wireguard/multi-factor-authentication-mfa-2fa.md): Defguard is the sole VPN solution that genuinely implements Multi-Factor Authentication (MFA) before a WireGuard® VPN connection is established, significantly enhancing security against cyberattacks.
- [Internal SSO based MFA](https://docs.defguard.net/1.5/features/wireguard/multi-factor-authentication-mfa-2fa/internal-sso-based-mfa.md)
- [External SSO based MFA](https://docs.defguard.net/1.5/features/wireguard/multi-factor-authentication-mfa-2fa/external-sso-based-mfa.md)
- [Remote desktop client configuration](https://docs.defguard.net/1.5/features/wireguard/remote-desktop-activation.md): How to manually generate token for user as an administrator.
- [VPN & Client behaviour customization](https://docs.defguard.net/1.5/features/wireguard/behavior-customization.md)
- [DNS and domains](https://docs.defguard.net/1.5/features/wireguard/dns-and-domains.md)
- [Executing custom gateway commands](https://docs.defguard.net/1.5/features/wireguard/executing-custom-gateway-commands.md)
- [Remote user enrollment](https://docs.defguard.net/1.5/features/remote-user-enrollment.md)
- [User onboarding after enrollment](https://docs.defguard.net/1.5/features/remote-user-enrollment/user-onboarding-after-enrollment.md)
- [Automatic (real time) desktop client configuration & sync](https://docs.defguard.net/1.5/features/remote-user-enrollment/automatic-real-time-desktop-client-configuration.md)
- [Internal SSO (OpenID Connect Provider)](https://docs.defguard.net/1.5/features/openid-connect.md)
- [Portainer](https://docs.defguard.net/1.5/features/openid-connect/portainer.md)
- [Grafana setup](https://docs.defguard.net/1.5/features/openid-connect/grafana-setup.md)
- [Proxmox](https://docs.defguard.net/1.5/features/openid-connect/proxmox.md)
- [Matrix / Synapse](https://docs.defguard.net/1.5/features/openid-connect/proxmox-1.md)
- [Django](https://docs.defguard.net/1.5/features/openid-connect/django.md)
- [MinIO](https://docs.defguard.net/1.5/features/openid-connect/minio.md)
- [Vault](https://docs.defguard.net/1.5/features/openid-connect/vault.md)
- [External SSO/OpenID providers](https://docs.defguard.net/1.5/features/external-openid-providers.md)
- [Google](https://docs.defguard.net/1.5/features/external-openid-providers/google.md)
- [Microsoft](https://docs.defguard.net/1.5/features/external-openid-providers/microsoft.md)
- [Okta](https://docs.defguard.net/1.5/features/external-openid-providers/okta.md)
- [JumpCloud](https://docs.defguard.net/1.5/features/external-openid-providers/jumpcloud.md)
- [Keycloak](https://docs.defguard.net/1.5/features/external-openid-providers/keycloak.md)
- [Zitadel](https://docs.defguard.net/1.5/features/external-openid-providers/zitadel.md)
- [Custom](https://docs.defguard.net/1.5/features/external-openid-providers/custom.md)
- [External OIDC secure enrollment](https://docs.defguard.net/1.5/features/external-openid-providers/external-oidc-secure-enrollment.md)
- [LDAP and Active Directory integration](https://docs.defguard.net/1.5/features/ldap-and-active-directory-integration.md)
- [Configuration](https://docs.defguard.net/1.5/features/ldap-and-active-directory-integration/configuration.md): How to configure connection between Defguard instance and LDAP.
- [Settings table](https://docs.defguard.net/1.5/features/ldap-and-active-directory-integration/settings-table.md): List with description of settings for LDAP found in settings page.
- [Two-way LDAP and Active Directory synchronization](https://docs.defguard.net/1.5/features/ldap-and-active-directory-integration/two-way-ldap-and-active-directory-synchronization.md)
- [Access Control List](https://docs.defguard.net/1.5/features/access-control-list.md)
- [ACL Aliases](https://docs.defguard.net/1.5/features/access-control-list/acl-aliases.md)
- [Implementation Details](https://docs.defguard.net/1.5/features/access-control-list/firewall-internals.md)
- [Network devices](https://docs.defguard.net/1.5/features/network-devices.md)
- [Activity & Audit logs](https://docs.defguard.net/1.5/features/activity-log.md)
- [Audit Log Streaming to SIEM systems](https://docs.defguard.net/1.5/features/activity-log/activity-log-streaming.md): This feature is designed to help teams centralize visibility into user actions, security events, and system behavior by integrating with tools they already use for monitoring and incident response.
- [Supported SIEM systems integrations](https://docs.defguard.net/1.5/features/activity-log/activity-log-streaming/activity-log-integrations.md): List of supported services to stream activity logs into.
- [Vector integration guide](https://docs.defguard.net/1.5/features/activity-log/activity-log-streaming/activity-log-integrations/vector-integration-guide.md): How to stream activity logs to vector.
- [Logstash integration guide](https://docs.defguard.net/1.5/features/activity-log/activity-log-streaming/activity-log-integrations/logstash-integration-guide.md): How to stream activity logs to logstash.
- [Notifications](https://docs.defguard.net/1.5/features/notifications.md)
- [Email notifications](https://docs.defguard.net/1.5/features/notifications/setting-up-smtp-for-email-notifications.md)
- [Gateway notifications](https://docs.defguard.net/1.5/features/notifications/gateway-notifications.md)
- [New version notifications](https://docs.defguard.net/1.5/features/notifications/new-version-notifications.md)
- [Integrations](https://docs.defguard.net/1.5/features/integrations.md)
- [Webhooks](https://docs.defguard.net/1.5/features/integrations/webhooks.md)
- [REST API](https://docs.defguard.net/1.5/features/integrations/api-tokens.md)
- [OPSense Configuartion](https://docs.defguard.net/1.5/features/gateway.md)
- [SSH Authentication](https://docs.defguard.net/1.5/features/ssh-authentication.md)
- [Forward auth](https://docs.defguard.net/1.5/features/forward-auth.md)
- [YubiKey Provisioning](https://docs.defguard.net/1.5/features/yubikey-provisioning.md): Provisioner repository: https://github.com/DefGuard/YubiKey-Provision
- [User SNAT bindings](https://docs.defguard.net/1.5/features/user-snat-bindings.md)
- [Overview](https://docs.defguard.net/1.5/deployment-strategies/setting-up-your-instance.md): This documentation will guide you through the process of deploying your Defguard instance.
- [Deploying to Production](https://docs.defguard.net/1.5/deployment-strategies/deploying-to-production.md)
- [Hardware, OS, network and firewall recommendations](https://docs.defguard.net/1.5/deployment-strategies/hardware-os-network-and-firewall-recommendations.md): Before Defguard can be deployed please get familiar with the following recommendations
- [Standalone package based installation](https://docs.defguard.net/1.5/deployment-strategies/standalone-package-based-installation.md)
- [Defguard APT repository](https://docs.defguard.net/1.5/deployment-strategies/standalone-package-based-installation/defguard-apt-repository.md)
- [Docker Compose](https://docs.defguard.net/1.5/deployment-strategies/docker-compose.md)
- [Kubernetes](https://docs.defguard.net/1.5/deployment-strategies/kubernetes.md)
- [Terraform](https://docs.defguard.net/1.5/deployment-strategies/terraform.md)
- [Amazon Machine Image (AMI)](https://docs.defguard.net/1.5/deployment-strategies/amis-and-aws-cloudformation.md)
- [Configuring HTTPS using AWS Certificate Manager](https://docs.defguard.net/1.5/deployment-strategies/amis-and-aws-cloudformation/configuring-https-using-aws-certificate-manager.md)
- [Adding a location and getting a Gateway token](https://docs.defguard.net/1.5/deployment-strategies/gateway.md): This documentation will guide you through adding a new location and proceeding with the Gateway deployment, enabling your devices to connect to it via VPN.
- [Configuration](https://docs.defguard.net/1.5/deployment-strategies/configuration.md)
- [Running Gateway on OPNsense firewall](https://docs.defguard.net/1.5/deployment-strategies/running-gateway-on-opnsense-firewall.md)
- [Running Gateway on MikroTik routers](https://docs.defguard.net/1.5/deployment-strategies/running-gateway-on-mikrotik-routers.md)
- [Reverse Proxy configuration using Nginx](https://docs.defguard.net/1.5/deployment-strategies/reverse-proxy-configuration-using-nginx.md)
- [High Availability and Failover](https://docs.defguard.net/1.5/deployment-strategies/high-availability-and-failover.md)
- [Updating and version compatibility](https://docs.defguard.net/1.5/deployment-strategies/updating-and-version-compatibility.md)
- [Migration guides](https://docs.defguard.net/1.5/deployment-strategies/upgrading.md): Notes on upgrading Defguard and its components
- [Using a userspace wireguard-go implementation](https://docs.defguard.net/1.5/deployment-strategies/using-a-userspace-wireguard-go-implementation.md)
- [Pre-production and development releases](https://docs.defguard.net/1.5/deployment-strategies/pre-production-and-development-releases.md)
- [Securing gRPC communication](https://docs.defguard.net/1.5/deployment-strategies/grpc-ssl-communication.md)
- [Using RSA instead of HMAC for OpenID key](https://docs.defguard.net/1.5/deployment-strategies/openid-rsa-key.md)
- [Health check](https://docs.defguard.net/1.5/deployment-strategies/health-check.md)
- [Production deployment verification guide](https://docs.defguard.net/1.5/deployment-strategies/production-deployment-verification-guide.md)
- [License](https://docs.defguard.net/1.5/enterprise/license.md)
- [Enterprise features](https://docs.defguard.net/1.5/enterprise/enterprise-features.md)
- [Overview](https://docs.defguard.net/1.5/using-defguard-for-end-users/overwiew.md)
- [Mobile Client](https://docs.defguard.net/1.5/using-defguard-for-end-users/mobile-client.md)
- [Adding new Instance](https://docs.defguard.net/1.5/using-defguard-for-end-users/mobile-client/instance-adding.md)
- [Connecting to Instance](https://docs.defguard.net/1.5/using-defguard-for-end-users/mobile-client/instance-connect.md)
- [Managing your Instance](https://docs.defguard.net/1.5/using-defguard-for-end-users/mobile-client/instance-manage.md)
- [Using Biometry as MFA method](https://docs.defguard.net/1.5/using-defguard-for-end-users/mobile-client/using-biometry-as-mfa-method.md)
- [Desktop Client](https://docs.defguard.net/1.5/using-defguard-for-end-users/desktop-client.md)
- [Instance configuration](https://docs.defguard.net/1.5/using-defguard-for-end-users/desktop-client/instance-configuration.md): In this guide, you will learn how to add, remove and update Instance in Defguard desktop client.
- [Using Multi-Factor Authentication (MFA)](https://docs.defguard.net/1.5/using-defguard-for-end-users/desktop-client/using-multi-factor-authentication-mfa.md)
- [CLI Client](https://docs.defguard.net/1.5/using-defguard-for-end-users/cli-client.md)
- [Other WireGuard® Clients](https://docs.defguard.net/1.5/using-defguard-for-end-users/adding-wireguard-devices.md)
- [Configuring a device for new VPN Location manually](https://docs.defguard.net/1.5/using-defguard-for-end-users/adding-wireguard-devices/configuring-a-device-for-a-new-vpn-location.md)
- [Password change / Reset](https://docs.defguard.net/1.5/using-defguard-for-end-users/changing-your-password.md)
- [Enrollment & Onboarding](https://docs.defguard.net/1.5/using-defguard-for-end-users/enrollment.md)
- [With internal Defguard SSO](https://docs.defguard.net/1.5/using-defguard-for-end-users/enrollment/with-internal-defguard-sso.md)
- [With external SSO (Google/Microsoft/Custom)](https://docs.defguard.net/1.5/using-defguard-for-end-users/enrollment/with-external-sso-google-microsoft-custom.md)
- [Setting up 2FA/MFA](https://docs.defguard.net/1.5/using-defguard-for-end-users/setting-up-2fa-mfa.md)
- [How to submit an issue](https://docs.defguard.net/1.5/support-1/how-to-submit-an-issue.md)
- [Troubleshooting Guide](https://docs.defguard.net/1.5/support-1/troubleshooting.md): Here are some common issues / problems that are frequently encountered.
- [Sending support information](https://docs.defguard.net/1.5/support-1/troubleshooting/sending-support-info.md)
- [Client Windows installer exit codes](https://docs.defguard.net/1.5/support-1/troubleshooting/windows-installer-exit-codes.md): Desktop Client windows installer exist codes list.
- [Client "All traffic" connection issues](https://docs.defguard.net/1.5/support-1/troubleshooting/client-all-traffic-connection-issues.md)
- [WebAuthn security keys](https://docs.defguard.net/1.5/support-1/troubleshooting/webauthn-security-keys.md)
- [Desktop Client connectivity issues](https://docs.defguard.net/1.5/support-1/troubleshooting/desktop-client-connectivity-issues.md)
- [Server migration and licence transfer](https://docs.defguard.net/1.5/support-1/server-migration-and-licence-transfer.md)
- [Step by step setting up a VPN server](https://docs.defguard.net/1.5/tutorials/step-by-step-setting-up-a-vpn-server.md)
- [Adding additional VPN locations](https://docs.defguard.net/1.5/tutorials/step-by-step-setting-up-a-vpn-server/adding-additional-vpn-locations.md)
- [Custom HTTPS Configuration](https://docs.defguard.net/1.5/tutorials/step-by-step-setting-up-a-vpn-server/custom-https-configuration.md)
- [Architecture](https://docs.defguard.net/1.5/in-depth/architecture.md)
- [How do VPN statistics work](https://docs.defguard.net/1.5/in-depth/architecture/how-do-vpn-statistics-work.md)
- [Security concepts](https://docs.defguard.net/1.5/in-depth/architecture/security-concepts.md)
- [MFA Architecture](https://docs.defguard.net/1.5/in-depth/architecture/architecture.md)
- [Architecture Decision Records](https://docs.defguard.net/1.5/in-depth/architecture-decision-records.md): What are Defguard's Architecture Decision Records?
- [1.5](https://docs.defguard.net/1.5/in-depth/architecture-decision-records/1.5.md)
- [1.4](https://docs.defguard.net/1.5/in-depth/architecture-decision-records/1.4.md)
- [1.3](https://docs.defguard.net/1.5/in-depth/architecture-decision-records/1.3.md)
- [Pre-1.3](https://docs.defguard.net/1.5/in-depth/architecture-decision-records/pre-1.3.md)
- [Roadmap](https://docs.defguard.net/1.5/in-depth/roadmap.md): This is a high-level project roadmap of planned features.
- [Release cycle](https://docs.defguard.net/1.5/in-depth/release-cycle.md)
- [Contributing](https://docs.defguard.net/1.5/for-developers/contributing.md)
- [Environment setup](https://docs.defguard.net/1.5/for-developers/dev-env-setup.md)
- [Translations (core/web)](https://docs.defguard.net/1.5/for-developers/dev-env-setup/translations-web.md)
- [Switching language](https://docs.defguard.net/1.5/for-developers/dev-env-setup/translations-web/switching-language.md)
- [Adding translations](https://docs.defguard.net/1.5/for-developers/dev-env-setup/translations-web/adding-translations.md)
- [Translations (client)](https://docs.defguard.net/1.5/for-developers/dev-env-setup/translations-client.md)
- [Adding translations](https://docs.defguard.net/1.5/for-developers/dev-env-setup/translations-client/adding-translations.md)

## 1.6

- [Welcome](https://docs.defguard.net/1.6/readme.md)
- [Getting help](https://docs.defguard.net/1.6/support.md)
- [About Defguard](https://docs.defguard.net/1.6/about/about-defguard.md)
- [Features overview](https://docs.defguard.net/1.6/about/features-overview.md)
- [One-line install script](https://docs.defguard.net/1.6/getting-started/one-line-install.md)
- [Overview](https://docs.defguard.net/1.6/features/overview.md)
- [Zero-Trust VPN with 2FA/MFA](https://docs.defguard.net/1.6/features/wireguard.md)
- [Create/Manage VPN Location](https://docs.defguard.net/1.6/features/wireguard/create-your-vpn-network.md)
- [Network overview](https://docs.defguard.net/1.6/features/wireguard/network-overview.md)
- [Multi-Factor Authentication (MFA/2FA)](https://docs.defguard.net/1.6/features/wireguard/multi-factor-authentication-mfa-2fa.md): Defguard is the sole VPN solution that genuinely implements Multi-Factor Authentication (MFA) before a WireGuard® VPN connection is established, significantly enhancing security against cyberattacks.
- [Internal SSO based MFA](https://docs.defguard.net/1.6/features/wireguard/multi-factor-authentication-mfa-2fa/internal-sso-based-mfa.md)
- [External SSO based MFA](https://docs.defguard.net/1.6/features/wireguard/multi-factor-authentication-mfa-2fa/external-sso-based-mfa.md)
- [Remote desktop client configuration](https://docs.defguard.net/1.6/features/wireguard/remote-desktop-activation.md): How to manually generate token for user as an administrator.
- [VPN & Client behaviour customization](https://docs.defguard.net/1.6/features/wireguard/behavior-customization.md)
- [DNS and domains](https://docs.defguard.net/1.6/features/wireguard/dns-and-domains.md)
- [Executing custom gateway commands](https://docs.defguard.net/1.6/features/wireguard/executing-custom-gateway-commands.md)
- [Remote user enrollment](https://docs.defguard.net/1.6/features/remote-user-enrollment.md)
- [User onboarding after enrollment](https://docs.defguard.net/1.6/features/remote-user-enrollment/user-onboarding-after-enrollment.md)
- [Automatic (real time) desktop client configuration & sync](https://docs.defguard.net/1.6/features/remote-user-enrollment/automatic-real-time-desktop-client-configuration.md)
- [Internal SSO (OpenID Connect Provider)](https://docs.defguard.net/1.6/features/openid-connect.md)
- [Portainer](https://docs.defguard.net/1.6/features/openid-connect/portainer.md)
- [Grafana setup](https://docs.defguard.net/1.6/features/openid-connect/grafana-setup.md)
- [Proxmox](https://docs.defguard.net/1.6/features/openid-connect/proxmox.md)
- [Matrix / Synapse](https://docs.defguard.net/1.6/features/openid-connect/proxmox-1.md)
- [Django](https://docs.defguard.net/1.6/features/openid-connect/django.md)
- [MinIO](https://docs.defguard.net/1.6/features/openid-connect/minio.md)
- [Vault](https://docs.defguard.net/1.6/features/openid-connect/vault.md)
- [External SSO/OpenID providers](https://docs.defguard.net/1.6/features/external-openid-providers.md)
- [Google](https://docs.defguard.net/1.6/features/external-openid-providers/google.md)
- [Microsoft](https://docs.defguard.net/1.6/features/external-openid-providers/microsoft.md)
- [Okta](https://docs.defguard.net/1.6/features/external-openid-providers/okta.md)
- [JumpCloud](https://docs.defguard.net/1.6/features/external-openid-providers/jumpcloud.md)
- [Keycloak](https://docs.defguard.net/1.6/features/external-openid-providers/keycloak.md)
- [Zitadel](https://docs.defguard.net/1.6/features/external-openid-providers/zitadel.md)
- [Custom](https://docs.defguard.net/1.6/features/external-openid-providers/custom.md)
- [External OIDC secure enrollment](https://docs.defguard.net/1.6/features/external-openid-providers/external-oidc-secure-enrollment.md)
- [LDAP and Active Directory integration](https://docs.defguard.net/1.6/features/ldap-and-active-directory-integration.md)
- [Configuration](https://docs.defguard.net/1.6/features/ldap-and-active-directory-integration/configuration.md): How to configure connection between Defguard instance and LDAP.
- [Settings table](https://docs.defguard.net/1.6/features/ldap-and-active-directory-integration/settings-table.md): List with description of settings for LDAP found in settings page.
- [Two-way LDAP and Active Directory synchronization](https://docs.defguard.net/1.6/features/ldap-and-active-directory-integration/two-way-ldap-and-active-directory-synchronization.md)
- [Access Control List](https://docs.defguard.net/1.6/features/access-control-list.md)
- [ACL Aliases](https://docs.defguard.net/1.6/features/access-control-list/acl-aliases.md)
- [Implementation Details](https://docs.defguard.net/1.6/features/access-control-list/firewall-internals.md)
- [Network devices](https://docs.defguard.net/1.6/features/network-devices.md)
- [Activity & Audit logs](https://docs.defguard.net/1.6/features/activity-log.md)
- [Audit Log Streaming to SIEM systems](https://docs.defguard.net/1.6/features/activity-log/activity-log-streaming.md): This feature is designed to help teams centralize visibility into user actions, security events, and system behavior by integrating with tools they already use for monitoring and incident response.
- [Supported SIEM systems integrations](https://docs.defguard.net/1.6/features/activity-log/activity-log-streaming/activity-log-integrations.md): List of supported services to stream activity logs into.
- [Vector integration guide](https://docs.defguard.net/1.6/features/activity-log/activity-log-streaming/activity-log-integrations/vector-integration-guide.md): How to stream activity logs to vector.
- [Logstash integration guide](https://docs.defguard.net/1.6/features/activity-log/activity-log-streaming/activity-log-integrations/logstash-integration-guide.md): How to stream activity logs to logstash.
- [Notifications](https://docs.defguard.net/1.6/features/notifications.md)
- [Email notifications](https://docs.defguard.net/1.6/features/notifications/setting-up-smtp-for-email-notifications.md)
- [Gateway notifications](https://docs.defguard.net/1.6/features/notifications/gateway-notifications.md)
- [New version notifications](https://docs.defguard.net/1.6/features/notifications/new-version-notifications.md)
- [Integrations](https://docs.defguard.net/1.6/features/integrations.md)
- [Webhooks](https://docs.defguard.net/1.6/features/integrations/webhooks.md)
- [REST API](https://docs.defguard.net/1.6/features/integrations/api-tokens.md)
- [OPNsense Configuration](https://docs.defguard.net/1.6/features/gateway.md)
- [SSH Authentication](https://docs.defguard.net/1.6/features/ssh-authentication.md)
- [Forward auth](https://docs.defguard.net/1.6/features/forward-auth.md)
- [YubiKey Provisioning](https://docs.defguard.net/1.6/features/yubikey-provisioning.md): Provisioner repository: https://github.com/DefGuard/YubiKey-Provision
- [User SNAT bindings](https://docs.defguard.net/1.6/features/user-snat-bindings.md)
- [Service locations](https://docs.defguard.net/1.6/features/service-locations.md)
- [Desktop client auto-provisioning](https://docs.defguard.net/1.6/features/desktop-client-auto-provisioning.md)
- [Auto-provisioning in Windows environments](https://docs.defguard.net/1.6/features/desktop-client-auto-provisioning/auto-provisioning-in-windows-environments.md)
- [On-premise Active Directory](https://docs.defguard.net/1.6/features/desktop-client-auto-provisioning/auto-provisioning-in-windows-environments/on-premise-active-directory-environments.md)
- [Entra ID](https://docs.defguard.net/1.6/features/desktop-client-auto-provisioning/auto-provisioning-in-windows-environments/entra-id-environments.md)
- [Generating enrollment tokens with Defguard REST API](https://docs.defguard.net/1.6/features/desktop-client-auto-provisioning/generating-enrollment-tokens-with-defguard-rest-api.md)
- [Overview](https://docs.defguard.net/1.6/deployment-strategies/setting-up-your-instance.md): This documentation will guide you through the process of deploying your Defguard instance.
- [Deploying to Production](https://docs.defguard.net/1.6/deployment-strategies/deploying-to-production.md)
- [Hardware, OS, network and firewall recommendations](https://docs.defguard.net/1.6/deployment-strategies/hardware-os-network-and-firewall-recommendations.md): Before Defguard can be deployed please get familiar with the following recommendations
- [Standalone package based installation](https://docs.defguard.net/1.6/deployment-strategies/standalone-package-based-installation.md)
- [Defguard APT repository](https://docs.defguard.net/1.6/deployment-strategies/standalone-package-based-installation/defguard-apt-repository.md)
- [Docker Compose](https://docs.defguard.net/1.6/deployment-strategies/docker-compose.md)
- [Kubernetes](https://docs.defguard.net/1.6/deployment-strategies/kubernetes.md)
- [Terraform](https://docs.defguard.net/1.6/deployment-strategies/terraform.md)
- [Amazon Machine Image (AMI)](https://docs.defguard.net/1.6/deployment-strategies/amis-and-aws-cloudformation.md)
- [Configuring HTTPS using AWS Certificate Manager](https://docs.defguard.net/1.6/deployment-strategies/amis-and-aws-cloudformation/configuring-https-using-aws-certificate-manager.md)
- [Adding a location and getting a Gateway token](https://docs.defguard.net/1.6/deployment-strategies/gateway.md): This documentation will guide you through adding a new location and proceeding with the Gateway deployment, enabling your devices to connect to it via VPN.
- [Configuration](https://docs.defguard.net/1.6/deployment-strategies/configuration.md)
- [Running Gateway on OPNsense firewall](https://docs.defguard.net/1.6/deployment-strategies/running-gateway-on-opnsense-firewall.md)
- [Running Gateway on MikroTik routers](https://docs.defguard.net/1.6/deployment-strategies/running-gateway-on-mikrotik-routers.md)
- [Reverse Proxy configuration using NGINX](https://docs.defguard.net/1.6/deployment-strategies/reverse-proxy-configuration-using-nginx.md)
- [High Availability and Failover](https://docs.defguard.net/1.6/deployment-strategies/high-availability-and-failover.md)
- [Updating and version compatibility](https://docs.defguard.net/1.6/deployment-strategies/updating-and-version-compatibility.md)
- [Migration guides](https://docs.defguard.net/1.6/deployment-strategies/upgrading.md): Notes on upgrading Defguard and its components
- [Using a userspace wireguard-go implementation](https://docs.defguard.net/1.6/deployment-strategies/using-a-userspace-wireguard-go-implementation.md)
- [Pre-production and development releases](https://docs.defguard.net/1.6/deployment-strategies/pre-production-and-development-releases.md)
- [Securing gRPC communication](https://docs.defguard.net/1.6/deployment-strategies/grpc-ssl-communication.md)
- [Using RSA instead of HMAC for OpenID key](https://docs.defguard.net/1.6/deployment-strategies/openid-rsa-key.md)
- [Health check](https://docs.defguard.net/1.6/deployment-strategies/health-check.md)
- [Production deployment verification guide](https://docs.defguard.net/1.6/deployment-strategies/production-deployment-verification-guide.md)
- [Linux Kernel WireGuard tuning](https://docs.defguard.net/1.6/deployment-strategies/linux-kernel-wireguard-tuning.md): This technical guide addresses requirements regarding WireGuard VPN latency, throughput, resilience, and scalability by tuning Linux Kernel parameters (as WireGuard is part of Linux Kernel).
- [Deployment automation](https://docs.defguard.net/1.6/deployment-strategies/deployment-automation.md)
- [Purchasing and using the license](https://docs.defguard.net/1.6/enterprise/license.md)
- [Overview](https://docs.defguard.net/1.6/using-defguard-for-end-users/overwiew.md)
- [Mobile Client](https://docs.defguard.net/1.6/using-defguard-for-end-users/mobile-client.md)
- [Adding new Instance](https://docs.defguard.net/1.6/using-defguard-for-end-users/mobile-client/instance-adding.md)
- [Connecting to Instance](https://docs.defguard.net/1.6/using-defguard-for-end-users/mobile-client/instance-connect.md)
- [Managing your Instance](https://docs.defguard.net/1.6/using-defguard-for-end-users/mobile-client/instance-manage.md)
- [Using Biometry as MFA method](https://docs.defguard.net/1.6/using-defguard-for-end-users/mobile-client/using-biometry-as-mfa-method.md)
- [Desktop Client](https://docs.defguard.net/1.6/using-defguard-for-end-users/desktop-client.md)
- [Instance configuration](https://docs.defguard.net/1.6/using-defguard-for-end-users/desktop-client/instance-configuration.md): In this guide, you will learn how to add, remove and update Instance in Defguard desktop client.
- [Using Multi-Factor Authentication (MFA)](https://docs.defguard.net/1.6/using-defguard-for-end-users/desktop-client/using-multi-factor-authentication-mfa.md)
- [MTU Setting](https://docs.defguard.net/1.6/using-defguard-for-end-users/desktop-client/mtu-setting.md)
- [CLI Client](https://docs.defguard.net/1.6/using-defguard-for-end-users/cli-client.md)
- [Other WireGuard® Clients](https://docs.defguard.net/1.6/using-defguard-for-end-users/adding-wireguard-devices.md)
- [Configuring a device for new VPN Location manually](https://docs.defguard.net/1.6/using-defguard-for-end-users/adding-wireguard-devices/configuring-a-device-for-a-new-vpn-location.md)
- [Password change / Reset](https://docs.defguard.net/1.6/using-defguard-for-end-users/changing-your-password.md)
- [Enrollment & Onboarding](https://docs.defguard.net/1.6/using-defguard-for-end-users/enrollment.md)
- [With internal Defguard SSO](https://docs.defguard.net/1.6/using-defguard-for-end-users/enrollment/with-internal-defguard-sso.md)
- [With external SSO (Google/Microsoft/Custom)](https://docs.defguard.net/1.6/using-defguard-for-end-users/enrollment/with-external-sso-google-microsoft-custom.md)
- [Setting up 2FA/MFA](https://docs.defguard.net/1.6/using-defguard-for-end-users/setting-up-2fa-mfa.md)
- [How to submit an issue](https://docs.defguard.net/1.6/support-1/how-to-submit-an-issue.md)
- [Troubleshooting Guide](https://docs.defguard.net/1.6/support-1/troubleshooting.md): Here are some common issues / problems that are frequently encountered.
- [Sending support information](https://docs.defguard.net/1.6/support-1/troubleshooting/sending-support-info.md)
- [Client Windows installer exit codes](https://docs.defguard.net/1.6/support-1/troubleshooting/windows-installer-exit-codes.md): Desktop Client windows installer exist codes list.
- [Client "All traffic" connection issues](https://docs.defguard.net/1.6/support-1/troubleshooting/client-all-traffic-connection-issues.md)
- [WebAuthn security keys](https://docs.defguard.net/1.6/support-1/troubleshooting/webauthn-security-keys.md)
- [Desktop Client connectivity issues](https://docs.defguard.net/1.6/support-1/troubleshooting/desktop-client-connectivity-issues.md)
- [Client opening issues on Linux](https://docs.defguard.net/1.6/support-1/troubleshooting/client-opening-issues-on-linux.md)
- [Server migration and licence transfer](https://docs.defguard.net/1.6/support-1/server-migration-and-licence-transfer.md)
- [Step by step setting up a VPN server](https://docs.defguard.net/1.6/tutorials/step-by-step-setting-up-a-vpn-server.md)
- [Adding additional VPN locations](https://docs.defguard.net/1.6/tutorials/step-by-step-setting-up-a-vpn-server/adding-additional-vpn-locations.md)
- [Secure By Design](https://docs.defguard.net/1.6/in-depth/secure-by-design.md)
- [Architecture](https://docs.defguard.net/1.6/in-depth/architecture.md)
- [How do VPN statistics work](https://docs.defguard.net/1.6/in-depth/architecture/how-do-vpn-statistics-work.md)
- [Security concepts](https://docs.defguard.net/1.6/in-depth/architecture/security-concepts.md)
- [MFA Architecture](https://docs.defguard.net/1.6/in-depth/architecture/architecture.md)
- [Architecture Decision Records](https://docs.defguard.net/1.6/in-depth/architecture-decision-records.md): What are Defguard's Architecture Decision Records?
- [1.6](https://docs.defguard.net/1.6/in-depth/architecture-decision-records/1.6.md)
- [1.5](https://docs.defguard.net/1.6/in-depth/architecture-decision-records/1.5.md)
- [1.4](https://docs.defguard.net/1.6/in-depth/architecture-decision-records/1.4.md)
- [1.3](https://docs.defguard.net/1.6/in-depth/architecture-decision-records/1.3.md)
- [Pre-1.3](https://docs.defguard.net/1.6/in-depth/architecture-decision-records/pre-1.3.md)
- [Roadmap](https://docs.defguard.net/1.6/in-depth/roadmap.md): This is a high-level project roadmap of planned features.
- [Release cycle](https://docs.defguard.net/1.6/in-depth/release-cycle.md)
- [Client application feature compatibility](https://docs.defguard.net/1.6/in-depth/client-application-feature-compatibility.md)
- [Contributing](https://docs.defguard.net/1.6/for-developers/contributing.md)
- [Environment setup](https://docs.defguard.net/1.6/for-developers/dev-env-setup.md)
- [Translations (core/web)](https://docs.defguard.net/1.6/for-developers/dev-env-setup/translations-web.md)
- [Switching language](https://docs.defguard.net/1.6/for-developers/dev-env-setup/translations-web/switching-language.md)
- [Adding translations](https://docs.defguard.net/1.6/for-developers/dev-env-setup/translations-web/adding-translations.md)
- [Translations (client)](https://docs.defguard.net/1.6/for-developers/dev-env-setup/translations-client.md)
- [Adding translations](https://docs.defguard.net/1.6/for-developers/dev-env-setup/translations-client/adding-translations.md)

## 2.0

- [Welcome](https://docs.defguard.net/readme.md)
- [Getting help](https://docs.defguard.net/support.md)
- [About Defguard](https://docs.defguard.net/about/about-defguard.md)
- [Features overview](https://docs.defguard.net/about/features-overview.md)
- [One-line install script](https://docs.defguard.net/getting-started/one-line-install.md)
- [Overview](https://docs.defguard.net/features/overview.md)
- [Zero-Trust VPN with 2FA/MFA](https://docs.defguard.net/features/wireguard.md)
- [Create/Manage VPN Location](https://docs.defguard.net/features/wireguard/create-your-vpn-network.md)
- [Split Tunnel Configuration](https://docs.defguard.net/features/wireguard/create-your-vpn-network/split-tunnel-configuration.md)
- [Network overview](https://docs.defguard.net/features/wireguard/network-overview.md)
- [Multi-Factor Authentication (MFA/2FA)](https://docs.defguard.net/features/wireguard/multi-factor-authentication-mfa-2fa.md): Defguard is the sole VPN solution that genuinely implements Multi-Factor Authentication (MFA) before a WireGuard® VPN connection is established, significantly enhancing security against cyberattacks.
- [Internal SSO based MFA](https://docs.defguard.net/features/wireguard/multi-factor-authentication-mfa-2fa/internal-sso-based-mfa.md)
- [External SSO based MFA](https://docs.defguard.net/features/wireguard/multi-factor-authentication-mfa-2fa/external-sso-based-mfa.md)
- [Adding client device](https://docs.defguard.net/features/wireguard/remote-desktop-activation.md): How to manually generate token for user as an administrator.
- [Client behaviour customization](https://docs.defguard.net/features/wireguard/behavior-customization.md)
- [DNS and domains](https://docs.defguard.net/features/wireguard/dns-and-domains.md)
- [Executing custom gateway commands](https://docs.defguard.net/features/wireguard/executing-custom-gateway-commands.md)
- [Remote user enrollment](https://docs.defguard.net/features/remote-user-enrollment.md)
- [User onboarding after enrollment](https://docs.defguard.net/features/remote-user-enrollment/user-onboarding-after-enrollment.md)
- [Automatic (real time) desktop client configuration & sync](https://docs.defguard.net/features/remote-user-enrollment/automatic-real-time-desktop-client-configuration.md)
- [Internal SSO (OpenID Connect Provider)](https://docs.defguard.net/features/openid-connect.md)
- [Portainer](https://docs.defguard.net/features/openid-connect/portainer.md)
- [Grafana setup](https://docs.defguard.net/features/openid-connect/grafana-setup.md)
- [Proxmox](https://docs.defguard.net/features/openid-connect/proxmox.md)
- [Matrix / Synapse](https://docs.defguard.net/features/openid-connect/proxmox-1.md)
- [Django](https://docs.defguard.net/features/openid-connect/django.md)
- [MinIO](https://docs.defguard.net/features/openid-connect/minio.md)
- [Vault](https://docs.defguard.net/features/openid-connect/vault.md)
- [External SSO/OpenID providers](https://docs.defguard.net/features/external-openid-providers.md)
- [Google](https://docs.defguard.net/features/external-openid-providers/google.md)
- [Microsoft](https://docs.defguard.net/features/external-openid-providers/microsoft.md)
- [Okta](https://docs.defguard.net/features/external-openid-providers/okta.md)
- [JumpCloud](https://docs.defguard.net/features/external-openid-providers/jumpcloud.md)
- [Keycloak](https://docs.defguard.net/features/external-openid-providers/keycloak.md)
- [Zitadel](https://docs.defguard.net/features/external-openid-providers/zitadel.md)
- [Custom](https://docs.defguard.net/features/external-openid-providers/custom.md)
- [External OIDC secure enrollment](https://docs.defguard.net/features/external-openid-providers/external-oidc-secure-enrollment.md)
- [LDAP and Active Directory integration](https://docs.defguard.net/features/ldap-and-active-directory-integration.md)
- [LDAP Configuration](https://docs.defguard.net/features/ldap-and-active-directory-integration/configuration.md): How to configure the connection between a Defguard instance and LDAP.
- [Example configurations](https://docs.defguard.net/features/ldap-and-active-directory-integration/examples.md)
- [Settings table](https://docs.defguard.net/features/ldap-and-active-directory-integration/settings-table.md): A list describing the LDAP settings available on the settings page.
- [Two-way LDAP and Active Directory synchronization](https://docs.defguard.net/features/ldap-and-active-directory-integration/two-way-ldap-and-active-directory-synchronization.md)
- [Firewall](https://docs.defguard.net/features/firewall.md)
- [Aliases and Destinations](https://docs.defguard.net/features/firewall/aliases-and-destinations.md)
- [Troubleshooting](https://docs.defguard.net/features/firewall/troubleshooting.md)
- [Implementation Details](https://docs.defguard.net/features/firewall/firewall-internals.md)
- [Network devices](https://docs.defguard.net/features/network-devices.md)
- [Activity & Audit logs](https://docs.defguard.net/features/activity-log.md)
- [Audit Log Streaming to SIEM systems](https://docs.defguard.net/features/activity-log/activity-log-streaming.md): This feature is designed to help teams centralize visibility into user actions, security events, and system behavior by integrating with tools they already use for monitoring and incident response.
- [Supported SIEM systems integrations](https://docs.defguard.net/features/activity-log/activity-log-streaming/activity-log-integrations.md): List of supported services to stream activity logs into.
- [Vector integration guide](https://docs.defguard.net/features/activity-log/activity-log-streaming/activity-log-integrations/vector-integration-guide.md): How to stream activity logs to vector.
- [Logstash integration guide](https://docs.defguard.net/features/activity-log/activity-log-streaming/activity-log-integrations/logstash-integration-guide.md): How to stream activity logs to logstash.
- [Notifications](https://docs.defguard.net/features/notifications.md)
- [Email notifications](https://docs.defguard.net/features/notifications/setting-up-smtp-for-email-notifications.md)
- [Gateway notifications](https://docs.defguard.net/features/notifications/gateway-notifications.md)
- [New version notifications](https://docs.defguard.net/features/notifications/new-version-notifications.md)
- [Integrations](https://docs.defguard.net/features/integrations.md)
- [Webhooks](https://docs.defguard.net/features/integrations/webhooks.md)
- [REST API](https://docs.defguard.net/features/integrations/api-tokens.md)
- [OPNSense Configuration](https://docs.defguard.net/features/gateway.md)
- [SSH Authentication](https://docs.defguard.net/features/ssh-authentication.md)
- [Forward auth](https://docs.defguard.net/features/forward-auth.md)
- [User SNAT bindings](https://docs.defguard.net/features/user-snat-bindings.md)
- [Service locations](https://docs.defguard.net/features/service-locations.md)
- [Desktop client auto-provisioning](https://docs.defguard.net/features/desktop-client-auto-provisioning.md)
- [Auto-provisioning in Windows environments](https://docs.defguard.net/features/desktop-client-auto-provisioning/auto-provisioning-in-windows-environments.md)
- [On-premise Active Directory](https://docs.defguard.net/features/desktop-client-auto-provisioning/auto-provisioning-in-windows-environments/on-premise-active-directory-environments.md)
- [Entra ID](https://docs.defguard.net/features/desktop-client-auto-provisioning/auto-provisioning-in-windows-environments/entra-id-environments.md)
- [Generating enrollment tokens with Defguard REST API](https://docs.defguard.net/features/desktop-client-auto-provisioning/generating-enrollment-tokens-with-defguard-rest-api.md)
- [Static IP assignment](https://docs.defguard.net/features/static-ip-assignment.md)
- [Certificate management](https://docs.defguard.net/features/certificate-management.md)
- [Overview](https://docs.defguard.net/deployment-strategies/overview.md): This documentation will guide you through the process of deploying your Defguard instance.
- [Deploying to Production](https://docs.defguard.net/deployment-strategies/deploying-to-production.md)
- [Migration guides](https://docs.defguard.net/deployment-strategies/upgrading.md): Notes on upgrading Defguard and its components
- [Hardware, OS, network and firewall recommendations](https://docs.defguard.net/deployment-strategies/hardware-os-network-and-firewall-recommendations.md): Before Defguard can be deployed please get familiar with the following recommendations
- [Standalone package based installation](https://docs.defguard.net/deployment-strategies/standalone-package-based-installation.md)
- [PostgreSQL database](https://docs.defguard.net/deployment-strategies/standalone-package-based-installation/database.md)
- [Defguard Core](https://docs.defguard.net/deployment-strategies/standalone-package-based-installation/core.md)
- [Defguard Edge](https://docs.defguard.net/deployment-strategies/standalone-package-based-installation/edge.md)
- [Defguard Gateway](https://docs.defguard.net/deployment-strategies/standalone-package-based-installation/gateway.md)
- [Defguard APT repository](https://docs.defguard.net/deployment-strategies/standalone-package-based-installation/defguard-apt-repository.md)
- [Docker Compose](https://docs.defguard.net/deployment-strategies/docker-compose.md)
- [Kubernetes](https://docs.defguard.net/deployment-strategies/kubernetes.md)
- [OVA](https://docs.defguard.net/deployment-strategies/ova.md)
- [Configuration](https://docs.defguard.net/deployment-strategies/configuration.md)
- [Running Gateway on OPNsense firewall](https://docs.defguard.net/deployment-strategies/running-gateway-on-opnsense-firewall.md)
- [Running Gateway on VyOS](https://docs.defguard.net/deployment-strategies/running-gateway-on-vyos.md)
- [Reverse Proxy configuration using NGINX](https://docs.defguard.net/deployment-strategies/reverse-proxy-configuration-using-nginx.md)
- [High Availability and Failover](https://docs.defguard.net/deployment-strategies/high-availability-and-failover.md)
- [WireGuard UDP load-balancing](https://docs.defguard.net/deployment-strategies/high-availability-and-failover/wireguard-udp-load-balancing.md)
- [Gateway with CARP](https://docs.defguard.net/deployment-strategies/high-availability-and-failover/gateway-with-carp.md)
- [Updating and version compatibility](https://docs.defguard.net/deployment-strategies/updating-and-version-compatibility.md)
- [Using a userspace WireGuard implementation](https://docs.defguard.net/deployment-strategies/using-a-userspace-wireguard-implementation.md)
- [Pre-production and development releases](https://docs.defguard.net/deployment-strategies/pre-production-and-development-releases.md)
- [Health check](https://docs.defguard.net/deployment-strategies/health-check.md)
- [Production deployment verification guide](https://docs.defguard.net/deployment-strategies/production-deployment-verification-guide.md)
- [Linux Kernel WireGuard tuning](https://docs.defguard.net/deployment-strategies/linux-kernel-wireguard-tuning.md): This technical guide addresses WireGuard VPN latency, throughput, resilience, and scalability requirements by tuning Linux kernel parameters (as WireGuard is part of the Linux kernel).
- [Programmatic gateway adoption](https://docs.defguard.net/deployment-strategies/programmatic-gateway-adoption.md)
- [Gateway/Location VLAN routing](https://docs.defguard.net/deployment-strategies/gateway-location-vlan-routing.md)
- [Terraform](https://docs.defguard.net/deployment-strategies/terraform.md): Deploy a complete Defguard 2.x environment on AWS with Terraform: EC2 instances for Core, Edge and Gateway plus a managed RDS PostgreSQL database.
- [Purchasing and using the license](https://docs.defguard.net/enterprise/license.md)
- [Overview](https://docs.defguard.net/using-defguard-for-end-users/overwiew.md)
- [Mobile Client](https://docs.defguard.net/using-defguard-for-end-users/mobile-client.md)
- [Adding new Instance](https://docs.defguard.net/using-defguard-for-end-users/mobile-client/instance-adding.md)
- [Connecting to Instance](https://docs.defguard.net/using-defguard-for-end-users/mobile-client/instance-connect.md)
- [Managing your Instance](https://docs.defguard.net/using-defguard-for-end-users/mobile-client/instance-manage.md)
- [Using Biometry as MFA method](https://docs.defguard.net/using-defguard-for-end-users/mobile-client/using-biometry-as-mfa-method.md)
- [Desktop Client](https://docs.defguard.net/using-defguard-for-end-users/desktop-client.md)
- [Instance configuration](https://docs.defguard.net/using-defguard-for-end-users/desktop-client/instance-configuration.md): In this guide, you will learn how to add, remove and update Instance in Defguard desktop client.
- [Using Multi-Factor Authentication (MFA)](https://docs.defguard.net/using-defguard-for-end-users/desktop-client/using-multi-factor-authentication-mfa.md)
- [MTU Setting](https://docs.defguard.net/using-defguard-for-end-users/desktop-client/mtu-setting.md)
- [CLI Client](https://docs.defguard.net/using-defguard-for-end-users/cli-client.md)
- [Other WireGuard® Clients](https://docs.defguard.net/using-defguard-for-end-users/adding-wireguard-devices.md)
- [Configuring a device for new VPN Location manually](https://docs.defguard.net/using-defguard-for-end-users/adding-wireguard-devices/configuring-a-device-for-a-new-vpn-location.md)
- [Password change / Reset](https://docs.defguard.net/using-defguard-for-end-users/changing-your-password.md)
- [Enrollment & Onboarding](https://docs.defguard.net/using-defguard-for-end-users/enrollment.md)
- [With internal Defguard SSO](https://docs.defguard.net/using-defguard-for-end-users/enrollment/with-internal-defguard-sso.md)
- [With external SSO (Google/Microsoft/Custom)](https://docs.defguard.net/using-defguard-for-end-users/enrollment/with-external-sso-google-microsoft-custom.md)
- [Setting up 2FA/MFA](https://docs.defguard.net/using-defguard-for-end-users/setting-up-2fa-mfa.md)
- [How to submit an issue](https://docs.defguard.net/support-1/how-to-submit-an-issue.md)
- [Sending support information](https://docs.defguard.net/support-1/sending-support-information.md)
- [Server applications](https://docs.defguard.net/support-1/sending-support-information/core.md)
- [Desktop Client](https://docs.defguard.net/support-1/sending-support-information/desktop-client.md)
- [Mobile client](https://docs.defguard.net/support-1/sending-support-information/mobile-client.md)
- [Troubleshooting Guides](https://docs.defguard.net/support-1/troubleshooting-guides.md): Before contacting support, check whether your problem is covered here.
- [Core](https://docs.defguard.net/support-1/troubleshooting-guides/core.md)
- [h2 protocol error from reverse proxy](https://docs.defguard.net/support-1/troubleshooting-guides/core/h2-protocol-error-from-reverse-proxy.md)
- [Unable to sign in with correct credentials](https://docs.defguard.net/support-1/troubleshooting-guides/core/unable-to-sign-in-with-correct-credentials.md)
- [User lost access to their 2FA methods](https://docs.defguard.net/support-1/troubleshooting-guides/core/user-lost-access-to-their-2fa-methods.md)
- [Enrollment URL Changed](https://docs.defguard.net/support-1/troubleshooting-guides/core/enrollment-url-changed.md)
- [Failed to parse duration](https://docs.defguard.net/support-1/troubleshooting-guides/core/failed-to-parse-duration.md)
- [Core cannot connect to Gateway or Edge after restart on single-host deployments](https://docs.defguard.net/support-1/troubleshooting-guides/core/core-cannot-connect-to-gateway-or-edge-after-restart-on-single-host-deployments.md)
- [Desktop Client](https://docs.defguard.net/support-1/troubleshooting-guides/desktop-client.md)
- [Unix socket permission error on connect (Linux)](https://docs.defguard.net/support-1/troubleshooting-guides/desktop-client/unix-socket-permission-error-on-connect-linux.md)
- [MFA location disconnected after X-time](https://docs.defguard.net/support-1/troubleshooting-guides/desktop-client/mfa-location-disconnected-after-x-time.md)
- [High disk usage](https://docs.defguard.net/support-1/troubleshooting-guides/desktop-client/high-disk-usage.md)
- [Failed to configure DNS (Linux)](https://docs.defguard.net/support-1/troubleshooting-guides/desktop-client/failed-to-configure-dns-linux.md)
- [Failed to parse IP address](https://docs.defguard.net/support-1/troubleshooting-guides/desktop-client/failed-to-parse-ip-address.md)
- [Disconnecting shows "Connection failed" (Linux / NetworkManager)](https://docs.defguard.net/support-1/troubleshooting-guides/desktop-client/disconnecting-shows-connection-failed-linux-networkmanager.md)
- [resolvconf not found (Debian)](https://docs.defguard.net/support-1/troubleshooting-guides/desktop-client/resolvconf-not-found-debian.md)
- [Unix socket does not exist (Linux)](https://docs.defguard.net/support-1/troubleshooting-guides/desktop-client/unix-socket-does-not-exist-linux.md)
- [Disconnected after MFA timeout](https://docs.defguard.net/support-1/troubleshooting-guides/desktop-client/disconnected-after-mfa-timeout.md)
- [Could not start MFA process](https://docs.defguard.net/support-1/troubleshooting-guides/desktop-client/could-not-start-mfa-process.md)
- [Client connects but cannot reach VPN servers (MTU)](https://docs.defguard.net/support-1/troubleshooting-guides/desktop-client/client-connects-but-cannot-reach-vpn-servers-mtu.md)
- [Desktop client real-time / auto sync does not work](https://docs.defguard.net/support-1/troubleshooting-guides/desktop-client/desktop-client-real-time-auto-sync-does-not-work.md)
- [Windows client unable to connect](https://docs.defguard.net/support-1/troubleshooting-guides/desktop-client/windows-client-unable-to-connect.md)
- ["All traffic" connection issues](https://docs.defguard.net/support-1/troubleshooting-guides/desktop-client/client-all-traffic-connection-issues.md)
- [Windows installer exit codes](https://docs.defguard.net/support-1/troubleshooting-guides/desktop-client/windows-installer-exit-codes.md): Desktop Client windows installer exist codes list.
- [Mobile Client](https://docs.defguard.net/support-1/troubleshooting-guides/mobile-client.md)
- [Android "Failed host lookup" error](https://docs.defguard.net/support-1/troubleshooting-guides/mobile-client/android-failed-host-lookup-error.md)
- [Edge Component](https://docs.defguard.net/support-1/troubleshooting-guides/edge-component.md)
- [There was a network error. Can't reach Edge](https://docs.defguard.net/support-1/troubleshooting-guides/edge-component/there-was-a-network-error.-cant-reach-edge.md)
- [Gateway](https://docs.defguard.net/support-1/troubleshooting-guides/gateway.md)
- [No buffer space available](https://docs.defguard.net/support-1/troubleshooting-guides/gateway/no-buffer-space-available.md)
- [TOTP / email codes for MFA do not work](https://docs.defguard.net/support-1/troubleshooting-guides/totp-email-codes-for-mfa-do-not-work.md)
- [WebAuthn security keys](https://docs.defguard.net/support-1/troubleshooting-guides/webauthn-security-keys.md)
- [Can access VPN but not local network or internet](https://docs.defguard.net/support-1/troubleshooting-guides/can-access-vpn-but-not-local-network-or-internet.md)
- [How to verify the VPN is working](https://docs.defguard.net/support-1/troubleshooting-guides/how-to-verify-the-vpn-is-working.md)
- [Testing VPN speed](https://docs.defguard.net/support-1/troubleshooting-guides/testing-vpn-speed.md): VPN Speed Testing Guide: Linux Server & Windows/Linux Clients
- [Server migration and licence transfer](https://docs.defguard.net/support-1/server-migration-and-licence-transfer.md)
- [Troubleshooting Guide V1 legacy backup](https://docs.defguard.net/support-1/troubleshooting.md): Here are some common issues / problems that are frequently encountered.
- [Sending support information](https://docs.defguard.net/support-1/troubleshooting/sending-support-info.md)
- [Client Windows installer exit codes](https://docs.defguard.net/support-1/troubleshooting/windows-installer-exit-codes.md): Desktop Client windows installer exist codes list.
- [Client "All traffic" connection issues](https://docs.defguard.net/support-1/troubleshooting/client-all-traffic-connection-issues.md)
- [WebAuthn security keys](https://docs.defguard.net/support-1/troubleshooting/webauthn-security-keys.md)
- [Initial Setup Wizard: setting up from scratch](https://docs.defguard.net/tutorials/initial-setup-wizard-setting-up-from-scratch.md)
- [Migrating from Defguard 1.6 to 2.0](https://docs.defguard.net/tutorials/migrating-from-defguard-1.6-to-2.0.md)
- [Adding Edge component](https://docs.defguard.net/tutorials/adding-edge-component.md)
- [Defguard Compliance](https://docs.defguard.net/compliance/defguard-compliance.md)
- [Secure by design](https://docs.defguard.net/in-depth/secure-by-design.md)
- [Architecture](https://docs.defguard.net/in-depth/architecture.md)
- [How do VPN statistics work](https://docs.defguard.net/in-depth/architecture/how-do-vpn-statistics-work.md)
- [Security concepts](https://docs.defguard.net/in-depth/architecture/security-concepts.md)
- [MFA Architecture](https://docs.defguard.net/in-depth/architecture/architecture.md)
- [Architecture Decision Records](https://docs.defguard.net/in-depth/architecture-decision-records.md): What are Defguard's Architecture Decision Records?
- [2.0](https://docs.defguard.net/in-depth/architecture-decision-records/2.0.md)
- [1.6](https://docs.defguard.net/in-depth/architecture-decision-records/1.6.md)
- [1.5](https://docs.defguard.net/in-depth/architecture-decision-records/1.5.md)
- [1.4](https://docs.defguard.net/in-depth/architecture-decision-records/1.4.md)
- [1.3](https://docs.defguard.net/in-depth/architecture-decision-records/1.3.md)
- [Pre-1.3](https://docs.defguard.net/in-depth/architecture-decision-records/pre-1.3.md)
- [Client application feature compatibility](https://docs.defguard.net/in-depth/client-application-feature-compatibility.md)
- [Defguard Open Organisation](https://docs.defguard.net/in-depth/defguard-open-organisation.md)
- [Product Development Procedure](https://docs.defguard.net/in-depth/defguard-open-organisation/product-development-procedure.md)
- [Roadmap](https://docs.defguard.net/in-depth/defguard-open-organisation/roadmap.md): This is a high-level project roadmap of planned features.
- [BoringTun](https://docs.defguard.net/in-depth/boringtun.md)
- [Contributing](https://docs.defguard.net/for-developers/contributing.md)
- [Environment setup](https://docs.defguard.net/for-developers/dev-env-setup.md)
- [Translations (core/web)](https://docs.defguard.net/for-developers/dev-env-setup/translations-web.md)
- [Switching language](https://docs.defguard.net/for-developers/dev-env-setup/translations-web/switching-language.md)
- [Adding translations](https://docs.defguard.net/for-developers/dev-env-setup/translations-web/adding-translations.md)
- [Translations (client)](https://docs.defguard.net/for-developers/dev-env-setup/translations-client.md)
- [Adding translations](https://docs.defguard.net/for-developers/dev-env-setup/translations-client/adding-translations.md)

## 2.1

- [Welcome](https://docs.defguard.net/2.1/readme.md)
- [Getting help](https://docs.defguard.net/2.1/support.md)
- [About Defguard](https://docs.defguard.net/2.1/about/about-defguard.md)
- [Features overview](https://docs.defguard.net/2.1/about/features-overview.md)
- [One-line install script](https://docs.defguard.net/2.1/getting-started/one-line-install.md)
- [Overview](https://docs.defguard.net/2.1/features/overview.md)
- [Zero-Trust VPN with 2FA/MFA](https://docs.defguard.net/2.1/features/wireguard.md)
- [Create/Manage VPN Location](https://docs.defguard.net/2.1/features/wireguard/create-your-vpn-network.md)
- [Split Tunnel Configuration](https://docs.defguard.net/2.1/features/wireguard/create-your-vpn-network/split-tunnel-configuration.md)
- [Network overview](https://docs.defguard.net/2.1/features/wireguard/network-overview.md)
- [Multi-Factor Authentication (MFA/2FA)](https://docs.defguard.net/2.1/features/wireguard/multi-factor-authentication-mfa-2fa.md): Defguard is the sole VPN solution that genuinely implements Multi-Factor Authentication (MFA) before a WireGuard® VPN connection is established, significantly enhancing security against cyberattacks.
- [Internal SSO based MFA](https://docs.defguard.net/2.1/features/wireguard/multi-factor-authentication-mfa-2fa/internal-sso-based-mfa.md)
- [External SSO based MFA](https://docs.defguard.net/2.1/features/wireguard/multi-factor-authentication-mfa-2fa/external-sso-based-mfa.md)
- [Adding client device](https://docs.defguard.net/2.1/features/wireguard/remote-desktop-activation.md): How to manually generate token for user as an administrator.
- [Client behaviour customization](https://docs.defguard.net/2.1/features/wireguard/behavior-customization.md)
- [DNS and domains](https://docs.defguard.net/2.1/features/wireguard/dns-and-domains.md)
- [Executing custom gateway commands](https://docs.defguard.net/2.1/features/wireguard/executing-custom-gateway-commands.md)
- [Remote user enrollment](https://docs.defguard.net/2.1/features/remote-user-enrollment.md)
- [User onboarding after enrollment](https://docs.defguard.net/2.1/features/remote-user-enrollment/user-onboarding-after-enrollment.md)
- [Automatic (real time) desktop client configuration & sync](https://docs.defguard.net/2.1/features/remote-user-enrollment/automatic-real-time-desktop-client-configuration.md)
- [Internal SSO (OpenID Connect Provider)](https://docs.defguard.net/2.1/features/openid-connect.md)
- [Portainer](https://docs.defguard.net/2.1/features/openid-connect/portainer.md)
- [Grafana setup](https://docs.defguard.net/2.1/features/openid-connect/grafana-setup.md)
- [Proxmox](https://docs.defguard.net/2.1/features/openid-connect/proxmox.md)
- [Matrix / Synapse](https://docs.defguard.net/2.1/features/openid-connect/proxmox-1.md)
- [Django](https://docs.defguard.net/2.1/features/openid-connect/django.md)
- [MinIO](https://docs.defguard.net/2.1/features/openid-connect/minio.md)
- [Vault](https://docs.defguard.net/2.1/features/openid-connect/vault.md)
- [External SSO/OpenID providers](https://docs.defguard.net/2.1/features/external-openid-providers.md)
- [Google](https://docs.defguard.net/2.1/features/external-openid-providers/google.md)
- [Microsoft](https://docs.defguard.net/2.1/features/external-openid-providers/microsoft.md)
- [Okta](https://docs.defguard.net/2.1/features/external-openid-providers/okta.md)
- [JumpCloud](https://docs.defguard.net/2.1/features/external-openid-providers/jumpcloud.md)
- [Keycloak](https://docs.defguard.net/2.1/features/external-openid-providers/keycloak.md)
- [Zitadel](https://docs.defguard.net/2.1/features/external-openid-providers/zitadel.md)
- [Custom](https://docs.defguard.net/2.1/features/external-openid-providers/custom.md)
- [External OIDC secure enrollment](https://docs.defguard.net/2.1/features/external-openid-providers/external-oidc-secure-enrollment.md)
- [LDAP and Active Directory integration](https://docs.defguard.net/2.1/features/ldap-and-active-directory-integration.md)
- [LDAP Configuration](https://docs.defguard.net/2.1/features/ldap-and-active-directory-integration/configuration.md): How to configure the connection between a Defguard instance and LDAP.
- [Example configurations](https://docs.defguard.net/2.1/features/ldap-and-active-directory-integration/examples.md)
- [Settings table](https://docs.defguard.net/2.1/features/ldap-and-active-directory-integration/settings-table.md): A list describing the LDAP settings available on the settings page.
- [Two-way LDAP and Active Directory synchronization](https://docs.defguard.net/2.1/features/ldap-and-active-directory-integration/two-way-ldap-and-active-directory-synchronization.md)
- [Firewall](https://docs.defguard.net/2.1/features/firewall.md)
- [Aliases and Destinations](https://docs.defguard.net/2.1/features/firewall/aliases-and-destinations.md)
- [Troubleshooting](https://docs.defguard.net/2.1/features/firewall/troubleshooting.md)
- [Implementation Details](https://docs.defguard.net/2.1/features/firewall/firewall-internals.md)
- [Network devices](https://docs.defguard.net/2.1/features/network-devices.md)
- [Activity & Audit logs](https://docs.defguard.net/2.1/features/activity-log.md)
- [Audit Log Streaming to SIEM systems](https://docs.defguard.net/2.1/features/activity-log/activity-log-streaming.md): This feature is designed to help teams centralize visibility into user actions, security events, and system behavior by integrating with tools they already use for monitoring and incident response.
- [Supported SIEM systems integrations](https://docs.defguard.net/2.1/features/activity-log/activity-log-streaming/activity-log-integrations.md): List of supported services to stream activity logs into.
- [Vector integration guide](https://docs.defguard.net/2.1/features/activity-log/activity-log-streaming/activity-log-integrations/vector-integration-guide.md): How to stream activity logs to vector.
- [Logstash integration guide](https://docs.defguard.net/2.1/features/activity-log/activity-log-streaming/activity-log-integrations/logstash-integration-guide.md): How to stream activity logs to logstash.
- [Notifications](https://docs.defguard.net/2.1/features/notifications.md)
- [Email notifications](https://docs.defguard.net/2.1/features/notifications/setting-up-smtp-for-email-notifications.md)
- [Gateway notifications](https://docs.defguard.net/2.1/features/notifications/gateway-notifications.md)
- [New version notifications](https://docs.defguard.net/2.1/features/notifications/new-version-notifications.md)
- [Integrations](https://docs.defguard.net/2.1/features/integrations.md)
- [Webhooks](https://docs.defguard.net/2.1/features/integrations/webhooks.md)
- [REST API](https://docs.defguard.net/2.1/features/integrations/api-tokens.md)
- [OPNSense Configuration](https://docs.defguard.net/2.1/features/gateway.md)
- [SSH Authentication](https://docs.defguard.net/2.1/features/ssh-authentication.md)
- [Forward auth](https://docs.defguard.net/2.1/features/forward-auth.md)
- [User SNAT bindings](https://docs.defguard.net/2.1/features/user-snat-bindings.md)
- [Service locations](https://docs.defguard.net/2.1/features/service-locations.md)
- [Desktop client auto-provisioning](https://docs.defguard.net/2.1/features/desktop-client-auto-provisioning.md)
- [Auto-provisioning in Windows environments](https://docs.defguard.net/2.1/features/desktop-client-auto-provisioning/auto-provisioning-in-windows-environments.md)
- [On-premise Active Directory](https://docs.defguard.net/2.1/features/desktop-client-auto-provisioning/auto-provisioning-in-windows-environments/on-premise-active-directory-environments.md)
- [Entra ID](https://docs.defguard.net/2.1/features/desktop-client-auto-provisioning/auto-provisioning-in-windows-environments/entra-id-environments.md)
- [Generating enrollment tokens with Defguard REST API](https://docs.defguard.net/2.1/features/desktop-client-auto-provisioning/generating-enrollment-tokens-with-defguard-rest-api.md)
- [Static IP assignment](https://docs.defguard.net/2.1/features/static-ip-assignment.md)
- [Certificate management](https://docs.defguard.net/2.1/features/certificate-management.md)
- [Device posture verification](https://docs.defguard.net/2.1/features/device-posture-verification.md)
- [Overview](https://docs.defguard.net/2.1/deployment-strategies/overview.md): This documentation will guide you through the process of deploying your Defguard instance.
- [Deploying to Production](https://docs.defguard.net/2.1/deployment-strategies/deploying-to-production.md)
- [Migration guides](https://docs.defguard.net/2.1/deployment-strategies/upgrading.md): Notes on upgrading Defguard and its components
- [Hardware, OS, network and firewall recommendations](https://docs.defguard.net/2.1/deployment-strategies/hardware-os-network-and-firewall-recommendations.md): Before Defguard can be deployed please get familiar with the following recommendations
- [Standalone package based installation](https://docs.defguard.net/2.1/deployment-strategies/standalone-package-based-installation.md)
- [PostgreSQL database](https://docs.defguard.net/2.1/deployment-strategies/standalone-package-based-installation/database.md)
- [Defguard Core](https://docs.defguard.net/2.1/deployment-strategies/standalone-package-based-installation/core.md)
- [Defguard Edge](https://docs.defguard.net/2.1/deployment-strategies/standalone-package-based-installation/edge.md)
- [Defguard Gateway](https://docs.defguard.net/2.1/deployment-strategies/standalone-package-based-installation/gateway.md)
- [Defguard APT repository](https://docs.defguard.net/2.1/deployment-strategies/standalone-package-based-installation/defguard-apt-repository.md)
- [Docker Compose](https://docs.defguard.net/2.1/deployment-strategies/docker-compose.md)
- [Kubernetes](https://docs.defguard.net/2.1/deployment-strategies/kubernetes.md)
- [Terraform](https://docs.defguard.net/2.1/deployment-strategies/terraform.md)
- [OVA](https://docs.defguard.net/2.1/deployment-strategies/ova.md)
- [Amazon Machine Image (AMI)](https://docs.defguard.net/2.1/deployment-strategies/amis-and-aws-cloudformation.md)
- [Configuring HTTPS using AWS Certificate Manager](https://docs.defguard.net/2.1/deployment-strategies/amis-and-aws-cloudformation/configuring-https-using-aws-certificate-manager.md)
- [Configuration](https://docs.defguard.net/2.1/deployment-strategies/configuration.md)
- [Running Gateway on OPNsense firewall](https://docs.defguard.net/2.1/deployment-strategies/running-gateway-on-opnsense-firewall.md)
- [Running Gateway on VyOS](https://docs.defguard.net/2.1/deployment-strategies/running-gateway-on-vyos.md)
- [Reverse Proxy configuration using NGINX](https://docs.defguard.net/2.1/deployment-strategies/reverse-proxy-configuration-using-nginx.md)
- [High Availability and Failover](https://docs.defguard.net/2.1/deployment-strategies/high-availability-and-failover.md)
- [WireGuard UDP load-balancing](https://docs.defguard.net/2.1/deployment-strategies/high-availability-and-failover/wireguard-udp-load-balancing.md)
- [Gateway with CARP](https://docs.defguard.net/2.1/deployment-strategies/high-availability-and-failover/gateway-with-carp.md)
- [Updating and version compatibility](https://docs.defguard.net/2.1/deployment-strategies/updating-and-version-compatibility.md)
- [Using a userspace WireGuard implementation](https://docs.defguard.net/2.1/deployment-strategies/using-a-userspace-wireguard-implementation.md)
- [Pre-production and development releases](https://docs.defguard.net/2.1/deployment-strategies/pre-production-and-development-releases.md)
- [Health check](https://docs.defguard.net/2.1/deployment-strategies/health-check.md)
- [Production deployment verification guide](https://docs.defguard.net/2.1/deployment-strategies/production-deployment-verification-guide.md)
- [Linux Kernel WireGuard tuning](https://docs.defguard.net/2.1/deployment-strategies/linux-kernel-wireguard-tuning.md): This technical guide addresses WireGuard VPN latency, throughput, resilience, and scalability requirements by tuning Linux kernel parameters (as WireGuard is part of the Linux kernel).
- [Programmatic gateway adoption](https://docs.defguard.net/2.1/deployment-strategies/programmatic-gateway-adoption.md)
- [Gateway/Location VLAN routing](https://docs.defguard.net/2.1/deployment-strategies/gateway-location-vlan-routing.md)
- [Purchasing and using the license](https://docs.defguard.net/2.1/enterprise/license.md)
- [Overview](https://docs.defguard.net/2.1/using-defguard-for-end-users/overwiew.md)
- [Mobile Client](https://docs.defguard.net/2.1/using-defguard-for-end-users/mobile-client.md)
- [Adding new Instance](https://docs.defguard.net/2.1/using-defguard-for-end-users/mobile-client/instance-adding.md)
- [Connecting to Instance](https://docs.defguard.net/2.1/using-defguard-for-end-users/mobile-client/instance-connect.md)
- [Managing your Instance](https://docs.defguard.net/2.1/using-defguard-for-end-users/mobile-client/instance-manage.md)
- [Using Biometry as MFA method](https://docs.defguard.net/2.1/using-defguard-for-end-users/mobile-client/using-biometry-as-mfa-method.md)
- [Desktop Client](https://docs.defguard.net/2.1/using-defguard-for-end-users/desktop-client.md)
- [Instance configuration](https://docs.defguard.net/2.1/using-defguard-for-end-users/desktop-client/instance-configuration.md): In this guide, you will learn how to add, remove and update Instance in Defguard desktop client.
- [Using Multi-Factor Authentication (MFA)](https://docs.defguard.net/2.1/using-defguard-for-end-users/desktop-client/using-multi-factor-authentication-mfa.md)
- [MTU Setting](https://docs.defguard.net/2.1/using-defguard-for-end-users/desktop-client/mtu-setting.md)
- [Command-line (defguard-cli)](https://docs.defguard.net/2.1/using-defguard-for-end-users/desktop-client/command-line-defguard-cli.md)
- [CLI Client](https://docs.defguard.net/2.1/using-defguard-for-end-users/cli-client.md)
- [Other WireGuard® Clients](https://docs.defguard.net/2.1/using-defguard-for-end-users/adding-wireguard-devices.md)
- [Configuring a device for new VPN Location manually](https://docs.defguard.net/2.1/using-defguard-for-end-users/adding-wireguard-devices/configuring-a-device-for-a-new-vpn-location.md)
- [Password change / Reset](https://docs.defguard.net/2.1/using-defguard-for-end-users/changing-your-password.md)
- [Enrollment & Onboarding](https://docs.defguard.net/2.1/using-defguard-for-end-users/enrollment.md)
- [With internal Defguard SSO](https://docs.defguard.net/2.1/using-defguard-for-end-users/enrollment/with-internal-defguard-sso.md)
- [With external SSO (Google/Microsoft/Custom)](https://docs.defguard.net/2.1/using-defguard-for-end-users/enrollment/with-external-sso-google-microsoft-custom.md)
- [Setting up 2FA/MFA](https://docs.defguard.net/2.1/using-defguard-for-end-users/setting-up-2fa-mfa.md)
- [Resolving Posture Check Failures](https://docs.defguard.net/2.1/using-defguard-for-end-users/resolving-posture-check-failures.md)
- [How to submit an issue](https://docs.defguard.net/2.1/support-1/how-to-submit-an-issue.md)
- [Sending support information](https://docs.defguard.net/2.1/support-1/sending-support-information.md)
- [Core](https://docs.defguard.net/2.1/support-1/sending-support-information/core.md)
- [Desktop Client](https://docs.defguard.net/2.1/support-1/sending-support-information/desktop-client.md)
- [Mobile client](https://docs.defguard.net/2.1/support-1/sending-support-information/mobile-client.md)
- [Using the Support Portal](https://docs.defguard.net/2.1/support-1/using-the-support-portal.md)
- [Troubleshooting Guides](https://docs.defguard.net/2.1/support-1/troubleshooting-guides.md): Before contacting support, check whether your problem is covered here.
- [Core](https://docs.defguard.net/2.1/support-1/troubleshooting-guides/core.md)
- [h2 protocol error from reverse proxy](https://docs.defguard.net/2.1/support-1/troubleshooting-guides/core/h2-protocol-error-from-reverse-proxy.md)
- [Unable to sign in with correct credentials](https://docs.defguard.net/2.1/support-1/troubleshooting-guides/core/unable-to-sign-in-with-correct-credentials.md)
- [User lost access to their 2FA methods](https://docs.defguard.net/2.1/support-1/troubleshooting-guides/core/user-lost-access-to-their-2fa-methods.md)
- [Enrollment URL Changed](https://docs.defguard.net/2.1/support-1/troubleshooting-guides/core/enrollment-url-changed.md)
- [Failed to parse duration](https://docs.defguard.net/2.1/support-1/troubleshooting-guides/core/failed-to-parse-duration.md)
- [Core cannot connect to Gateway or Edge after restart on single-host deployments](https://docs.defguard.net/2.1/support-1/troubleshooting-guides/core/core-cannot-connect-to-gateway-or-edge-after-restart-on-single-host-deployments.md)
- [Desktop Client](https://docs.defguard.net/2.1/support-1/troubleshooting-guides/desktop-client.md)
- [Unix socket permission error on connect (Linux)](https://docs.defguard.net/2.1/support-1/troubleshooting-guides/desktop-client/unix-socket-permission-error-on-connect-linux.md)
- [MFA location disconnected after X-time](https://docs.defguard.net/2.1/support-1/troubleshooting-guides/desktop-client/mfa-location-disconnected-after-x-time.md)
- [High disk usage](https://docs.defguard.net/2.1/support-1/troubleshooting-guides/desktop-client/high-disk-usage.md)
- [Failed to configure DNS (Linux)](https://docs.defguard.net/2.1/support-1/troubleshooting-guides/desktop-client/failed-to-configure-dns-linux.md)
- [Failed to parse IP address](https://docs.defguard.net/2.1/support-1/troubleshooting-guides/desktop-client/failed-to-parse-ip-address.md)
- [Disconnecting shows "Connection failed" (Linux / NetworkManager)](https://docs.defguard.net/2.1/support-1/troubleshooting-guides/desktop-client/disconnecting-shows-connection-failed-linux-networkmanager.md)
- [resolvconf not found (Debian)](https://docs.defguard.net/2.1/support-1/troubleshooting-guides/desktop-client/resolvconf-not-found-debian.md)
- [Unix socket does not exist (Linux)](https://docs.defguard.net/2.1/support-1/troubleshooting-guides/desktop-client/unix-socket-does-not-exist-linux.md)
- [Disconnected after MFA timeout](https://docs.defguard.net/2.1/support-1/troubleshooting-guides/desktop-client/disconnected-after-mfa-timeout.md)
- [Could not start MFA process](https://docs.defguard.net/2.1/support-1/troubleshooting-guides/desktop-client/could-not-start-mfa-process.md)
- [Client connects but cannot reach VPN servers (MTU)](https://docs.defguard.net/2.1/support-1/troubleshooting-guides/desktop-client/client-connects-but-cannot-reach-vpn-servers-mtu.md)
- [Desktop client real-time / auto sync does not work](https://docs.defguard.net/2.1/support-1/troubleshooting-guides/desktop-client/desktop-client-real-time-auto-sync-does-not-work.md)
- [Windows client unable to connect](https://docs.defguard.net/2.1/support-1/troubleshooting-guides/desktop-client/windows-client-unable-to-connect.md)
- ["All traffic" connection issues](https://docs.defguard.net/2.1/support-1/troubleshooting-guides/desktop-client/client-all-traffic-connection-issues.md)
- [Windows installer exit codes](https://docs.defguard.net/2.1/support-1/troubleshooting-guides/desktop-client/windows-installer-exit-codes.md): Desktop Client windows installer exist codes list.
- [VPN location is missing from client](https://docs.defguard.net/2.1/support-1/troubleshooting-guides/desktop-client/vpn-location-is-missing-from-client.md)
- [Mobile Client](https://docs.defguard.net/2.1/support-1/troubleshooting-guides/mobile-client.md)
- [Android "Failed host lookup" error](https://docs.defguard.net/2.1/support-1/troubleshooting-guides/mobile-client/android-failed-host-lookup-error.md)
- [Edge Component](https://docs.defguard.net/2.1/support-1/troubleshooting-guides/edge-component.md)
- [There was a network error. Can't reach Edge](https://docs.defguard.net/2.1/support-1/troubleshooting-guides/edge-component/there-was-a-network-error.-cant-reach-edge.md)
- [Gateway](https://docs.defguard.net/2.1/support-1/troubleshooting-guides/gateway.md)
- [No buffer space available](https://docs.defguard.net/2.1/support-1/troubleshooting-guides/gateway/no-buffer-space-available.md)
- [TOTP / email codes for MFA do not work](https://docs.defguard.net/2.1/support-1/troubleshooting-guides/totp-email-codes-for-mfa-do-not-work.md)
- [WebAuthn security keys](https://docs.defguard.net/2.1/support-1/troubleshooting-guides/webauthn-security-keys.md)
- [Can access VPN but not local network or internet](https://docs.defguard.net/2.1/support-1/troubleshooting-guides/can-access-vpn-but-not-local-network-or-internet.md)
- [How to verify the VPN is working](https://docs.defguard.net/2.1/support-1/troubleshooting-guides/how-to-verify-the-vpn-is-working.md)
- [Testing VPN speed](https://docs.defguard.net/2.1/support-1/troubleshooting-guides/testing-vpn-speed.md): VPN Speed Testing Guide: Linux Server & Windows/Linux Clients
- [Server migration and licence transfer](https://docs.defguard.net/2.1/support-1/server-migration-and-licence-transfer.md)
- [Troubleshooting Guide V1 legacy backup](https://docs.defguard.net/2.1/support-1/troubleshooting.md): Here are some common issues / problems that are frequently encountered.
- [Sending support information](https://docs.defguard.net/2.1/support-1/troubleshooting/sending-support-info.md)
- [Client Windows installer exit codes](https://docs.defguard.net/2.1/support-1/troubleshooting/windows-installer-exit-codes.md): Desktop Client windows installer exist codes list.
- [Client "All traffic" connection issues](https://docs.defguard.net/2.1/support-1/troubleshooting/client-all-traffic-connection-issues.md)
- [WebAuthn security keys](https://docs.defguard.net/2.1/support-1/troubleshooting/webauthn-security-keys.md)
- [Initial Setup Wizard: setting up from scratch](https://docs.defguard.net/2.1/tutorials/initial-setup-wizard-setting-up-from-scratch.md)
- [Migrating from Defguard 1.6 to 2.0](https://docs.defguard.net/2.1/tutorials/migrating-from-defguard-1.6-to-2.0.md)
- [Adding Edge component](https://docs.defguard.net/2.1/tutorials/adding-edge-component.md)
- [Defguard Compliance](https://docs.defguard.net/2.1/compliance/defguard-compliance.md)
- [Secure by design](https://docs.defguard.net/2.1/in-depth/secure-by-design.md)
- [Architecture](https://docs.defguard.net/2.1/in-depth/architecture.md)
- [How do VPN statistics work](https://docs.defguard.net/2.1/in-depth/architecture/how-do-vpn-statistics-work.md)
- [Security concepts](https://docs.defguard.net/2.1/in-depth/architecture/security-concepts.md)
- [MFA Architecture](https://docs.defguard.net/2.1/in-depth/architecture/architecture.md)
- [Architecture Decision Records](https://docs.defguard.net/2.1/in-depth/architecture-decision-records.md): What are Defguard's Architecture Decision Records?
- [2.0](https://docs.defguard.net/2.1/in-depth/architecture-decision-records/2.0.md)
- [1.6](https://docs.defguard.net/2.1/in-depth/architecture-decision-records/1.6.md)
- [1.5](https://docs.defguard.net/2.1/in-depth/architecture-decision-records/1.5.md)
- [1.4](https://docs.defguard.net/2.1/in-depth/architecture-decision-records/1.4.md)
- [1.3](https://docs.defguard.net/2.1/in-depth/architecture-decision-records/1.3.md)
- [Pre-1.3](https://docs.defguard.net/2.1/in-depth/architecture-decision-records/pre-1.3.md)
- [Client application feature compatibility](https://docs.defguard.net/2.1/in-depth/client-application-feature-compatibility.md)
- [Defguard Open Organisation](https://docs.defguard.net/2.1/in-depth/defguard-open-organisation.md)
- [Product Development Procedure](https://docs.defguard.net/2.1/in-depth/defguard-open-organisation/product-development-procedure.md)
- [Roadmap](https://docs.defguard.net/2.1/in-depth/defguard-open-organisation/roadmap.md): This is a high-level project roadmap of planned features.
- [BoringTun](https://docs.defguard.net/2.1/in-depth/boringtun.md)
- [Contributing](https://docs.defguard.net/2.1/for-developers/contributing.md)
- [Environment setup](https://docs.defguard.net/2.1/for-developers/dev-env-setup.md)
- [Translations (core/web)](https://docs.defguard.net/2.1/for-developers/dev-env-setup/translations-web.md)
- [Switching language](https://docs.defguard.net/2.1/for-developers/dev-env-setup/translations-web/switching-language.md)
- [Adding translations](https://docs.defguard.net/2.1/for-developers/dev-env-setup/translations-web/adding-translations.md)
- [Translations (client)](https://docs.defguard.net/2.1/for-developers/dev-env-setup/translations-client.md)
- [Adding translations](https://docs.defguard.net/2.1/for-developers/dev-env-setup/translations-client/adding-translations.md)