# defguard ## 1.4 - [Welcome](https://docs.defguard.net/1.4/readme.md) - [Getting help](https://docs.defguard.net/1.4/support.md) - [About Defguard](https://docs.defguard.net/1.4/about/about-defguard.md) - [Features overview](https://docs.defguard.net/1.4/about/features-overview.md) - [One-line install script](https://docs.defguard.net/1.4/getting-started/one-line-install.md) - [Overview](https://docs.defguard.net/1.4/features/overview.md) - [Zero-Trust VPN with 2FA/MFA](https://docs.defguard.net/1.4/features/wireguard.md) - [Create/Manage VPN Location](https://docs.defguard.net/1.4/features/wireguard/create-your-vpn-network.md) - [Network overview](https://docs.defguard.net/1.4/features/wireguard/network-overview.md) - [Multi-Factor Authentication (MFA/2FA)](https://docs.defguard.net/1.4/features/wireguard/multi-factor-authentication-mfa-2fa.md): Defguard is the sole VPN solution that genuinely implements Multi-Factor Authentication (MFA) before a WireGuard® VPN connection is established, significantly enhancing security against cyberattacks. - [Internal SSO based MFA](https://docs.defguard.net/1.4/features/wireguard/multi-factor-authentication-mfa-2fa/internal-sso-based-mfa.md) - [External SSO based MFA](https://docs.defguard.net/1.4/features/wireguard/multi-factor-authentication-mfa-2fa/external-sso-based-mfa.md) - [Remote desktop client configuration](https://docs.defguard.net/1.4/features/wireguard/remote-desktop-activation.md): How to manually generate token for user as an administrator. - [VPN & Client behaviour customization](https://docs.defguard.net/1.4/features/wireguard/behavior-customization.md) - [DNS and domains](https://docs.defguard.net/1.4/features/wireguard/dns-and-domains.md) - [Executing custom gateway commands](https://docs.defguard.net/1.4/features/wireguard/executing-custom-gateway-commands.md) - [Remote user enrollment](https://docs.defguard.net/1.4/features/remote-user-enrollment.md) - [User onboarding after enrollment](https://docs.defguard.net/1.4/features/remote-user-enrollment/user-onboarding-after-enrollment.md) - [Automatic (real time) desktop client configuration & sync](https://docs.defguard.net/1.4/features/remote-user-enrollment/automatic-real-time-desktop-client-configuration.md) - [Internal SSO (OpenID Connect Provider)](https://docs.defguard.net/1.4/features/openid-connect.md) - [Portainer](https://docs.defguard.net/1.4/features/openid-connect/portainer.md) - [Grafana setup](https://docs.defguard.net/1.4/features/openid-connect/grafana-setup.md) - [Proxmox](https://docs.defguard.net/1.4/features/openid-connect/proxmox.md) - [Matrix / Synapse](https://docs.defguard.net/1.4/features/openid-connect/proxmox-1.md) - [Django](https://docs.defguard.net/1.4/features/openid-connect/django.md) - [MinIO](https://docs.defguard.net/1.4/features/openid-connect/minio.md) - [Vault](https://docs.defguard.net/1.4/features/openid-connect/vault.md) - [External SSO/OpenID providers](https://docs.defguard.net/1.4/features/external-openid-providers.md) - [Google](https://docs.defguard.net/1.4/features/external-openid-providers/google.md) - [Microsoft](https://docs.defguard.net/1.4/features/external-openid-providers/microsoft.md) - [Okta](https://docs.defguard.net/1.4/features/external-openid-providers/okta.md) - [JumpCloud](https://docs.defguard.net/1.4/features/external-openid-providers/jumpcloud.md) - [Keycloak](https://docs.defguard.net/1.4/features/external-openid-providers/keycloak.md) - [Zitadel](https://docs.defguard.net/1.4/features/external-openid-providers/zitadel.md) - [Custom](https://docs.defguard.net/1.4/features/external-openid-providers/custom.md) - [External OIDC secure enrollment](https://docs.defguard.net/1.4/features/external-openid-providers/external-oidc-secure-enrollment.md) - [LDAP and Active Directory integration](https://docs.defguard.net/1.4/features/ldap-and-active-directory-integration.md) - [Configuration](https://docs.defguard.net/1.4/features/ldap-and-active-directory-integration/configuration.md): How to configure connection between Defguard instance and LDAP. - [Settings table](https://docs.defguard.net/1.4/features/ldap-and-active-directory-integration/settings-table.md): List with description of settings for LDAP found in settings page. - [Two-way LDAP and Active Directory synchronization](https://docs.defguard.net/1.4/features/ldap-and-active-directory-integration/two-way-ldap-and-active-directory-synchronization.md) - [Access Control List](https://docs.defguard.net/1.4/features/access-control-list.md) - [ACL Aliases](https://docs.defguard.net/1.4/features/access-control-list/acl-aliases.md) - [Implementation Details](https://docs.defguard.net/1.4/features/access-control-list/firewall-internals.md) - [Network devices](https://docs.defguard.net/1.4/features/network-devices.md) - [Activity & Audit logs](https://docs.defguard.net/1.4/features/activity-log.md) - [Audit Log Streaming to SIEM systems](https://docs.defguard.net/1.4/features/activity-log/activity-log-streaming.md): This feature is designed to help teams centralize visibility into user actions, security events, and system behavior by integrating with tools they already use for monitoring and incident response. - [Supported SIEM systems integrations](https://docs.defguard.net/1.4/features/activity-log/activity-log-streaming/activity-log-integrations.md): List of supported services to stream activity logs into. - [Vector integration guide](https://docs.defguard.net/1.4/features/activity-log/activity-log-streaming/activity-log-integrations/vector-integration-guide.md): How to stream activity logs to vector. - [Logstash integration guide](https://docs.defguard.net/1.4/features/activity-log/activity-log-streaming/activity-log-integrations/logstash-integration-guide.md): How to stream activity logs to vector. - [Notifications](https://docs.defguard.net/1.4/features/notifications.md) - [Email notifications](https://docs.defguard.net/1.4/features/notifications/setting-up-smtp-for-email-notifications.md) - [Gateway notifications](https://docs.defguard.net/1.4/features/notifications/gateway-notifications.md) - [New version notifications](https://docs.defguard.net/1.4/features/notifications/new-version-notifications.md) - [Integrations](https://docs.defguard.net/1.4/features/integrations.md) - [Webhooks](https://docs.defguard.net/1.4/features/integrations/webhooks.md) - [REST API](https://docs.defguard.net/1.4/features/integrations/api-tokens.md) - [OPSense Configuartion](https://docs.defguard.net/1.4/features/gateway.md) - [SSH Authentication](https://docs.defguard.net/1.4/features/ssh-authentication.md) - [Forward auth](https://docs.defguard.net/1.4/features/forward-auth.md) - [YubiKey Provisioning](https://docs.defguard.net/1.4/features/yubikey-provisioning.md): Provisioner repository: https://github.com/DefGuard/YubiKey-Provision - [User SNAT bindings](https://docs.defguard.net/1.4/features/user-snat-bindings.md) - [Overview](https://docs.defguard.net/1.4/deployment-strategies/setting-up-your-instance.md) - [Hardware, OS, network and firewall recommendations](https://docs.defguard.net/1.4/deployment-strategies/hardware-os-network-and-firewall-recommendations.md): Before Defguard can be deployed please get familiar with the following recommendations - [Standalone package based installation](https://docs.defguard.net/1.4/deployment-strategies/standalone-package-based-installation.md) - [Docker images and tags](https://docs.defguard.net/1.4/deployment-strategies/docker-images-and-tags.md) - [Docker Compose](https://docs.defguard.net/1.4/deployment-strategies/docker-compose.md) - [Kubernetes](https://docs.defguard.net/1.4/deployment-strategies/kubernetes.md) - [Terraform](https://docs.defguard.net/1.4/deployment-strategies/terraform.md) - [AMIs and AWS CloudFormation](https://docs.defguard.net/1.4/deployment-strategies/amis-and-aws-cloudformation.md) - [High Availability and Failover](https://docs.defguard.net/1.4/deployment-strategies/high-availability-and-failover.md) - [Upgrading](https://docs.defguard.net/1.4/deployment-strategies/upgrading.md): Notes on upgrading Defguard and its components - [Pre-production and development releases](https://docs.defguard.net/1.4/deployment-strategies/pre-production-and-development-releases.md) - [Gateway](https://docs.defguard.net/1.4/deployment-strategies/gateway.md) - [Running gateway on MikroTik routers](https://docs.defguard.net/1.4/deployment-strategies/gateway/running-gateway-on-mikrotik-routers.md) - [Securing gRPC communication](https://docs.defguard.net/1.4/deployment-strategies/grpc-ssl-communication.md) - [OpenID RSA key](https://docs.defguard.net/1.4/deployment-strategies/openid-rsa-key.md) - [Health check](https://docs.defguard.net/1.4/deployment-strategies/health-check.md) - [Configuration](https://docs.defguard.net/1.4/deployment-strategies/configuration.md) - [License](https://docs.defguard.net/1.4/enterprise/license.md) - [Enterprise features](https://docs.defguard.net/1.4/enterprise/enterprise-features.md) - [Overview](https://docs.defguard.net/1.4/using-defguard-for-end-users/overwiew.md) - [Mobile Client](https://docs.defguard.net/1.4/using-defguard-for-end-users/mobile-client.md) - [Desktop Client](https://docs.defguard.net/1.4/using-defguard-for-end-users/desktop-client.md) - [Instance configuration](https://docs.defguard.net/1.4/using-defguard-for-end-users/desktop-client/instance-configuration.md): In this guide, you will learn how to add, remove and update Instance in Defguard desktop client. - [Using Multi-Factor Authentication (MFA)](https://docs.defguard.net/1.4/using-defguard-for-end-users/desktop-client/using-multi-factor-authentication-mfa.md) - [CLI Client](https://docs.defguard.net/1.4/using-defguard-for-end-users/cli-client.md) - [Other WireGuard® Clients](https://docs.defguard.net/1.4/using-defguard-for-end-users/adding-wireguard-devices.md) - [Configuring a device for new VPN Location manually](https://docs.defguard.net/1.4/using-defguard-for-end-users/adding-wireguard-devices/configuring-a-device-for-a-new-vpn-location.md) - [Password change / Reset](https://docs.defguard.net/1.4/using-defguard-for-end-users/changing-your-password.md) - [Enrollment & Onboarding](https://docs.defguard.net/1.4/using-defguard-for-end-users/enrollment.md) - [With internal Defguard SSO](https://docs.defguard.net/1.4/using-defguard-for-end-users/enrollment/with-internal-defguard-sso.md) - [With external SSO (Google/Microsoft/Custom)](https://docs.defguard.net/1.4/using-defguard-for-end-users/enrollment/with-external-sso-google-microsoft-custom.md) - [Setting up 2FA/MFA](https://docs.defguard.net/1.4/using-defguard-for-end-users/setting-up-2fa-mfa.md) - [Step by step setting up a VPN server](https://docs.defguard.net/1.4/tutorials/step-by-step-setting-up-a-vpn-server.md) - [Adding additional VPN locations](https://docs.defguard.net/1.4/tutorials/step-by-step-setting-up-a-vpn-server/adding-additional-vpn-locations.md) - [Architecture Decision Records](https://docs.defguard.net/1.4/in-depth/architecture-decision-records.md): What are Defguard's Architecture Decision Records? - [1.4](https://docs.defguard.net/1.4/in-depth/architecture-decision-records/1.4.md) - [1.3](https://docs.defguard.net/1.4/in-depth/architecture-decision-records/1.3.md) - [Pre-1.3](https://docs.defguard.net/1.4/in-depth/architecture-decision-records/pre-1.3.md) - [Architecture](https://docs.defguard.net/1.4/in-depth/architecture.md) - [MFA Architecture](https://docs.defguard.net/1.4/in-depth/architecture/architecture.md) - [How do VPN statistics work](https://docs.defguard.net/1.4/in-depth/architecture/how-do-vpn-statistics-work.md) - [Security concepts](https://docs.defguard.net/1.4/in-depth/architecture/security-concepts.md) - [Roadmap](https://docs.defguard.net/1.4/in-depth/roadmap.md): This is a high-level project roadmap of planned features. - [Release cycle](https://docs.defguard.net/1.4/in-depth/release-cycle.md) - [Contributing](https://docs.defguard.net/1.4/for-developers/contributing.md) - [Environment setup](https://docs.defguard.net/1.4/for-developers/dev-env-setup.md) - [Translations (core/web)](https://docs.defguard.net/1.4/for-developers/dev-env-setup/translations-web.md) - [Switching language](https://docs.defguard.net/1.4/for-developers/dev-env-setup/translations-web/switching-language.md) - [Adding translations](https://docs.defguard.net/1.4/for-developers/dev-env-setup/translations-web/adding-translations.md) - [Translations (client)](https://docs.defguard.net/1.4/for-developers/dev-env-setup/translations-client.md) - [Adding translations](https://docs.defguard.net/1.4/for-developers/dev-env-setup/translations-client/adding-translations.md) - [Troubleshooting Guide](https://docs.defguard.net/1.4/resources/troubleshooting.md): Here are some common issues / problems that are frequently encountered. - [Sending support information](https://docs.defguard.net/1.4/resources/troubleshooting/sending-support-info.md) - [Client Windows installer exit codes](https://docs.defguard.net/1.4/resources/troubleshooting/windows-installer-exit-codes.md): Desktop Client windows installer exist codes list. - [Client "All traffic" connection issues](https://docs.defguard.net/1.4/resources/troubleshooting/client-all-traffic-connection-issues.md) - [WebAuthn security keys](https://docs.defguard.net/1.4/resources/troubleshooting/webauthn-security-keys.md) ## 1.5 - [Welcome](https://docs.defguard.net/1.5/readme.md) - [Getting help](https://docs.defguard.net/1.5/support.md) - [About Defguard](https://docs.defguard.net/1.5/about/about-defguard.md) - [Features overview](https://docs.defguard.net/1.5/about/features-overview.md) - [One-line install script](https://docs.defguard.net/1.5/getting-started/one-line-install.md) - [Overview](https://docs.defguard.net/1.5/features/overview.md) - [Zero-Trust VPN with 2FA/MFA](https://docs.defguard.net/1.5/features/wireguard.md) - [Create/Manage VPN Location](https://docs.defguard.net/1.5/features/wireguard/create-your-vpn-network.md) - [Network overview](https://docs.defguard.net/1.5/features/wireguard/network-overview.md) - [Multi-Factor Authentication (MFA/2FA)](https://docs.defguard.net/1.5/features/wireguard/multi-factor-authentication-mfa-2fa.md): Defguard is the sole VPN solution that genuinely implements Multi-Factor Authentication (MFA) before a WireGuard® VPN connection is established, significantly enhancing security against cyberattacks. - [Internal SSO based MFA](https://docs.defguard.net/1.5/features/wireguard/multi-factor-authentication-mfa-2fa/internal-sso-based-mfa.md) - [External SSO based MFA](https://docs.defguard.net/1.5/features/wireguard/multi-factor-authentication-mfa-2fa/external-sso-based-mfa.md) - [Remote desktop client configuration](https://docs.defguard.net/1.5/features/wireguard/remote-desktop-activation.md): How to manually generate token for user as an administrator. - [VPN & Client behaviour customization](https://docs.defguard.net/1.5/features/wireguard/behavior-customization.md) - [DNS and domains](https://docs.defguard.net/1.5/features/wireguard/dns-and-domains.md) - [Executing custom gateway commands](https://docs.defguard.net/1.5/features/wireguard/executing-custom-gateway-commands.md) - [Remote user enrollment](https://docs.defguard.net/1.5/features/remote-user-enrollment.md) - [User onboarding after enrollment](https://docs.defguard.net/1.5/features/remote-user-enrollment/user-onboarding-after-enrollment.md) - [Automatic (real time) desktop client configuration & sync](https://docs.defguard.net/1.5/features/remote-user-enrollment/automatic-real-time-desktop-client-configuration.md) - [Internal SSO (OpenID Connect Provider)](https://docs.defguard.net/1.5/features/openid-connect.md) - [Portainer](https://docs.defguard.net/1.5/features/openid-connect/portainer.md) - [Grafana setup](https://docs.defguard.net/1.5/features/openid-connect/grafana-setup.md) - [Proxmox](https://docs.defguard.net/1.5/features/openid-connect/proxmox.md) - [Matrix / Synapse](https://docs.defguard.net/1.5/features/openid-connect/proxmox-1.md) - [Django](https://docs.defguard.net/1.5/features/openid-connect/django.md) - [MinIO](https://docs.defguard.net/1.5/features/openid-connect/minio.md) - [Vault](https://docs.defguard.net/1.5/features/openid-connect/vault.md) - [External SSO/OpenID providers](https://docs.defguard.net/1.5/features/external-openid-providers.md) - [Google](https://docs.defguard.net/1.5/features/external-openid-providers/google.md) - [Microsoft](https://docs.defguard.net/1.5/features/external-openid-providers/microsoft.md) - [Okta](https://docs.defguard.net/1.5/features/external-openid-providers/okta.md) - [JumpCloud](https://docs.defguard.net/1.5/features/external-openid-providers/jumpcloud.md) - [Keycloak](https://docs.defguard.net/1.5/features/external-openid-providers/keycloak.md) - [Zitadel](https://docs.defguard.net/1.5/features/external-openid-providers/zitadel.md) - [Custom](https://docs.defguard.net/1.5/features/external-openid-providers/custom.md) - [External OIDC secure enrollment](https://docs.defguard.net/1.5/features/external-openid-providers/external-oidc-secure-enrollment.md) - [LDAP and Active Directory integration](https://docs.defguard.net/1.5/features/ldap-and-active-directory-integration.md) - [Configuration](https://docs.defguard.net/1.5/features/ldap-and-active-directory-integration/configuration.md): How to configure connection between Defguard instance and LDAP. - [Settings table](https://docs.defguard.net/1.5/features/ldap-and-active-directory-integration/settings-table.md): List with description of settings for LDAP found in settings page. - [Two-way LDAP and Active Directory synchronization](https://docs.defguard.net/1.5/features/ldap-and-active-directory-integration/two-way-ldap-and-active-directory-synchronization.md) - [Access Control List](https://docs.defguard.net/1.5/features/access-control-list.md) - [ACL Aliases](https://docs.defguard.net/1.5/features/access-control-list/acl-aliases.md) - [Implementation Details](https://docs.defguard.net/1.5/features/access-control-list/firewall-internals.md) - [Network devices](https://docs.defguard.net/1.5/features/network-devices.md) - [Activity & Audit logs](https://docs.defguard.net/1.5/features/activity-log.md) - [Audit Log Streaming to SIEM systems](https://docs.defguard.net/1.5/features/activity-log/activity-log-streaming.md): This feature is designed to help teams centralize visibility into user actions, security events, and system behavior by integrating with tools they already use for monitoring and incident response. - [Supported SIEM systems integrations](https://docs.defguard.net/1.5/features/activity-log/activity-log-streaming/activity-log-integrations.md): List of supported services to stream activity logs into. - [Vector integration guide](https://docs.defguard.net/1.5/features/activity-log/activity-log-streaming/activity-log-integrations/vector-integration-guide.md): How to stream activity logs to vector. - [Logstash integration guide](https://docs.defguard.net/1.5/features/activity-log/activity-log-streaming/activity-log-integrations/logstash-integration-guide.md): How to stream activity logs to logstash. - [Notifications](https://docs.defguard.net/1.5/features/notifications.md) - [Email notifications](https://docs.defguard.net/1.5/features/notifications/setting-up-smtp-for-email-notifications.md) - [Gateway notifications](https://docs.defguard.net/1.5/features/notifications/gateway-notifications.md) - [New version notifications](https://docs.defguard.net/1.5/features/notifications/new-version-notifications.md) - [Integrations](https://docs.defguard.net/1.5/features/integrations.md) - [Webhooks](https://docs.defguard.net/1.5/features/integrations/webhooks.md) - [REST API](https://docs.defguard.net/1.5/features/integrations/api-tokens.md) - [OPSense Configuartion](https://docs.defguard.net/1.5/features/gateway.md) - [SSH Authentication](https://docs.defguard.net/1.5/features/ssh-authentication.md) - [Forward auth](https://docs.defguard.net/1.5/features/forward-auth.md) - [YubiKey Provisioning](https://docs.defguard.net/1.5/features/yubikey-provisioning.md): Provisioner repository: https://github.com/DefGuard/YubiKey-Provision - [User SNAT bindings](https://docs.defguard.net/1.5/features/user-snat-bindings.md) - [Overview](https://docs.defguard.net/1.5/deployment-strategies/setting-up-your-instance.md): This documentation will guide you through the process of deploying your Defguard instance. - [Deploying to Production](https://docs.defguard.net/1.5/deployment-strategies/deploying-to-production.md) - [Hardware, OS, network and firewall recommendations](https://docs.defguard.net/1.5/deployment-strategies/hardware-os-network-and-firewall-recommendations.md): Before Defguard can be deployed please get familiar with the following recommendations - [Standalone package based installation](https://docs.defguard.net/1.5/deployment-strategies/standalone-package-based-installation.md) - [Defguard APT repository](https://docs.defguard.net/1.5/deployment-strategies/standalone-package-based-installation/defguard-apt-repository.md) - [Docker Compose](https://docs.defguard.net/1.5/deployment-strategies/docker-compose.md) - [Kubernetes](https://docs.defguard.net/1.5/deployment-strategies/kubernetes.md) - [Terraform](https://docs.defguard.net/1.5/deployment-strategies/terraform.md) - [Amazon Machine Image (AMI)](https://docs.defguard.net/1.5/deployment-strategies/amis-and-aws-cloudformation.md) - [Configuring HTTPS using AWS Certificate Manager](https://docs.defguard.net/1.5/deployment-strategies/amis-and-aws-cloudformation/configuring-https-using-aws-certificate-manager.md) - [Adding a location and getting a Gateway token](https://docs.defguard.net/1.5/deployment-strategies/gateway.md): This documentation will guide you through adding a new location and proceeding with the Gateway deployment, enabling your devices to connect to it via VPN. - [Configuration](https://docs.defguard.net/1.5/deployment-strategies/configuration.md) - [Running Gateway on OPNsense firewall](https://docs.defguard.net/1.5/deployment-strategies/running-gateway-on-opnsense-firewall.md) - [Running Gateway on MikroTik routers](https://docs.defguard.net/1.5/deployment-strategies/running-gateway-on-mikrotik-routers.md) - [Reverse Proxy configuration using Nginx](https://docs.defguard.net/1.5/deployment-strategies/reverse-proxy-configuration-using-nginx.md) - [High Availability and Failover](https://docs.defguard.net/1.5/deployment-strategies/high-availability-and-failover.md) - [Updating and version compatibility](https://docs.defguard.net/1.5/deployment-strategies/updating-and-version-compatibility.md) - [Migration guides](https://docs.defguard.net/1.5/deployment-strategies/upgrading.md): Notes on upgrading Defguard and its components - [Using a userspace wireguard-go implementation](https://docs.defguard.net/1.5/deployment-strategies/using-a-userspace-wireguard-go-implementation.md) - [Pre-production and development releases](https://docs.defguard.net/1.5/deployment-strategies/pre-production-and-development-releases.md) - [Securing gRPC communication](https://docs.defguard.net/1.5/deployment-strategies/grpc-ssl-communication.md) - [Using RSA instead of HMAC for OpenID key](https://docs.defguard.net/1.5/deployment-strategies/openid-rsa-key.md) - [Health check](https://docs.defguard.net/1.5/deployment-strategies/health-check.md) - [Production deployment verification guide](https://docs.defguard.net/1.5/deployment-strategies/production-deployment-verification-guide.md) - [License](https://docs.defguard.net/1.5/enterprise/license.md) - [Enterprise features](https://docs.defguard.net/1.5/enterprise/enterprise-features.md) - [Overview](https://docs.defguard.net/1.5/using-defguard-for-end-users/overwiew.md) - [Mobile Client](https://docs.defguard.net/1.5/using-defguard-for-end-users/mobile-client.md) - [Adding new Instance](https://docs.defguard.net/1.5/using-defguard-for-end-users/mobile-client/instance-adding.md) - [Connecting to Instance](https://docs.defguard.net/1.5/using-defguard-for-end-users/mobile-client/instance-connect.md) - [Managing your Instance](https://docs.defguard.net/1.5/using-defguard-for-end-users/mobile-client/instance-manage.md) - [Using Biometry as MFA method](https://docs.defguard.net/1.5/using-defguard-for-end-users/mobile-client/using-biometry-as-mfa-method.md) - [Desktop Client](https://docs.defguard.net/1.5/using-defguard-for-end-users/desktop-client.md) - [Instance configuration](https://docs.defguard.net/1.5/using-defguard-for-end-users/desktop-client/instance-configuration.md): In this guide, you will learn how to add, remove and update Instance in Defguard desktop client. - [Using Multi-Factor Authentication (MFA)](https://docs.defguard.net/1.5/using-defguard-for-end-users/desktop-client/using-multi-factor-authentication-mfa.md) - [CLI Client](https://docs.defguard.net/1.5/using-defguard-for-end-users/cli-client.md) - [Other WireGuard® Clients](https://docs.defguard.net/1.5/using-defguard-for-end-users/adding-wireguard-devices.md) - [Configuring a device for new VPN Location manually](https://docs.defguard.net/1.5/using-defguard-for-end-users/adding-wireguard-devices/configuring-a-device-for-a-new-vpn-location.md) - [Password change / Reset](https://docs.defguard.net/1.5/using-defguard-for-end-users/changing-your-password.md) - [Enrollment & Onboarding](https://docs.defguard.net/1.5/using-defguard-for-end-users/enrollment.md) - [With internal Defguard SSO](https://docs.defguard.net/1.5/using-defguard-for-end-users/enrollment/with-internal-defguard-sso.md) - [With external SSO (Google/Microsoft/Custom)](https://docs.defguard.net/1.5/using-defguard-for-end-users/enrollment/with-external-sso-google-microsoft-custom.md) - [Setting up 2FA/MFA](https://docs.defguard.net/1.5/using-defguard-for-end-users/setting-up-2fa-mfa.md) - [How to submit an issue](https://docs.defguard.net/1.5/support-1/how-to-submit-an-issue.md) - [Troubleshooting Guide](https://docs.defguard.net/1.5/support-1/troubleshooting.md): Here are some common issues / problems that are frequently encountered. - [Sending support information](https://docs.defguard.net/1.5/support-1/troubleshooting/sending-support-info.md) - [Client Windows installer exit codes](https://docs.defguard.net/1.5/support-1/troubleshooting/windows-installer-exit-codes.md): Desktop Client windows installer exist codes list. - [Client "All traffic" connection issues](https://docs.defguard.net/1.5/support-1/troubleshooting/client-all-traffic-connection-issues.md) - [WebAuthn security keys](https://docs.defguard.net/1.5/support-1/troubleshooting/webauthn-security-keys.md) - [Desktop Client connectivity issues](https://docs.defguard.net/1.5/support-1/troubleshooting/desktop-client-connectivity-issues.md) - [Server migration and licence transfer](https://docs.defguard.net/1.5/support-1/server-migration-and-licence-transfer.md) - [Step by step setting up a VPN server](https://docs.defguard.net/1.5/tutorials/step-by-step-setting-up-a-vpn-server.md) - [Adding additional VPN locations](https://docs.defguard.net/1.5/tutorials/step-by-step-setting-up-a-vpn-server/adding-additional-vpn-locations.md) - [Custom HTTPS Configuration](https://docs.defguard.net/1.5/tutorials/step-by-step-setting-up-a-vpn-server/custom-https-configuration.md) - [Architecture](https://docs.defguard.net/1.5/in-depth/architecture.md) - [How do VPN statistics work](https://docs.defguard.net/1.5/in-depth/architecture/how-do-vpn-statistics-work.md) - [Security concepts](https://docs.defguard.net/1.5/in-depth/architecture/security-concepts.md) - [MFA Architecture](https://docs.defguard.net/1.5/in-depth/architecture/architecture.md) - [Architecture Decision Records](https://docs.defguard.net/1.5/in-depth/architecture-decision-records.md): What are Defguard's Architecture Decision Records? - [1.5](https://docs.defguard.net/1.5/in-depth/architecture-decision-records/1.5.md) - [1.4](https://docs.defguard.net/1.5/in-depth/architecture-decision-records/1.4.md) - [1.3](https://docs.defguard.net/1.5/in-depth/architecture-decision-records/1.3.md) - [Pre-1.3](https://docs.defguard.net/1.5/in-depth/architecture-decision-records/pre-1.3.md) - [Roadmap](https://docs.defguard.net/1.5/in-depth/roadmap.md): This is a high-level project roadmap of planned features. - [Release cycle](https://docs.defguard.net/1.5/in-depth/release-cycle.md) - [Contributing](https://docs.defguard.net/1.5/for-developers/contributing.md) - [Environment setup](https://docs.defguard.net/1.5/for-developers/dev-env-setup.md) - [Translations (core/web)](https://docs.defguard.net/1.5/for-developers/dev-env-setup/translations-web.md) - [Switching language](https://docs.defguard.net/1.5/for-developers/dev-env-setup/translations-web/switching-language.md) - [Adding translations](https://docs.defguard.net/1.5/for-developers/dev-env-setup/translations-web/adding-translations.md) - [Translations (client)](https://docs.defguard.net/1.5/for-developers/dev-env-setup/translations-client.md) - [Adding translations](https://docs.defguard.net/1.5/for-developers/dev-env-setup/translations-client/adding-translations.md) ## 1.6 - [Welcome](https://docs.defguard.net/1.6/readme.md) - [Getting help](https://docs.defguard.net/1.6/support.md) - [About Defguard](https://docs.defguard.net/1.6/about/about-defguard.md) - [Features overview](https://docs.defguard.net/1.6/about/features-overview.md) - [One-line install script](https://docs.defguard.net/1.6/getting-started/one-line-install.md) - [Overview](https://docs.defguard.net/1.6/features/overview.md) - [Zero-Trust VPN with 2FA/MFA](https://docs.defguard.net/1.6/features/wireguard.md) - [Create/Manage VPN Location](https://docs.defguard.net/1.6/features/wireguard/create-your-vpn-network.md) - [Network overview](https://docs.defguard.net/1.6/features/wireguard/network-overview.md) - [Multi-Factor Authentication (MFA/2FA)](https://docs.defguard.net/1.6/features/wireguard/multi-factor-authentication-mfa-2fa.md): Defguard is the sole VPN solution that genuinely implements Multi-Factor Authentication (MFA) before a WireGuard® VPN connection is established, significantly enhancing security against cyberattacks. - [Internal SSO based MFA](https://docs.defguard.net/1.6/features/wireguard/multi-factor-authentication-mfa-2fa/internal-sso-based-mfa.md) - [External SSO based MFA](https://docs.defguard.net/1.6/features/wireguard/multi-factor-authentication-mfa-2fa/external-sso-based-mfa.md) - [Remote desktop client configuration](https://docs.defguard.net/1.6/features/wireguard/remote-desktop-activation.md): How to manually generate token for user as an administrator. - [VPN & Client behaviour customization](https://docs.defguard.net/1.6/features/wireguard/behavior-customization.md) - [DNS and domains](https://docs.defguard.net/1.6/features/wireguard/dns-and-domains.md) - [Executing custom gateway commands](https://docs.defguard.net/1.6/features/wireguard/executing-custom-gateway-commands.md) - [Remote user enrollment](https://docs.defguard.net/1.6/features/remote-user-enrollment.md) - [User onboarding after enrollment](https://docs.defguard.net/1.6/features/remote-user-enrollment/user-onboarding-after-enrollment.md) - [Automatic (real time) desktop client configuration & sync](https://docs.defguard.net/1.6/features/remote-user-enrollment/automatic-real-time-desktop-client-configuration.md) - [Internal SSO (OpenID Connect Provider)](https://docs.defguard.net/1.6/features/openid-connect.md) - [Portainer](https://docs.defguard.net/1.6/features/openid-connect/portainer.md) - [Grafana setup](https://docs.defguard.net/1.6/features/openid-connect/grafana-setup.md) - [Proxmox](https://docs.defguard.net/1.6/features/openid-connect/proxmox.md) - [Matrix / Synapse](https://docs.defguard.net/1.6/features/openid-connect/proxmox-1.md) - [Django](https://docs.defguard.net/1.6/features/openid-connect/django.md) - [MinIO](https://docs.defguard.net/1.6/features/openid-connect/minio.md) - [Vault](https://docs.defguard.net/1.6/features/openid-connect/vault.md) - [External SSO/OpenID providers](https://docs.defguard.net/1.6/features/external-openid-providers.md) - [Google](https://docs.defguard.net/1.6/features/external-openid-providers/google.md) - [Microsoft](https://docs.defguard.net/1.6/features/external-openid-providers/microsoft.md) - [Okta](https://docs.defguard.net/1.6/features/external-openid-providers/okta.md) - [JumpCloud](https://docs.defguard.net/1.6/features/external-openid-providers/jumpcloud.md) - [Keycloak](https://docs.defguard.net/1.6/features/external-openid-providers/keycloak.md) - [Zitadel](https://docs.defguard.net/1.6/features/external-openid-providers/zitadel.md) - [Custom](https://docs.defguard.net/1.6/features/external-openid-providers/custom.md) - [External OIDC secure enrollment](https://docs.defguard.net/1.6/features/external-openid-providers/external-oidc-secure-enrollment.md) - [LDAP and Active Directory integration](https://docs.defguard.net/1.6/features/ldap-and-active-directory-integration.md) - [Configuration](https://docs.defguard.net/1.6/features/ldap-and-active-directory-integration/configuration.md): How to configure connection between Defguard instance and LDAP. - [Settings table](https://docs.defguard.net/1.6/features/ldap-and-active-directory-integration/settings-table.md): List with description of settings for LDAP found in settings page. - [Two-way LDAP and Active Directory synchronization](https://docs.defguard.net/1.6/features/ldap-and-active-directory-integration/two-way-ldap-and-active-directory-synchronization.md) - [Access Control List](https://docs.defguard.net/1.6/features/access-control-list.md) - [ACL Aliases](https://docs.defguard.net/1.6/features/access-control-list/acl-aliases.md) - [Implementation Details](https://docs.defguard.net/1.6/features/access-control-list/firewall-internals.md) - [Network devices](https://docs.defguard.net/1.6/features/network-devices.md) - [Activity & Audit logs](https://docs.defguard.net/1.6/features/activity-log.md) - [Audit Log Streaming to SIEM systems](https://docs.defguard.net/1.6/features/activity-log/activity-log-streaming.md): This feature is designed to help teams centralize visibility into user actions, security events, and system behavior by integrating with tools they already use for monitoring and incident response. - [Supported SIEM systems integrations](https://docs.defguard.net/1.6/features/activity-log/activity-log-streaming/activity-log-integrations.md): List of supported services to stream activity logs into. - [Vector integration guide](https://docs.defguard.net/1.6/features/activity-log/activity-log-streaming/activity-log-integrations/vector-integration-guide.md): How to stream activity logs to vector. - [Logstash integration guide](https://docs.defguard.net/1.6/features/activity-log/activity-log-streaming/activity-log-integrations/logstash-integration-guide.md): How to stream activity logs to logstash. - [Notifications](https://docs.defguard.net/1.6/features/notifications.md) - [Email notifications](https://docs.defguard.net/1.6/features/notifications/setting-up-smtp-for-email-notifications.md) - [Gateway notifications](https://docs.defguard.net/1.6/features/notifications/gateway-notifications.md) - [New version notifications](https://docs.defguard.net/1.6/features/notifications/new-version-notifications.md) - [Integrations](https://docs.defguard.net/1.6/features/integrations.md) - [Webhooks](https://docs.defguard.net/1.6/features/integrations/webhooks.md) - [REST API](https://docs.defguard.net/1.6/features/integrations/api-tokens.md) - [OPNsense Configuration](https://docs.defguard.net/1.6/features/gateway.md) - [SSH Authentication](https://docs.defguard.net/1.6/features/ssh-authentication.md) - [Forward auth](https://docs.defguard.net/1.6/features/forward-auth.md) - [YubiKey Provisioning](https://docs.defguard.net/1.6/features/yubikey-provisioning.md): Provisioner repository: https://github.com/DefGuard/YubiKey-Provision - [User SNAT bindings](https://docs.defguard.net/1.6/features/user-snat-bindings.md) - [Service locations](https://docs.defguard.net/1.6/features/service-locations.md) - [Desktop client auto-provisioning](https://docs.defguard.net/1.6/features/desktop-client-auto-provisioning.md) - [Auto-provisioning in Windows environments](https://docs.defguard.net/1.6/features/desktop-client-auto-provisioning/auto-provisioning-in-windows-environments.md) - [On-premise Active Directory](https://docs.defguard.net/1.6/features/desktop-client-auto-provisioning/auto-provisioning-in-windows-environments/on-premise-active-directory-environments.md) - [Entra ID](https://docs.defguard.net/1.6/features/desktop-client-auto-provisioning/auto-provisioning-in-windows-environments/entra-id-environments.md) - [Generating enrollment tokens with Defguard REST API](https://docs.defguard.net/1.6/features/desktop-client-auto-provisioning/generating-enrollment-tokens-with-defguard-rest-api.md) - [Overview](https://docs.defguard.net/1.6/deployment-strategies/setting-up-your-instance.md): This documentation will guide you through the process of deploying your Defguard instance. - [Deploying to Production](https://docs.defguard.net/1.6/deployment-strategies/deploying-to-production.md) - [Hardware, OS, network and firewall recommendations](https://docs.defguard.net/1.6/deployment-strategies/hardware-os-network-and-firewall-recommendations.md): Before Defguard can be deployed please get familiar with the following recommendations - [Standalone package based installation](https://docs.defguard.net/1.6/deployment-strategies/standalone-package-based-installation.md) - [Defguard APT repository](https://docs.defguard.net/1.6/deployment-strategies/standalone-package-based-installation/defguard-apt-repository.md) - [Docker Compose](https://docs.defguard.net/1.6/deployment-strategies/docker-compose.md) - [Kubernetes](https://docs.defguard.net/1.6/deployment-strategies/kubernetes.md) - [Terraform](https://docs.defguard.net/1.6/deployment-strategies/terraform.md) - [Amazon Machine Image (AMI)](https://docs.defguard.net/1.6/deployment-strategies/amis-and-aws-cloudformation.md) - [Configuring HTTPS using AWS Certificate Manager](https://docs.defguard.net/1.6/deployment-strategies/amis-and-aws-cloudformation/configuring-https-using-aws-certificate-manager.md) - [Adding a location and getting a Gateway token](https://docs.defguard.net/1.6/deployment-strategies/gateway.md): This documentation will guide you through adding a new location and proceeding with the Gateway deployment, enabling your devices to connect to it via VPN. - [Configuration](https://docs.defguard.net/1.6/deployment-strategies/configuration.md) - [Running Gateway on OPNsense firewall](https://docs.defguard.net/1.6/deployment-strategies/running-gateway-on-opnsense-firewall.md) - [Running Gateway on MikroTik routers](https://docs.defguard.net/1.6/deployment-strategies/running-gateway-on-mikrotik-routers.md) - [Reverse Proxy configuration using NGINX](https://docs.defguard.net/1.6/deployment-strategies/reverse-proxy-configuration-using-nginx.md) - [High Availability and Failover](https://docs.defguard.net/1.6/deployment-strategies/high-availability-and-failover.md) - [Updating and version compatibility](https://docs.defguard.net/1.6/deployment-strategies/updating-and-version-compatibility.md) - [Migration guides](https://docs.defguard.net/1.6/deployment-strategies/upgrading.md): Notes on upgrading Defguard and its components - [Using a userspace wireguard-go implementation](https://docs.defguard.net/1.6/deployment-strategies/using-a-userspace-wireguard-go-implementation.md) - [Pre-production and development releases](https://docs.defguard.net/1.6/deployment-strategies/pre-production-and-development-releases.md) - [Securing gRPC communication](https://docs.defguard.net/1.6/deployment-strategies/grpc-ssl-communication.md) - [Using RSA instead of HMAC for OpenID key](https://docs.defguard.net/1.6/deployment-strategies/openid-rsa-key.md) - [Health check](https://docs.defguard.net/1.6/deployment-strategies/health-check.md) - [Production deployment verification guide](https://docs.defguard.net/1.6/deployment-strategies/production-deployment-verification-guide.md) - [Linux Kernel WireGuard tuning](https://docs.defguard.net/1.6/deployment-strategies/linux-kernel-wireguard-tuning.md): This technical guide addresses requirements regarding WireGuard VPN latency, throughput, resilience, and scalability by tuning Linux Kernel parameters (as WireGuard is part of Linux Kernel). - [Deployment automation](https://docs.defguard.net/1.6/deployment-strategies/deployment-automation.md) - [Purchasing and using the license](https://docs.defguard.net/1.6/enterprise/license.md) - [Overview](https://docs.defguard.net/1.6/using-defguard-for-end-users/overwiew.md) - [Mobile Client](https://docs.defguard.net/1.6/using-defguard-for-end-users/mobile-client.md) - [Adding new Instance](https://docs.defguard.net/1.6/using-defguard-for-end-users/mobile-client/instance-adding.md) - [Connecting to Instance](https://docs.defguard.net/1.6/using-defguard-for-end-users/mobile-client/instance-connect.md) - [Managing your Instance](https://docs.defguard.net/1.6/using-defguard-for-end-users/mobile-client/instance-manage.md) - [Using Biometry as MFA method](https://docs.defguard.net/1.6/using-defguard-for-end-users/mobile-client/using-biometry-as-mfa-method.md) - [Desktop Client](https://docs.defguard.net/1.6/using-defguard-for-end-users/desktop-client.md) - [Instance configuration](https://docs.defguard.net/1.6/using-defguard-for-end-users/desktop-client/instance-configuration.md): In this guide, you will learn how to add, remove and update Instance in Defguard desktop client. - [Using Multi-Factor Authentication (MFA)](https://docs.defguard.net/1.6/using-defguard-for-end-users/desktop-client/using-multi-factor-authentication-mfa.md) - [MTU Setting](https://docs.defguard.net/1.6/using-defguard-for-end-users/desktop-client/mtu-setting.md) - [CLI Client](https://docs.defguard.net/1.6/using-defguard-for-end-users/cli-client.md) - [Other WireGuard® Clients](https://docs.defguard.net/1.6/using-defguard-for-end-users/adding-wireguard-devices.md) - [Configuring a device for new VPN Location manually](https://docs.defguard.net/1.6/using-defguard-for-end-users/adding-wireguard-devices/configuring-a-device-for-a-new-vpn-location.md) - [Password change / Reset](https://docs.defguard.net/1.6/using-defguard-for-end-users/changing-your-password.md) - [Enrollment & Onboarding](https://docs.defguard.net/1.6/using-defguard-for-end-users/enrollment.md) - [With internal Defguard SSO](https://docs.defguard.net/1.6/using-defguard-for-end-users/enrollment/with-internal-defguard-sso.md) - [With external SSO (Google/Microsoft/Custom)](https://docs.defguard.net/1.6/using-defguard-for-end-users/enrollment/with-external-sso-google-microsoft-custom.md) - [Setting up 2FA/MFA](https://docs.defguard.net/1.6/using-defguard-for-end-users/setting-up-2fa-mfa.md) - [Version support policy](https://docs.defguard.net/1.6/support-1/version-support-policy.md): This page explains how long each Defguard version receives updates and which versions are currently supported. - [How to submit an issue](https://docs.defguard.net/1.6/support-1/how-to-submit-an-issue.md) - [Troubleshooting Guide](https://docs.defguard.net/1.6/support-1/troubleshooting.md): Here are some common issues / problems that are frequently encountered. - [Sending support information](https://docs.defguard.net/1.6/support-1/troubleshooting/sending-support-info.md) - [Client Windows installer exit codes](https://docs.defguard.net/1.6/support-1/troubleshooting/windows-installer-exit-codes.md): Desktop Client windows installer exist codes list. - [Client "All traffic" connection issues](https://docs.defguard.net/1.6/support-1/troubleshooting/client-all-traffic-connection-issues.md) - [WebAuthn security keys](https://docs.defguard.net/1.6/support-1/troubleshooting/webauthn-security-keys.md) - [Desktop Client connectivity issues](https://docs.defguard.net/1.6/support-1/troubleshooting/desktop-client-connectivity-issues.md) - [Client opening issues on Linux](https://docs.defguard.net/1.6/support-1/troubleshooting/client-opening-issues-on-linux.md) - [Client crashes immediately on launch with "Error 71 (Protocol error) dispatching to Wayland display"](https://docs.defguard.net/1.6/support-1/troubleshooting/client-crashes-immediately-on-launch-with-error-71-protocol-error-dispatching-to-wayland-display.md) - [Server migration and licence transfer](https://docs.defguard.net/1.6/support-1/server-migration-and-licence-transfer.md) - [Defguard 1.6 Support Policy](https://docs.defguard.net/1.6/support-1/defguard-1.6-support-policy.md) - [Step by step setting up a VPN server](https://docs.defguard.net/1.6/tutorials/step-by-step-setting-up-a-vpn-server.md) - [Adding additional VPN locations](https://docs.defguard.net/1.6/tutorials/step-by-step-setting-up-a-vpn-server/adding-additional-vpn-locations.md) - [Secure By Design](https://docs.defguard.net/1.6/in-depth/secure-by-design.md) - [Architecture](https://docs.defguard.net/1.6/in-depth/architecture.md) - [How do VPN statistics work](https://docs.defguard.net/1.6/in-depth/architecture/how-do-vpn-statistics-work.md) - [Security concepts](https://docs.defguard.net/1.6/in-depth/architecture/security-concepts.md) - [MFA Architecture](https://docs.defguard.net/1.6/in-depth/architecture/architecture.md) - [Architecture Decision Records](https://docs.defguard.net/1.6/in-depth/architecture-decision-records.md): What are Defguard's Architecture Decision Records? - [1.6](https://docs.defguard.net/1.6/in-depth/architecture-decision-records/1.6.md) - [1.5](https://docs.defguard.net/1.6/in-depth/architecture-decision-records/1.5.md) - [1.4](https://docs.defguard.net/1.6/in-depth/architecture-decision-records/1.4.md) - [1.3](https://docs.defguard.net/1.6/in-depth/architecture-decision-records/1.3.md) - [Pre-1.3](https://docs.defguard.net/1.6/in-depth/architecture-decision-records/pre-1.3.md) - [Roadmap](https://docs.defguard.net/1.6/in-depth/roadmap.md): This is a high-level project roadmap of planned features. - [Release cycle](https://docs.defguard.net/1.6/in-depth/release-cycle.md) - [Client application feature compatibility](https://docs.defguard.net/1.6/in-depth/client-application-feature-compatibility.md) - [Contributing](https://docs.defguard.net/1.6/for-developers/contributing.md) - [Environment setup](https://docs.defguard.net/1.6/for-developers/dev-env-setup.md) - [Translations (core/web)](https://docs.defguard.net/1.6/for-developers/dev-env-setup/translations-web.md) - [Switching language](https://docs.defguard.net/1.6/for-developers/dev-env-setup/translations-web/switching-language.md) - [Adding translations](https://docs.defguard.net/1.6/for-developers/dev-env-setup/translations-web/adding-translations.md) - [Translations (client)](https://docs.defguard.net/1.6/for-developers/dev-env-setup/translations-client.md) - [Adding translations](https://docs.defguard.net/1.6/for-developers/dev-env-setup/translations-client/adding-translations.md) ## 2.0 - [Welcome](https://docs.defguard.net/2.0/readme.md) - [Getting help](https://docs.defguard.net/2.0/support.md) - [About Defguard](https://docs.defguard.net/2.0/about/about-defguard.md) - [Features overview](https://docs.defguard.net/2.0/about/features-overview.md) - [One-line install script](https://docs.defguard.net/2.0/getting-started/one-line-install.md) - [Overview](https://docs.defguard.net/2.0/features/overview.md) - [Zero-Trust VPN with 2FA/MFA](https://docs.defguard.net/2.0/features/wireguard.md) - [Create/Manage VPN Location](https://docs.defguard.net/2.0/features/wireguard/create-your-vpn-network.md) - [Split Tunnel Configuration](https://docs.defguard.net/2.0/features/wireguard/create-your-vpn-network/split-tunnel-configuration.md) - [Network overview](https://docs.defguard.net/2.0/features/wireguard/network-overview.md) - [Multi-Factor Authentication (MFA/2FA)](https://docs.defguard.net/2.0/features/wireguard/multi-factor-authentication-mfa-2fa.md): Defguard is the sole VPN solution that genuinely implements Multi-Factor Authentication (MFA) before a WireGuard® VPN connection is established, significantly enhancing security against cyberattacks. - [Internal SSO based MFA](https://docs.defguard.net/2.0/features/wireguard/multi-factor-authentication-mfa-2fa/internal-sso-based-mfa.md) - [External SSO based MFA](https://docs.defguard.net/2.0/features/wireguard/multi-factor-authentication-mfa-2fa/external-sso-based-mfa.md) - [Adding client device](https://docs.defguard.net/2.0/features/wireguard/remote-desktop-activation.md): How to manually generate token for user as an administrator. - [Client behaviour customization](https://docs.defguard.net/2.0/features/wireguard/behavior-customization.md) - [DNS and domains](https://docs.defguard.net/2.0/features/wireguard/dns-and-domains.md) - [Executing custom gateway commands](https://docs.defguard.net/2.0/features/wireguard/executing-custom-gateway-commands.md) - [Remote user enrollment](https://docs.defguard.net/2.0/features/remote-user-enrollment.md) - [User onboarding after enrollment](https://docs.defguard.net/2.0/features/remote-user-enrollment/user-onboarding-after-enrollment.md) - [Automatic (real time) desktop client configuration & sync](https://docs.defguard.net/2.0/features/remote-user-enrollment/automatic-real-time-desktop-client-configuration.md) - [Internal SSO (OpenID Connect Provider)](https://docs.defguard.net/2.0/features/openid-connect.md) - [Portainer](https://docs.defguard.net/2.0/features/openid-connect/portainer.md) - [Grafana setup](https://docs.defguard.net/2.0/features/openid-connect/grafana-setup.md) - [Proxmox](https://docs.defguard.net/2.0/features/openid-connect/proxmox.md) - [Matrix / Synapse](https://docs.defguard.net/2.0/features/openid-connect/proxmox-1.md) - [Django](https://docs.defguard.net/2.0/features/openid-connect/django.md) - [MinIO](https://docs.defguard.net/2.0/features/openid-connect/minio.md) - [Vault](https://docs.defguard.net/2.0/features/openid-connect/vault.md) - [External SSO/OpenID providers](https://docs.defguard.net/2.0/features/external-openid-providers.md) - [Google](https://docs.defguard.net/2.0/features/external-openid-providers/google.md) - [Microsoft](https://docs.defguard.net/2.0/features/external-openid-providers/microsoft.md) - [Okta](https://docs.defguard.net/2.0/features/external-openid-providers/okta.md) - [JumpCloud](https://docs.defguard.net/2.0/features/external-openid-providers/jumpcloud.md) - [Keycloak](https://docs.defguard.net/2.0/features/external-openid-providers/keycloak.md) - [Zitadel](https://docs.defguard.net/2.0/features/external-openid-providers/zitadel.md) - [Custom](https://docs.defguard.net/2.0/features/external-openid-providers/custom.md) - [External OIDC secure enrollment](https://docs.defguard.net/2.0/features/external-openid-providers/external-oidc-secure-enrollment.md) - [LDAP and Active Directory integration](https://docs.defguard.net/2.0/features/ldap-and-active-directory-integration.md) - [LDAP Configuration](https://docs.defguard.net/2.0/features/ldap-and-active-directory-integration/configuration.md): How to configure the connection between a Defguard instance and LDAP. - [Example configurations](https://docs.defguard.net/2.0/features/ldap-and-active-directory-integration/examples.md) - [Settings table](https://docs.defguard.net/2.0/features/ldap-and-active-directory-integration/settings-table.md): A list describing the LDAP settings available on the settings page. - [Two-way LDAP and Active Directory synchronization](https://docs.defguard.net/2.0/features/ldap-and-active-directory-integration/two-way-ldap-and-active-directory-synchronization.md) - [Firewall](https://docs.defguard.net/2.0/features/firewall.md) - [Aliases and Destinations](https://docs.defguard.net/2.0/features/firewall/aliases-and-destinations.md) - [Troubleshooting](https://docs.defguard.net/2.0/features/firewall/troubleshooting.md) - [Implementation Details](https://docs.defguard.net/2.0/features/firewall/firewall-internals.md) - [Network devices](https://docs.defguard.net/2.0/features/network-devices.md) - [Activity & Audit logs](https://docs.defguard.net/2.0/features/activity-log.md) - [Audit Log Streaming to SIEM systems](https://docs.defguard.net/2.0/features/activity-log/activity-log-streaming.md): This feature is designed to help teams centralize visibility into user actions, security events, and system behaviour by integrating with tools they already use for monitoring and incident response. - [Supported SIEM systems integrations](https://docs.defguard.net/2.0/features/activity-log/activity-log-streaming/activity-log-integrations.md): List of supported services to stream activity logs into. - [Vector integration guide](https://docs.defguard.net/2.0/features/activity-log/activity-log-streaming/activity-log-integrations/vector-integration-guide.md): How to stream activity logs to vector. - [Logstash integration guide](https://docs.defguard.net/2.0/features/activity-log/activity-log-streaming/activity-log-integrations/logstash-integration-guide.md): How to stream activity logs to logstash. - [Notifications](https://docs.defguard.net/2.0/features/notifications.md) - [Email notifications](https://docs.defguard.net/2.0/features/notifications/setting-up-smtp-for-email-notifications.md) - [Gateway notifications](https://docs.defguard.net/2.0/features/notifications/gateway-notifications.md) - [New version notifications](https://docs.defguard.net/2.0/features/notifications/new-version-notifications.md) - [Integrations](https://docs.defguard.net/2.0/features/integrations.md) - [Webhooks](https://docs.defguard.net/2.0/features/integrations/webhooks.md) - [REST API](https://docs.defguard.net/2.0/features/integrations/api-tokens.md) - [SSH Authentication](https://docs.defguard.net/2.0/features/ssh-authentication.md) - [Forward auth](https://docs.defguard.net/2.0/features/forward-auth.md) - [User SNAT bindings](https://docs.defguard.net/2.0/features/user-snat-bindings.md) - [Service locations](https://docs.defguard.net/2.0/features/service-locations.md) - [Desktop client auto-provisioning](https://docs.defguard.net/2.0/features/desktop-client-auto-provisioning.md) - [Auto-provisioning in Windows environments](https://docs.defguard.net/2.0/features/desktop-client-auto-provisioning/auto-provisioning-in-windows-environments.md) - [On-premise Active Directory](https://docs.defguard.net/2.0/features/desktop-client-auto-provisioning/auto-provisioning-in-windows-environments/on-premise-active-directory-environments.md) - [Entra ID](https://docs.defguard.net/2.0/features/desktop-client-auto-provisioning/auto-provisioning-in-windows-environments/entra-id-environments.md) - [Generating enrollment tokens with Defguard REST API](https://docs.defguard.net/2.0/features/desktop-client-auto-provisioning/generating-enrollment-tokens-with-defguard-rest-api.md) - [Static IP assignment](https://docs.defguard.net/2.0/features/static-ip-assignment.md) - [Certificate management](https://docs.defguard.net/2.0/features/certificate-management.md) - [Overview](https://docs.defguard.net/2.0/deployment-strategies/overview.md): This documentation will guide you through the process of deploying your Defguard instance. - [Deploying to Production](https://docs.defguard.net/2.0/deployment-strategies/deploying-to-production.md) - [Migration guides](https://docs.defguard.net/2.0/deployment-strategies/upgrading.md): Notes on upgrading Defguard and its components - [Hardware, OS, network and firewall recommendations](https://docs.defguard.net/2.0/deployment-strategies/hardware-os-network-and-firewall-recommendations.md): Before Defguard can be deployed please get familiar with the following recommendations - [Standalone package based installation](https://docs.defguard.net/2.0/deployment-strategies/standalone-package-based-installation.md) - [PostgreSQL database](https://docs.defguard.net/2.0/deployment-strategies/standalone-package-based-installation/database.md) - [Defguard Core](https://docs.defguard.net/2.0/deployment-strategies/standalone-package-based-installation/core.md) - [Defguard Edge](https://docs.defguard.net/2.0/deployment-strategies/standalone-package-based-installation/edge.md) - [Defguard Gateway](https://docs.defguard.net/2.0/deployment-strategies/standalone-package-based-installation/gateway.md) - [Defguard APT repository](https://docs.defguard.net/2.0/deployment-strategies/standalone-package-based-installation/defguard-apt-repository.md) - [Docker Compose](https://docs.defguard.net/2.0/deployment-strategies/docker-compose.md) - [Kubernetes](https://docs.defguard.net/2.0/deployment-strategies/kubernetes.md) - [OVA](https://docs.defguard.net/2.0/deployment-strategies/ova.md) - [Configuration](https://docs.defguard.net/2.0/deployment-strategies/configuration.md) - [Running Gateway on OPNsense firewall](https://docs.defguard.net/2.0/deployment-strategies/running-gateway-on-opnsense-firewall.md) - [Running Gateway on VyOS](https://docs.defguard.net/2.0/deployment-strategies/running-gateway-on-vyos.md) - [Reverse Proxy configuration using NGINX](https://docs.defguard.net/2.0/deployment-strategies/reverse-proxy-configuration-using-nginx.md) - [High Availability and Failover](https://docs.defguard.net/2.0/deployment-strategies/high-availability-and-failover.md) - [WireGuard UDP load-balancing](https://docs.defguard.net/2.0/deployment-strategies/high-availability-and-failover/wireguard-udp-load-balancing.md) - [Gateway with CARP](https://docs.defguard.net/2.0/deployment-strategies/high-availability-and-failover/gateway-with-carp.md) - [Updating and version compatibility](https://docs.defguard.net/2.0/deployment-strategies/updating-and-version-compatibility.md) - [Using a userspace WireGuard implementation](https://docs.defguard.net/2.0/deployment-strategies/using-a-userspace-wireguard-implementation.md) - [Pre-production and development releases](https://docs.defguard.net/2.0/deployment-strategies/pre-production-and-development-releases.md) - [Health check](https://docs.defguard.net/2.0/deployment-strategies/health-check.md) - [Production deployment verification guide](https://docs.defguard.net/2.0/deployment-strategies/production-deployment-verification-guide.md) - [Linux Kernel WireGuard tuning](https://docs.defguard.net/2.0/deployment-strategies/linux-kernel-wireguard-tuning.md): This technical guide addresses WireGuard VPN latency, throughput, resilience, and scalability requirements by tuning Linux kernel parameters (as WireGuard is part of the Linux kernel). - [Programmatic gateway adoption](https://docs.defguard.net/2.0/deployment-strategies/programmatic-gateway-adoption.md) - [Gateway/Location VLAN routing](https://docs.defguard.net/2.0/deployment-strategies/gateway-location-vlan-routing.md) - [Terraform](https://docs.defguard.net/2.0/deployment-strategies/terraform.md): Deploy a complete Defguard 2.x environment on AWS with Terraform: EC2 instances for Core, Edge and Gateway plus a managed RDS PostgreSQL database. - [Purchasing and using the license](https://docs.defguard.net/2.0/enterprise/license.md) - [Overview](https://docs.defguard.net/2.0/using-defguard-for-end-users/overwiew.md) - [Mobile Client](https://docs.defguard.net/2.0/using-defguard-for-end-users/mobile-client.md) - [Adding new Instance](https://docs.defguard.net/2.0/using-defguard-for-end-users/mobile-client/instance-adding.md) - [Connecting to Instance](https://docs.defguard.net/2.0/using-defguard-for-end-users/mobile-client/instance-connect.md) - [Managing your Instance](https://docs.defguard.net/2.0/using-defguard-for-end-users/mobile-client/instance-manage.md) - [Using Biometry as MFA method](https://docs.defguard.net/2.0/using-defguard-for-end-users/mobile-client/using-biometry-as-mfa-method.md) - [Desktop Client](https://docs.defguard.net/2.0/using-defguard-for-end-users/desktop-client.md) - [Instance configuration](https://docs.defguard.net/2.0/using-defguard-for-end-users/desktop-client/instance-configuration.md): In this guide, you will learn how to add, remove and update Instance in Defguard desktop client. - [Using Multi-Factor Authentication (MFA)](https://docs.defguard.net/2.0/using-defguard-for-end-users/desktop-client/using-multi-factor-authentication-mfa.md) - [MTU Setting](https://docs.defguard.net/2.0/using-defguard-for-end-users/desktop-client/mtu-setting.md) - [Nightly builds](https://docs.defguard.net/2.0/using-defguard-for-end-users/desktop-client/nightly-builds.md) - [CLI Client](https://docs.defguard.net/2.0/using-defguard-for-end-users/cli-client.md) - [Other WireGuard® Clients](https://docs.defguard.net/2.0/using-defguard-for-end-users/adding-wireguard-devices.md) - [Configuring a device for new VPN Location manually](https://docs.defguard.net/2.0/using-defguard-for-end-users/adding-wireguard-devices/configuring-a-device-for-a-new-vpn-location.md) - [Password change / Reset](https://docs.defguard.net/2.0/using-defguard-for-end-users/changing-your-password.md) - [Enrollment & Onboarding](https://docs.defguard.net/2.0/using-defguard-for-end-users/enrollment.md) - [With internal Defguard SSO](https://docs.defguard.net/2.0/using-defguard-for-end-users/enrollment/with-internal-defguard-sso.md) - [With external SSO (Google/Microsoft/Custom)](https://docs.defguard.net/2.0/using-defguard-for-end-users/enrollment/with-external-sso-google-microsoft-custom.md) - [Setting up 2FA/MFA](https://docs.defguard.net/2.0/using-defguard-for-end-users/setting-up-2fa-mfa.md) - [Version support policy](https://docs.defguard.net/2.0/support-1/version-support-policy.md): This page explains how long each Defguard version receives updates and which versions are currently supported. - [How to submit an issue](https://docs.defguard.net/2.0/support-1/how-to-submit-an-issue.md) - [Sending support information](https://docs.defguard.net/2.0/support-1/sending-support-information.md) - [Server applications](https://docs.defguard.net/2.0/support-1/sending-support-information/core.md) - [Desktop Client](https://docs.defguard.net/2.0/support-1/sending-support-information/desktop-client.md) - [Mobile client](https://docs.defguard.net/2.0/support-1/sending-support-information/mobile-client.md) - [Troubleshooting Guides](https://docs.defguard.net/2.0/support-1/troubleshooting-guides.md): Before contacting support, check whether your problem is covered here. - [Core](https://docs.defguard.net/2.0/support-1/troubleshooting-guides/core.md) - [h2 protocol error from reverse proxy](https://docs.defguard.net/2.0/support-1/troubleshooting-guides/core/h2-protocol-error-from-reverse-proxy.md) - [Unable to sign in with correct credentials](https://docs.defguard.net/2.0/support-1/troubleshooting-guides/core/unable-to-sign-in-with-correct-credentials.md) - [User lost access to their 2FA methods](https://docs.defguard.net/2.0/support-1/troubleshooting-guides/core/user-lost-access-to-their-2fa-methods.md) - [Enrollment URL Changed](https://docs.defguard.net/2.0/support-1/troubleshooting-guides/core/enrollment-url-changed.md) - [Failed to parse duration](https://docs.defguard.net/2.0/support-1/troubleshooting-guides/core/failed-to-parse-duration.md) - [Core cannot connect to Gateway or Edge after restart on single-host deployments](https://docs.defguard.net/2.0/support-1/troubleshooting-guides/core/core-cannot-connect-to-gateway-or-edge-after-restart-on-single-host-deployments.md) - [Cannot save settings after deleting the default admin](https://docs.defguard.net/2.0/support-1/troubleshooting-guides/core/settings-violate-foreign-key-constraint-fk-default-admin.md) - [Desktop Client](https://docs.defguard.net/2.0/support-1/troubleshooting-guides/desktop-client.md) - [Unix socket permission error on connect (Linux)](https://docs.defguard.net/2.0/support-1/troubleshooting-guides/desktop-client/unix-socket-permission-error-on-connect-linux.md) - [MFA location disconnected after X-time](https://docs.defguard.net/2.0/support-1/troubleshooting-guides/desktop-client/mfa-location-disconnected-after-x-time.md) - [High disk usage](https://docs.defguard.net/2.0/support-1/troubleshooting-guides/desktop-client/high-disk-usage.md) - [Failed to configure DNS (Linux)](https://docs.defguard.net/2.0/support-1/troubleshooting-guides/desktop-client/failed-to-configure-dns-linux.md) - [Failed to parse IP address](https://docs.defguard.net/2.0/support-1/troubleshooting-guides/desktop-client/failed-to-parse-ip-address.md) - [Disconnecting shows "Connection failed" (Linux / NetworkManager)](https://docs.defguard.net/2.0/support-1/troubleshooting-guides/desktop-client/disconnecting-shows-connection-failed-linux-networkmanager.md) - [resolvconf not found (Debian)](https://docs.defguard.net/2.0/support-1/troubleshooting-guides/desktop-client/resolvconf-not-found-debian.md) - [Unix socket does not exist (Linux)](https://docs.defguard.net/2.0/support-1/troubleshooting-guides/desktop-client/unix-socket-does-not-exist-linux.md) - [Disconnected after MFA timeout](https://docs.defguard.net/2.0/support-1/troubleshooting-guides/desktop-client/disconnected-after-mfa-timeout.md) - [Could not start MFA process](https://docs.defguard.net/2.0/support-1/troubleshooting-guides/desktop-client/could-not-start-mfa-process.md) - [Client connects but cannot reach VPN servers (MTU)](https://docs.defguard.net/2.0/support-1/troubleshooting-guides/desktop-client/client-connects-but-cannot-reach-vpn-servers-mtu.md) - [Desktop client real-time / auto sync does not work](https://docs.defguard.net/2.0/support-1/troubleshooting-guides/desktop-client/desktop-client-real-time-auto-sync-does-not-work.md) - [Windows client unable to connect](https://docs.defguard.net/2.0/support-1/troubleshooting-guides/desktop-client/windows-client-unable-to-connect.md) - ["All traffic" connection issues](https://docs.defguard.net/2.0/support-1/troubleshooting-guides/desktop-client/client-all-traffic-connection-issues.md) - [Windows installer exit codes](https://docs.defguard.net/2.0/support-1/troubleshooting-guides/desktop-client/windows-installer-exit-codes.md): Desktop Client windows installer exist codes list. - [Client crashes immediately on launch with "Error 71 (Protocol error) dispatching to Wayland display"](https://docs.defguard.net/2.0/support-1/troubleshooting-guides/desktop-client/client-crashes-immediately-on-launch-with-error-71-protocol-error-dispatching-to-wayland-display.md) - [Desktop Client connectivity issues](https://docs.defguard.net/2.0/support-1/troubleshooting-guides/desktop-client/desktop-client-connectivity-issues.md) - [Mobile Client](https://docs.defguard.net/2.0/support-1/troubleshooting-guides/mobile-client.md) - [Android "Failed host lookup" error](https://docs.defguard.net/2.0/support-1/troubleshooting-guides/mobile-client/android-failed-host-lookup-error.md) - [Edge Component](https://docs.defguard.net/2.0/support-1/troubleshooting-guides/edge-component.md) - [There was a network error. Can't reach Edge](https://docs.defguard.net/2.0/support-1/troubleshooting-guides/edge-component/there-was-a-network-error.-cant-reach-edge.md) - [Gateway](https://docs.defguard.net/2.0/support-1/troubleshooting-guides/gateway.md) - [No buffer space available](https://docs.defguard.net/2.0/support-1/troubleshooting-guides/gateway/no-buffer-space-available.md) - [TOTP / email codes for MFA do not work](https://docs.defguard.net/2.0/support-1/troubleshooting-guides/totp-email-codes-for-mfa-do-not-work.md) - [WebAuthn security keys](https://docs.defguard.net/2.0/support-1/troubleshooting-guides/webauthn-security-keys.md) - [Can access VPN but not local network or internet](https://docs.defguard.net/2.0/support-1/troubleshooting-guides/can-access-vpn-but-not-local-network-or-internet.md) - [How to verify the VPN is working](https://docs.defguard.net/2.0/support-1/troubleshooting-guides/how-to-verify-the-vpn-is-working.md) - [Testing VPN speed](https://docs.defguard.net/2.0/support-1/troubleshooting-guides/testing-vpn-speed.md): VPN Speed Testing Guide: Linux Server & Windows/Linux Clients - [Server migration and licence transfer](https://docs.defguard.net/2.0/support-1/server-migration-and-licence-transfer.md) - [Troubleshooting Guide V1 legacy backup](https://docs.defguard.net/2.0/support-1/troubleshooting.md): Here are some common issues / problems that are frequently encountered. - [Sending support information](https://docs.defguard.net/2.0/support-1/troubleshooting/sending-support-info.md) - [Client Windows installer exit codes](https://docs.defguard.net/2.0/support-1/troubleshooting/windows-installer-exit-codes.md): Desktop Client windows installer exist codes list. - [Client "All traffic" connection issues](https://docs.defguard.net/2.0/support-1/troubleshooting/client-all-traffic-connection-issues.md) - [WebAuthn security keys](https://docs.defguard.net/2.0/support-1/troubleshooting/webauthn-security-keys.md) - [Initial Setup Wizard: setting up from scratch](https://docs.defguard.net/2.0/tutorials/initial-setup-wizard-setting-up-from-scratch.md) - [Migrating from Defguard 1.6 to 2.0](https://docs.defguard.net/2.0/tutorials/migrating-from-defguard-1.6-to-2.0.md) - [Adding Edge component](https://docs.defguard.net/2.0/tutorials/adding-edge-component.md) - [Defguard Compliance](https://docs.defguard.net/2.0/compliance/defguard-compliance.md) - [Secure by design](https://docs.defguard.net/2.0/in-depth/secure-by-design.md) - [Architecture](https://docs.defguard.net/2.0/in-depth/architecture.md) - [How do VPN statistics work](https://docs.defguard.net/2.0/in-depth/architecture/how-do-vpn-statistics-work.md) - [Security concepts](https://docs.defguard.net/2.0/in-depth/architecture/security-concepts.md) - [MFA Architecture](https://docs.defguard.net/2.0/in-depth/architecture/architecture.md) - [Architecture Decision Records](https://docs.defguard.net/2.0/in-depth/architecture-decision-records.md): What are Defguard's Architecture Decision Records? - [2.0](https://docs.defguard.net/2.0/in-depth/architecture-decision-records/2.0.md) - [1.6](https://docs.defguard.net/2.0/in-depth/architecture-decision-records/1.6.md) - [1.5](https://docs.defguard.net/2.0/in-depth/architecture-decision-records/1.5.md) - [1.4](https://docs.defguard.net/2.0/in-depth/architecture-decision-records/1.4.md) - [1.3](https://docs.defguard.net/2.0/in-depth/architecture-decision-records/1.3.md) - [Pre-1.3](https://docs.defguard.net/2.0/in-depth/architecture-decision-records/pre-1.3.md) - [Client application feature compatibility](https://docs.defguard.net/2.0/in-depth/client-application-feature-compatibility.md) - [Defguard Open Organisation](https://docs.defguard.net/2.0/in-depth/defguard-open-organisation.md) - [Product Development Procedure](https://docs.defguard.net/2.0/in-depth/defguard-open-organisation/product-development-procedure.md) - [Roadmap](https://docs.defguard.net/2.0/in-depth/defguard-open-organisation/roadmap.md): This is a high-level project roadmap of planned features. - [BoringTun](https://docs.defguard.net/2.0/in-depth/boringtun.md) - [Contributing](https://docs.defguard.net/2.0/for-developers/contributing.md) - [Environment setup](https://docs.defguard.net/2.0/for-developers/dev-env-setup.md) - [Translations (core/web)](https://docs.defguard.net/2.0/for-developers/dev-env-setup/translations-web.md) - [Switching language](https://docs.defguard.net/2.0/for-developers/dev-env-setup/translations-web/switching-language.md) - [Adding translations](https://docs.defguard.net/2.0/for-developers/dev-env-setup/translations-web/adding-translations.md) - [Translations (client)](https://docs.defguard.net/2.0/for-developers/dev-env-setup/translations-client.md) - [Adding translations](https://docs.defguard.net/2.0/for-developers/dev-env-setup/translations-client/adding-translations.md) - [REST API](https://docs.defguard.net/2.0/for-developers/rest-api.md) - [Core](https://docs.defguard.net/2.0/for-developers/rest-api/core.md) - [System](https://docs.defguard.net/2.0/for-developers/rest-api/core/system.md) - [Authorize a request forwarded by a reverse proxy](https://docs.defguard.net/2.0/for-developers/rest-api/core/system/authorize-a-request-forwarded-by-a-reverse-proxy.md) - [Check instance health](https://docs.defguard.net/2.0/for-developers/rest-api/core/system/check-instance-health.md) - [Get information about this defguard instance](https://docs.defguard.net/2.0/for-developers/rest-api/core/system/get-information-about-this-defguard-instance.md) - [List connected components whose version is incompatible with this Core](https://docs.defguard.net/2.0/for-developers/rest-api/core/system/list-connected-components-whose-version-is-incompatible-with-this-core.md) - [Check whether an email address or username is already taken](https://docs.defguard.net/2.0/for-developers/rest-api/core/system/check-whether-an-email-address-or-username-is-already-taken.md) - [Get information about the current session](https://docs.defguard.net/2.0/for-developers/rest-api/core/system/get-information-about-the-current-session.md) - [Get information about a newer defguard release, if any](https://docs.defguard.net/2.0/for-developers/rest-api/core/system/get-information-about-a-newer-defguard-release-if-any.md) - [Auth](https://docs.defguard.net/2.0/for-developers/rest-api/core/auth.md) - [Authenticate a user](https://docs.defguard.net/2.0/for-developers/rest-api/core/auth/authenticate-a-user.md) - [Send an email MFA code](https://docs.defguard.net/2.0/for-developers/rest-api/core/auth/send-an-email-mfa-code.md) - [Enable email MFA](https://docs.defguard.net/2.0/for-developers/rest-api/core/auth/enable-email-mfa.md) - [Start email MFA setup](https://docs.defguard.net/2.0/for-developers/rest-api/core/auth/start-email-mfa-setup.md) - [Verify an email MFA code](https://docs.defguard.net/2.0/for-developers/rest-api/core/auth/verify-an-email-mfa-code.md) - [Log out and clear the session cookie](https://docs.defguard.net/2.0/for-developers/rest-api/core/auth/log-out-and-clear-the-session-cookie.md) - [Enable MFA](https://docs.defguard.net/2.0/for-developers/rest-api/core/auth/enable-mfa.md) - [Disable MFA](https://docs.defguard.net/2.0/for-developers/rest-api/core/auth/disable-mfa.md) - [Authenticate with a recovery code](https://docs.defguard.net/2.0/for-developers/rest-api/core/auth/authenticate-with-a-recovery-code.md) - [Enable TOTP](https://docs.defguard.net/2.0/for-developers/rest-api/core/auth/enable-totp.md) - [Generate a new TOTP secret](https://docs.defguard.net/2.0/for-developers/rest-api/core/auth/generate-a-new-totp-secret.md) - [Verify a TOTP code](https://docs.defguard.net/2.0/for-developers/rest-api/core/auth/verify-a-totp-code.md) - [Finish WebAuthn authentication](https://docs.defguard.net/2.0/for-developers/rest-api/core/auth/finish-webauthn-authentication.md) - [Finish WebAuthn registration](https://docs.defguard.net/2.0/for-developers/rest-api/core/auth/finish-webauthn-registration.md) - [Start WebAuthn registration](https://docs.defguard.net/2.0/for-developers/rest-api/core/auth/start-webauthn-registration.md) - [Start WebAuthn authentication](https://docs.defguard.net/2.0/for-developers/rest-api/core/auth/start-webauthn-authentication.md) - [User](https://docs.defguard.net/2.0/for-developers/rest-api/core/user.md) - [Get the currently authenticated user](https://docs.defguard.net/2.0/for-developers/rest-api/core/user/get-the-currently-authenticated-user.md) - [List users](https://docs.defguard.net/2.0/for-developers/rest-api/core/user/list-users.md) - [Create a user](https://docs.defguard.net/2.0/for-developers/rest-api/core/user/create-a-user.md) - [Check whether a username is available](https://docs.defguard.net/2.0/for-developers/rest-api/core/user/check-whether-a-username-is-available.md) - [Bulk delete users](https://docs.defguard.net/2.0/for-developers/rest-api/core/user/bulk-delete-users.md) - [Bulk disable users](https://docs.defguard.net/2.0/for-developers/rest-api/core/user/bulk-disable-users.md) - [Bulk enable users](https://docs.defguard.net/2.0/for-developers/rest-api/core/user/bulk-enable-users.md) - [Bulk start user enrollment](https://docs.defguard.net/2.0/for-developers/rest-api/core/user/bulk-start-user-enrollment.md) - [Change your own password](https://docs.defguard.net/2.0/for-developers/rest-api/core/user/change-your-own-password.md) - [Get a user](https://docs.defguard.net/2.0/for-developers/rest-api/core/user/get-a-user.md) - [Update a user](https://docs.defguard.net/2.0/for-developers/rest-api/core/user/update-a-user.md) - [Delete a user](https://docs.defguard.net/2.0/for-developers/rest-api/core/user/delete-a-user.md) - [Disable email MFA of a user](https://docs.defguard.net/2.0/for-developers/rest-api/core/user/disable-email-mfa-of-a-user.md) - [Disable MFA of a user](https://docs.defguard.net/2.0/for-developers/rest-api/core/user/disable-mfa-of-a-user.md) - [Delete an authorized OAuth2 application of a user](https://docs.defguard.net/2.0/for-developers/rest-api/core/user/delete-an-authorized-oauth2-application-of-a-user.md) - [Change the password of a user](https://docs.defguard.net/2.0/for-developers/rest-api/core/user/change-the-password-of-a-user.md) - [Send a password reset email to a user](https://docs.defguard.net/2.0/for-developers/rest-api/core/user/send-a-password-reset-email-to-a-user.md) - [Delete a security key of a user](https://docs.defguard.net/2.0/for-developers/rest-api/core/user/delete-a-security-key-of-a-user.md) - [Start remote desktop configuration](https://docs.defguard.net/2.0/for-developers/rest-api/core/user/start-remote-desktop-configuration.md) - [Start enrollment for a user](https://docs.defguard.net/2.0/for-developers/rest-api/core/user/start-enrollment-for-a-user.md) - [Disable TOTP of a user](https://docs.defguard.net/2.0/for-developers/rest-api/core/user/disable-totp-of-a-user.md) - [Group](https://docs.defguard.net/2.0/for-developers/rest-api/core/group.md) - [List group names](https://docs.defguard.net/2.0/for-developers/rest-api/core/group/list-group-names.md) - [Create a group](https://docs.defguard.net/2.0/for-developers/rest-api/core/group/create-a-group.md) - [List groups with their details](https://docs.defguard.net/2.0/for-developers/rest-api/core/group/list-groups-with-their-details.md) - [Get a group](https://docs.defguard.net/2.0/for-developers/rest-api/core/group/get-a-group.md) - [Add a member to a group](https://docs.defguard.net/2.0/for-developers/rest-api/core/group/add-a-member-to-a-group.md) - [Update a group](https://docs.defguard.net/2.0/for-developers/rest-api/core/group/update-a-group.md) - [Delete a group](https://docs.defguard.net/2.0/for-developers/rest-api/core/group/delete-a-group.md) - [Remove a member from a group](https://docs.defguard.net/2.0/for-developers/rest-api/core/group/remove-a-member-from-a-group.md) - [Assign multiple users to multiple groups](https://docs.defguard.net/2.0/for-developers/rest-api/core/group/assign-multiple-users-to-multiple-groups.md) - [Device](https://docs.defguard.net/2.0/for-developers/rest-api/core/device.md) - [List devices](https://docs.defguard.net/2.0/for-developers/rest-api/core/device/list-devices.md) - [List the devices of a user](https://docs.defguard.net/2.0/for-developers/rest-api/core/device/list-the-devices-of-a-user.md) - [Get a device](https://docs.defguard.net/2.0/for-developers/rest-api/core/device/get-a-device.md) - [Add a device for a user](https://docs.defguard.net/2.0/for-developers/rest-api/core/device/add-a-device-for-a-user.md) - [Update a device](https://docs.defguard.net/2.0/for-developers/rest-api/core/device/update-a-device.md) - [Delete a device](https://docs.defguard.net/2.0/for-developers/rest-api/core/device/delete-a-device.md) - [Get the WireGuard configuration of a user device](https://docs.defguard.net/2.0/for-developers/rest-api/core/device/get-the-wireguard-configuration-of-a-user-device.md) - [Network Device](https://docs.defguard.net/2.0/for-developers/rest-api/core/network-device.md) - [List network devices](https://docs.defguard.net/2.0/for-developers/rest-api/core/network-device/list-network-devices.md) - [Create a network device](https://docs.defguard.net/2.0/for-developers/rest-api/core/network-device/create-a-network-device.md) - [Suggest free IP addresses in a location](https://docs.defguard.net/2.0/for-developers/rest-api/core/network-device/suggest-free-ip-addresses-in-a-location.md) - [Check whether the given IP addresses are free in a location](https://docs.defguard.net/2.0/for-developers/rest-api/core/network-device/check-whether-the-given-ip-addresses-are-free-in-a-location.md) - [Start CLI setup for a new network device](https://docs.defguard.net/2.0/for-developers/rest-api/core/network-device/start-cli-setup-for-a-new-network-device.md) - [Start CLI setup for an existing network device](https://docs.defguard.net/2.0/for-developers/rest-api/core/network-device/start-cli-setup-for-an-existing-network-device.md) - [Get a network device](https://docs.defguard.net/2.0/for-developers/rest-api/core/network-device/get-a-network-device.md) - [Update a network device](https://docs.defguard.net/2.0/for-developers/rest-api/core/network-device/update-a-network-device.md) - [Get the WireGuard configuration of a network device](https://docs.defguard.net/2.0/for-developers/rest-api/core/network-device/get-the-wireguard-configuration-of-a-network-device.md) - [Static IP](https://docs.defguard.net/2.0/for-developers/rest-api/core/static-ip.md) - [List the IP addresses of all devices of a user, grouped by location](https://docs.defguard.net/2.0/for-developers/rest-api/core/static-ip/list-the-ip-addresses-of-all-devices-of-a-user-grouped-by-location.md) - [Assign static IP addresses to user devices](https://docs.defguard.net/2.0/for-developers/rest-api/core/static-ip/assign-static-ip-addresses-to-user-devices.md) - [Check whether a single static IP assignment would be valid](https://docs.defguard.net/2.0/for-developers/rest-api/core/static-ip/check-whether-a-single-static-ip-assignment-would-be-valid.md) - [List the IP addresses of a user device, grouped by location](https://docs.defguard.net/2.0/for-developers/rest-api/core/static-ip/list-the-ip-addresses-of-a-user-device-grouped-by-location.md) - [Network](https://docs.defguard.net/2.0/for-developers/rest-api/core/network.md) - [List networks](https://docs.defguard.net/2.0/for-developers/rest-api/core/network/list-networks.md) - [Create a network](https://docs.defguard.net/2.0/for-developers/rest-api/core/network/create-a-network.md) - [Count networks](https://docs.defguard.net/2.0/for-developers/rest-api/core/network/count-networks.md) - [List networks reduced to their ID and name](https://docs.defguard.net/2.0/for-developers/rest-api/core/network/list-networks-reduced-to-their-id-and-name.md) - [Import a network from a WireGuard configuration file](https://docs.defguard.net/2.0/for-developers/rest-api/core/network/import-a-network-from-a-wireguard-configuration-file.md) - [Get a network](https://docs.defguard.net/2.0/for-developers/rest-api/core/network/get-a-network.md) - [Update a network](https://docs.defguard.net/2.0/for-developers/rest-api/core/network/update-a-network.md) - [Delete a network](https://docs.defguard.net/2.0/for-developers/rest-api/core/network/delete-a-network.md) - [Get the WireGuard configuration of a device in a location](https://docs.defguard.net/2.0/for-developers/rest-api/core/network/get-the-wireguard-configuration-of-a-device-in-a-location.md) - [Assign imported devices to users](https://docs.defguard.net/2.0/for-developers/rest-api/core/network/assign-imported-devices-to-users.md) - [Location Stats](https://docs.defguard.net/2.0/for-developers/rest-api/core/location-stats.md) - [Get traffic statistics for all locations](https://docs.defguard.net/2.0/for-developers/rest-api/core/location-stats/get-traffic-statistics-for-all-locations.md) - [List connected network devices in a location](https://docs.defguard.net/2.0/for-developers/rest-api/core/location-stats/list-connected-network-devices-in-a-location.md) - [List connected users in a location](https://docs.defguard.net/2.0/for-developers/rest-api/core/location-stats/list-connected-users-in-a-location.md) - [List the connected devices of a user in a location](https://docs.defguard.net/2.0/for-developers/rest-api/core/location-stats/list-the-connected-devices-of-a-user-in-a-location.md) - [Get traffic statistics for a location](https://docs.defguard.net/2.0/for-developers/rest-api/core/location-stats/get-traffic-statistics-for-a-location.md) - [Gateway](https://docs.defguard.net/2.0/for-developers/rest-api/core/gateway.md) - [List gateways in all locations](https://docs.defguard.net/2.0/for-developers/rest-api/core/gateway/list-gateways-in-all-locations.md) - [Get a gateway](https://docs.defguard.net/2.0/for-developers/rest-api/core/gateway/get-a-gateway.md) - [Rename a gateway, or enable or disable it](https://docs.defguard.net/2.0/for-developers/rest-api/core/gateway/rename-a-gateway-or-enable-or-disable-it.md) - [Delete a gateway](https://docs.defguard.net/2.0/for-developers/rest-api/core/gateway/delete-a-gateway.md) - [Get the state of gateways in all locations](https://docs.defguard.net/2.0/for-developers/rest-api/core/gateway/get-the-state-of-gateways-in-all-locations.md) - [Get the state of gateways in a location](https://docs.defguard.net/2.0/for-developers/rest-api/core/gateway/get-the-state-of-gateways-in-a-location.md) - [Adopt a gateway in a location](https://docs.defguard.net/2.0/for-developers/rest-api/core/gateway/adopt-a-gateway-in-a-location.md) - [Stream the progress of gateway TLS setup](https://docs.defguard.net/2.0/for-developers/rest-api/core/gateway/stream-the-progress-of-gateway-tls-setup.md) - [Proxy](https://docs.defguard.net/2.0/for-developers/rest-api/core/proxy.md) - [List edge instances](https://docs.defguard.net/2.0/for-developers/rest-api/core/proxy/list-edge-instances.md) - [Stream the progress of Let's Encrypt certificate issuance on the edge](https://docs.defguard.net/2.0/for-developers/rest-api/core/proxy/stream-the-progress-of-lets-encrypt-certificate-issuance-on-the-edge.md) - [Stream the progress of edge (proxy) TLS setup](https://docs.defguard.net/2.0/for-developers/rest-api/core/proxy/stream-the-progress-of-edge-proxy-tls-setup.md) - [Get an edge instance](https://docs.defguard.net/2.0/for-developers/rest-api/core/proxy/get-an-edge-instance.md) - [Rename an edge instance, or enable or disable it](https://docs.defguard.net/2.0/for-developers/rest-api/core/proxy/rename-an-edge-instance-or-enable-or-disable-it.md) - [Delete an edge instance](https://docs.defguard.net/2.0/for-developers/rest-api/core/proxy/delete-an-edge-instance.md) - [Certificates](https://docs.defguard.net/2.0/for-developers/rest-api/core/certificates.md) - [Get the certificate of the internal certificate authority](https://docs.defguard.net/2.0/for-developers/rest-api/core/certificates/get-the-certificate-of-the-internal-certificate-authority.md) - [Get the certificates currently used by core and edge](https://docs.defguard.net/2.0/for-developers/rest-api/core/certificates/get-the-certificates-currently-used-by-core-and-edge.md) - [Set up the certificate for the internal (core) URL](https://docs.defguard.net/2.0/for-developers/rest-api/core/certificates/set-up-the-certificate-for-the-internal-core-url.md) - [Set up the certificate for the external (edge) URL](https://docs.defguard.net/2.0/for-developers/rest-api/core/certificates/set-up-the-certificate-for-the-external-edge-url.md) - [SSH Key](https://docs.defguard.net/2.0/for-developers/rest-api/core/ssh-key.md) - [Get SSH authorized keys in the \`authorized\_keys\` file format](https://docs.defguard.net/2.0/for-developers/rest-api/core/ssh-key/get-ssh-authorized-keys-in-the-authorized_keys-file-format.md) - [List SSH and GPG authentication keys of a user](https://docs.defguard.net/2.0/for-developers/rest-api/core/ssh-key/list-ssh-and-gpg-authentication-keys-of-a-user.md) - [Add an SSH or GPG authentication key to a user](https://docs.defguard.net/2.0/for-developers/rest-api/core/ssh-key/add-an-ssh-or-gpg-authentication-key-to-a-user.md) - [Delete an authentication key of a user](https://docs.defguard.net/2.0/for-developers/rest-api/core/ssh-key/delete-an-authentication-key-of-a-user.md) - [Rename an authentication key of a user](https://docs.defguard.net/2.0/for-developers/rest-api/core/ssh-key/rename-an-authentication-key-of-a-user.md) - [API Token](https://docs.defguard.net/2.0/for-developers/rest-api/core/api-token.md) - [List API tokens of a user](https://docs.defguard.net/2.0/for-developers/rest-api/core/api-token/list-api-tokens-of-a-user.md) - [Create an API token for a user](https://docs.defguard.net/2.0/for-developers/rest-api/core/api-token/create-an-api-token-for-a-user.md) - [Delete an API token of a user](https://docs.defguard.net/2.0/for-developers/rest-api/core/api-token/delete-an-api-token-of-a-user.md) - [Rename an API token of a user](https://docs.defguard.net/2.0/for-developers/rest-api/core/api-token/rename-an-api-token-of-a-user.md) - [Webhook](https://docs.defguard.net/2.0/for-developers/rest-api/core/webhook.md) - [List webhooks](https://docs.defguard.net/2.0/for-developers/rest-api/core/webhook/list-webhooks.md) - [Create a webhook](https://docs.defguard.net/2.0/for-developers/rest-api/core/webhook/create-a-webhook.md) - [Get a webhook](https://docs.defguard.net/2.0/for-developers/rest-api/core/webhook/get-a-webhook.md) - [Enable or disable a webhook](https://docs.defguard.net/2.0/for-developers/rest-api/core/webhook/enable-or-disable-a-webhook.md) - [Update a webhook](https://docs.defguard.net/2.0/for-developers/rest-api/core/webhook/update-a-webhook.md) - [Delete a webhook](https://docs.defguard.net/2.0/for-developers/rest-api/core/webhook/delete-a-webhook.md) - [Settings](https://docs.defguard.net/2.0/for-developers/rest-api/core/settings.md) - [Get instance settings](https://docs.defguard.net/2.0/for-developers/rest-api/core/settings/get-instance-settings.md) - [Replace instance settings](https://docs.defguard.net/2.0/for-developers/rest-api/core/settings/replace-instance-settings.md) - [Update selected instance settings](https://docs.defguard.net/2.0/for-developers/rest-api/core/settings/update-selected-instance-settings.md) - [Restore default branding settings](https://docs.defguard.net/2.0/for-developers/rest-api/core/settings/restore-default-branding-settings.md) - [Get enterprise settings](https://docs.defguard.net/2.0/for-developers/rest-api/core/settings/get-enterprise-settings.md) - [Update selected enterprise settings](https://docs.defguard.net/2.0/for-developers/rest-api/core/settings/update-selected-enterprise-settings.md) - [Get settings required to render the web UI](https://docs.defguard.net/2.0/for-developers/rest-api/core/settings/get-settings-required-to-render-the-web-ui.md) - [LDAP](https://docs.defguard.net/2.0/for-developers/rest-api/core/ldap.md) - [Test the LDAP connection using the currently saved settings](https://docs.defguard.net/2.0/for-developers/rest-api/core/ldap/test-the-ldap-connection-using-the-currently-saved-settings.md) - [Activity Log](https://docs.defguard.net/2.0/for-developers/rest-api/core/activity-log.md) - [List activity log events](https://docs.defguard.net/2.0/for-developers/rest-api/core/activity-log/list-activity-log-events.md) - [List activity log streams](https://docs.defguard.net/2.0/for-developers/rest-api/core/activity-log/list-activity-log-streams.md) - [Create an activity log stream](https://docs.defguard.net/2.0/for-developers/rest-api/core/activity-log/create-an-activity-log-stream.md) - [Update an activity log stream](https://docs.defguard.net/2.0/for-developers/rest-api/core/activity-log/update-an-activity-log-stream.md) - [Delete an activity log stream](https://docs.defguard.net/2.0/for-developers/rest-api/core/activity-log/delete-an-activity-log-stream.md) - [ACL](https://docs.defguard.net/2.0/for-developers/rest-api/core/acl.md) - [List ACL aliases](https://docs.defguard.net/2.0/for-developers/rest-api/core/acl/list-acl-aliases.md) - [Create an ACL alias](https://docs.defguard.net/2.0/for-developers/rest-api/core/acl/create-an-acl-alias.md) - [Apply ACL aliases](https://docs.defguard.net/2.0/for-developers/rest-api/core/acl/apply-acl-aliases.md) - [Count ACL aliases by state](https://docs.defguard.net/2.0/for-developers/rest-api/core/acl/count-acl-aliases-by-state.md) - [Get an ACL alias](https://docs.defguard.net/2.0/for-developers/rest-api/core/acl/get-an-acl-alias.md) - [Update an ACL alias](https://docs.defguard.net/2.0/for-developers/rest-api/core/acl/update-an-acl-alias.md) - [Delete an ACL alias](https://docs.defguard.net/2.0/for-developers/rest-api/core/acl/delete-an-acl-alias.md) - [List ACL destinations](https://docs.defguard.net/2.0/for-developers/rest-api/core/acl/list-acl-destinations.md) - [Create an ACL destination](https://docs.defguard.net/2.0/for-developers/rest-api/core/acl/create-an-acl-destination.md) - [Apply ACL destinations](https://docs.defguard.net/2.0/for-developers/rest-api/core/acl/apply-acl-destinations.md) - [Count ACL destinations by state](https://docs.defguard.net/2.0/for-developers/rest-api/core/acl/count-acl-destinations-by-state.md) - [Get an ACL destination](https://docs.defguard.net/2.0/for-developers/rest-api/core/acl/get-an-acl-destination.md) - [Update an ACL destination](https://docs.defguard.net/2.0/for-developers/rest-api/core/acl/update-an-acl-destination.md) - [Delete an ACL destination](https://docs.defguard.net/2.0/for-developers/rest-api/core/acl/delete-an-acl-destination.md) - [List ACL rules](https://docs.defguard.net/2.0/for-developers/rest-api/core/acl/list-acl-rules.md) - [Create an ACL rule](https://docs.defguard.net/2.0/for-developers/rest-api/core/acl/create-an-acl-rule.md) - [Apply ACL rules](https://docs.defguard.net/2.0/for-developers/rest-api/core/acl/apply-acl-rules.md) - [Count ACL rules by state](https://docs.defguard.net/2.0/for-developers/rest-api/core/acl/count-acl-rules-by-state.md) - [Get an ACL rule](https://docs.defguard.net/2.0/for-developers/rest-api/core/acl/get-an-acl-rule.md) - [Update an ACL rule](https://docs.defguard.net/2.0/for-developers/rest-api/core/acl/update-an-acl-rule.md) - [Delete an ACL rule](https://docs.defguard.net/2.0/for-developers/rest-api/core/acl/delete-an-acl-rule.md) - [SNAT](https://docs.defguard.net/2.0/for-developers/rest-api/core/snat.md) - [List SNAT bindings in a location](https://docs.defguard.net/2.0/for-developers/rest-api/core/snat/list-snat-bindings-in-a-location.md) - [Create a SNAT binding for a user in a location](https://docs.defguard.net/2.0/for-developers/rest-api/core/snat/create-a-snat-binding-for-a-user-in-a-location.md) - [Update a SNAT binding](https://docs.defguard.net/2.0/for-developers/rest-api/core/snat/update-a-snat-binding.md) - [Delete a SNAT binding](https://docs.defguard.net/2.0/for-developers/rest-api/core/snat/delete-a-snat-binding.md) - [Open ID](https://docs.defguard.net/2.0/for-developers/rest-api/core/open-id.md) - [Start login through the external OpenID provider](https://docs.defguard.net/2.0/for-developers/rest-api/core/open-id/start-login-through-the-external-openid-provider.md) - [Finish login through the external OpenID provider](https://docs.defguard.net/2.0/for-developers/rest-api/core/open-id/finish-login-through-the-external-openid-provider.md) - [List OpenID providers](https://docs.defguard.net/2.0/for-developers/rest-api/core/open-id/list-openid-providers.md) - [Create an OpenID provider](https://docs.defguard.net/2.0/for-developers/rest-api/core/open-id/create-an-openid-provider.md) - [Get the current OpenID provider](https://docs.defguard.net/2.0/for-developers/rest-api/core/open-id/get-the-current-openid-provider.md) - [Get an OpenID provider](https://docs.defguard.net/2.0/for-developers/rest-api/core/open-id/get-an-openid-provider.md) - [Update an OpenID provider](https://docs.defguard.net/2.0/for-developers/rest-api/core/open-id/update-an-openid-provider.md) - [Delete an OpenID provider](https://docs.defguard.net/2.0/for-developers/rest-api/core/open-id/delete-an-openid-provider.md) - [Test the directory sync connection of the current OpenID provider](https://docs.defguard.net/2.0/for-developers/rest-api/core/open-id/test-the-directory-sync-connection-of-the-current-openid-provider.md) - [OAuth2](https://docs.defguard.net/2.0/for-developers/rest-api/core/oauth2.md) - [Get the OpenID Connect discovery document](https://docs.defguard.net/2.0/for-developers/rest-api/core/oauth2/get-the-openid-connect-discovery-document.md) - [List OAuth2/OpenID client applications](https://docs.defguard.net/2.0/for-developers/rest-api/core/oauth2/list-oauth2-openid-client-applications.md) - [Create an OAuth2/OpenID client application](https://docs.defguard.net/2.0/for-developers/rest-api/core/oauth2/create-an-oauth2-openid-client-application.md) - [Start the OAuth2 authorization flow](https://docs.defguard.net/2.0/for-developers/rest-api/core/oauth2/start-the-oauth2-authorization-flow.md) - [Finish the OAuth2 authorization flow after user consent](https://docs.defguard.net/2.0/for-developers/rest-api/core/oauth2/finish-the-oauth2-authorization-flow-after-user-consent.md) - [Get the JSON Web Key Set used to verify ID token signatures](https://docs.defguard.net/2.0/for-developers/rest-api/core/oauth2/get-the-json-web-key-set-used-to-verify-id-token-signatures.md) - [Exchange an authorization code or a refresh token for tokens](https://docs.defguard.net/2.0/for-developers/rest-api/core/oauth2/exchange-an-authorization-code-or-a-refresh-token-for-tokens.md) - [Get the claims of the authenticated user](https://docs.defguard.net/2.0/for-developers/rest-api/core/oauth2/get-the-claims-of-the-authenticated-user.md) - [Get an OAuth2/OpenID client application](https://docs.defguard.net/2.0/for-developers/rest-api/core/oauth2/get-an-oauth2-openid-client-application.md) - [Enable or disable an OAuth2/OpenID client application](https://docs.defguard.net/2.0/for-developers/rest-api/core/oauth2/enable-or-disable-an-oauth2-openid-client-application.md) - [Update an OAuth2/OpenID client application](https://docs.defguard.net/2.0/for-developers/rest-api/core/oauth2/update-an-oauth2-openid-client-application.md) - [Delete an OAuth2/OpenID client application](https://docs.defguard.net/2.0/for-developers/rest-api/core/oauth2/delete-an-oauth2-openid-client-application.md) - [Support](https://docs.defguard.net/2.0/for-developers/rest-api/core/support.md) - [Send the support data bundle to the defguard support address](https://docs.defguard.net/2.0/for-developers/rest-api/core/support/send-the-support-data-bundle-to-the-defguard-support-address.md) - [Send a test email to verify the SMTP configuration](https://docs.defguard.net/2.0/for-developers/rest-api/core/support/send-a-test-email-to-verify-the-smtp-configuration.md) - [Get instance configuration for support purposes](https://docs.defguard.net/2.0/for-developers/rest-api/core/support/get-instance-configuration-for-support-purposes.md) - [Get recent instance logs for support purposes](https://docs.defguard.net/2.0/for-developers/rest-api/core/support/get-recent-instance-logs-for-support-purposes.md) - [License](https://docs.defguard.net/2.0/for-developers/rest-api/core/license.md) - [Get information about the enterprise license](https://docs.defguard.net/2.0/for-developers/rest-api/core/license/get-information-about-the-enterprise-license.md) - [Check a license key and return its limits](https://docs.defguard.net/2.0/for-developers/rest-api/core/license/check-a-license-key-and-return-its-limits.md) - [Models](https://docs.defguard.net/2.0/for-developers/rest-api/core/models.md) ## 2.1 - [Welcome](https://docs.defguard.net/readme.md) - [Getting help](https://docs.defguard.net/support.md) - [About Defguard](https://docs.defguard.net/about/about-defguard.md) - [Features overview](https://docs.defguard.net/about/features-overview.md) - [One-line install script](https://docs.defguard.net/getting-started/one-line-install.md) - [MTU settings](https://docs.defguard.net/features/mtu-settings.md) - [Overview](https://docs.defguard.net/features/overview.md) - [Zero-Trust VPN with 2FA/MFA](https://docs.defguard.net/features/wireguard.md) - [Create/Manage VPN Location](https://docs.defguard.net/features/wireguard/create-your-vpn-network.md) - [Split Tunnel Configuration](https://docs.defguard.net/features/wireguard/create-your-vpn-network/split-tunnel-configuration.md) - [Network overview](https://docs.defguard.net/features/wireguard/network-overview.md) - [Multi-Factor Authentication (MFA/2FA)](https://docs.defguard.net/features/wireguard/multi-factor-authentication-mfa-2fa.md): Defguard is the sole VPN solution that genuinely implements Multi-Factor Authentication (MFA) before a WireGuard® VPN connection is established, significantly enhancing security against cyberattacks. - [MFA flows and methods](https://docs.defguard.net/features/wireguard/multi-factor-authentication-mfa-2fa/mfa-flows-and-methods.md) - [Configuring MFA for a location](https://docs.defguard.net/features/wireguard/multi-factor-authentication-mfa-2fa/configuring-mfa-for-a-location.md) - [Adding client device](https://docs.defguard.net/features/wireguard/remote-desktop-activation.md): How to manually generate token for user as an administrator. - [Client behaviour customization](https://docs.defguard.net/features/wireguard/behavior-customization.md) - [DNS and domains](https://docs.defguard.net/features/wireguard/dns-and-domains.md) - [Executing custom gateway commands](https://docs.defguard.net/features/wireguard/executing-custom-gateway-commands.md) - [Remote user enrollment](https://docs.defguard.net/features/remote-user-enrollment.md) - [User onboarding after enrollment](https://docs.defguard.net/features/remote-user-enrollment/user-onboarding-after-enrollment.md) - [Automatic (real time) desktop client configuration & sync](https://docs.defguard.net/features/remote-user-enrollment/automatic-real-time-desktop-client-configuration.md) - [Internal SSO (OpenID Connect Provider)](https://docs.defguard.net/features/openid-connect.md) - [Portainer](https://docs.defguard.net/features/openid-connect/portainer.md) - [Grafana setup](https://docs.defguard.net/features/openid-connect/grafana-setup.md) - [Proxmox](https://docs.defguard.net/features/openid-connect/proxmox.md) - [Matrix / Synapse](https://docs.defguard.net/features/openid-connect/proxmox-1.md) - [Django](https://docs.defguard.net/features/openid-connect/django.md) - [MinIO](https://docs.defguard.net/features/openid-connect/minio.md) - [Vault](https://docs.defguard.net/features/openid-connect/vault.md) - [External SSO/OpenID providers](https://docs.defguard.net/features/external-openid-providers.md) - [Google](https://docs.defguard.net/features/external-openid-providers/google.md) - [Microsoft](https://docs.defguard.net/features/external-openid-providers/microsoft.md) - [Okta](https://docs.defguard.net/features/external-openid-providers/okta.md) - [JumpCloud](https://docs.defguard.net/features/external-openid-providers/jumpcloud.md) - [Keycloak](https://docs.defguard.net/features/external-openid-providers/keycloak.md) - [Zitadel](https://docs.defguard.net/features/external-openid-providers/zitadel.md) - [Custom](https://docs.defguard.net/features/external-openid-providers/custom.md) - [External OIDC secure enrollment](https://docs.defguard.net/features/external-openid-providers/external-oidc-secure-enrollment.md) - [LDAP and Active Directory integration](https://docs.defguard.net/features/ldap-and-active-directory-integration.md) - [LDAP Configuration](https://docs.defguard.net/features/ldap-and-active-directory-integration/configuration.md): How to configure the connection between a Defguard instance and LDAP. - [Example configurations](https://docs.defguard.net/features/ldap-and-active-directory-integration/examples.md) - [Settings table](https://docs.defguard.net/features/ldap-and-active-directory-integration/settings-table.md): A list describing the LDAP settings available on the settings page. - [Two-way LDAP and Active Directory synchronization](https://docs.defguard.net/features/ldap-and-active-directory-integration/two-way-ldap-and-active-directory-synchronization.md) - [Firewall](https://docs.defguard.net/features/firewall.md) - [Aliases and Destinations](https://docs.defguard.net/features/firewall/aliases-and-destinations.md) - [Troubleshooting](https://docs.defguard.net/features/firewall/troubleshooting.md) - [Implementation Details](https://docs.defguard.net/features/firewall/firewall-internals.md) - [Network devices](https://docs.defguard.net/features/network-devices.md) - [Activity & Audit logs](https://docs.defguard.net/features/activity-log.md) - [Audit Log Streaming to SIEM systems](https://docs.defguard.net/features/activity-log/activity-log-streaming.md): This feature is designed to help teams centralize visibility into user actions, security events, and system behaviour by integrating with tools they already use for monitoring and incident response. - [Supported SIEM systems integrations](https://docs.defguard.net/features/activity-log/activity-log-streaming/activity-log-integrations.md): List of supported services to stream activity logs into. - [Vector integration guide](https://docs.defguard.net/features/activity-log/activity-log-streaming/activity-log-integrations/vector-integration-guide.md): How to stream activity logs to vector. - [Logstash integration guide](https://docs.defguard.net/features/activity-log/activity-log-streaming/activity-log-integrations/logstash-integration-guide.md): How to stream activity logs to logstash. - [Notifications](https://docs.defguard.net/features/notifications.md) - [Email notifications](https://docs.defguard.net/features/notifications/setting-up-smtp-for-email-notifications.md) - [Gateway notifications](https://docs.defguard.net/features/notifications/gateway-notifications.md) - [New version notifications](https://docs.defguard.net/features/notifications/new-version-notifications.md) - [Integrations](https://docs.defguard.net/features/integrations.md) - [Webhooks](https://docs.defguard.net/features/integrations/webhooks.md) - [REST API](https://docs.defguard.net/features/integrations/api-tokens.md) - [SSH Authentication](https://docs.defguard.net/features/ssh-authentication.md) - [Forward auth](https://docs.defguard.net/features/forward-auth.md) - [User SNAT bindings](https://docs.defguard.net/features/user-snat-bindings.md) - [Service locations](https://docs.defguard.net/features/service-locations.md) - [Desktop client auto-provisioning](https://docs.defguard.net/features/desktop-client-auto-provisioning.md) - [Auto-provisioning in Windows environments](https://docs.defguard.net/features/desktop-client-auto-provisioning/auto-provisioning-in-windows-environments.md) - [On-premise Active Directory](https://docs.defguard.net/features/desktop-client-auto-provisioning/auto-provisioning-in-windows-environments/on-premise-active-directory-environments.md) - [Entra ID](https://docs.defguard.net/features/desktop-client-auto-provisioning/auto-provisioning-in-windows-environments/entra-id-environments.md) - [Generating enrollment tokens with Defguard REST API](https://docs.defguard.net/features/desktop-client-auto-provisioning/generating-enrollment-tokens-with-defguard-rest-api.md) - [Static IP assignment](https://docs.defguard.net/features/static-ip-assignment.md) - [Certificate management](https://docs.defguard.net/features/certificate-management.md) - [Device posture verification](https://docs.defguard.net/features/device-posture-verification.md) - [Managing Defguard via CLI](https://docs.defguard.net/features/managing-defguard-via-cli.md) - [User management](https://docs.defguard.net/features/user-management.md) - [Overview](https://docs.defguard.net/deployment-strategies/overview.md): This documentation will guide you through the process of deploying your Defguard instance. - [Deploying to Production](https://docs.defguard.net/deployment-strategies/deploying-to-production.md) - [Migration guides](https://docs.defguard.net/deployment-strategies/upgrading.md): Notes on upgrading Defguard and its components - [Hardware, OS, network and firewall recommendations](https://docs.defguard.net/deployment-strategies/hardware-os-network-and-firewall-recommendations.md): Before Defguard can be deployed please get familiar with the following recommendations - [Standalone package based installation](https://docs.defguard.net/deployment-strategies/standalone-package-based-installation.md) - [PostgreSQL database](https://docs.defguard.net/deployment-strategies/standalone-package-based-installation/database.md) - [Defguard Core](https://docs.defguard.net/deployment-strategies/standalone-package-based-installation/core.md) - [Defguard Edge](https://docs.defguard.net/deployment-strategies/standalone-package-based-installation/edge.md) - [Defguard Gateway](https://docs.defguard.net/deployment-strategies/standalone-package-based-installation/gateway.md) - [Defguard APT repository](https://docs.defguard.net/deployment-strategies/standalone-package-based-installation/defguard-apt-repository.md) - [Docker Compose](https://docs.defguard.net/deployment-strategies/docker-compose.md) - [Kubernetes](https://docs.defguard.net/deployment-strategies/kubernetes.md) - [Terraform](https://docs.defguard.net/deployment-strategies/terraform.md) - [OVA](https://docs.defguard.net/deployment-strategies/ova.md) - [Amazon Machine Image (AMI)](https://docs.defguard.net/deployment-strategies/amis-and-aws-cloudformation.md) - [Configuring HTTPS using AWS Certificate Manager](https://docs.defguard.net/deployment-strategies/amis-and-aws-cloudformation/configuring-https-using-aws-certificate-manager.md) - [Configuration](https://docs.defguard.net/deployment-strategies/configuration.md) - [Running Gateway on OPNsense firewall](https://docs.defguard.net/deployment-strategies/running-gateway-on-opnsense-firewall.md) - [Running Gateway on VyOS](https://docs.defguard.net/deployment-strategies/running-gateway-on-vyos.md) - [Reverse Proxy configuration using NGINX](https://docs.defguard.net/deployment-strategies/reverse-proxy-configuration-using-nginx.md) - [High Availability and Failover](https://docs.defguard.net/deployment-strategies/high-availability-and-failover.md) - [WireGuard UDP load-balancing](https://docs.defguard.net/deployment-strategies/high-availability-and-failover/wireguard-udp-load-balancing.md) - [Gateway with CARP](https://docs.defguard.net/deployment-strategies/high-availability-and-failover/gateway-with-carp.md) - [Updating and version compatibility](https://docs.defguard.net/deployment-strategies/updating-and-version-compatibility.md) - [Using a userspace WireGuard implementation](https://docs.defguard.net/deployment-strategies/using-a-userspace-wireguard-implementation.md) - [Pre-production and development releases](https://docs.defguard.net/deployment-strategies/pre-production-and-development-releases.md) - [Health check](https://docs.defguard.net/deployment-strategies/health-check.md) - [Production deployment verification guide](https://docs.defguard.net/deployment-strategies/production-deployment-verification-guide.md) - [Linux Kernel WireGuard tuning](https://docs.defguard.net/deployment-strategies/linux-kernel-wireguard-tuning.md): This technical guide addresses WireGuard VPN latency, throughput, resilience, and scalability requirements by tuning Linux kernel parameters (as WireGuard is part of the Linux kernel). - [Programmatic gateway adoption](https://docs.defguard.net/deployment-strategies/programmatic-gateway-adoption.md) - [Gateway/Location VLAN routing](https://docs.defguard.net/deployment-strategies/gateway-location-vlan-routing.md) - [Purchasing and using the license](https://docs.defguard.net/enterprise/license.md) - [License limits](https://docs.defguard.net/enterprise/license-limits.md) - [Overview](https://docs.defguard.net/using-defguard-for-end-users/overwiew.md) - [Mobile Client](https://docs.defguard.net/using-defguard-for-end-users/mobile-client.md) - [Adding new Instance](https://docs.defguard.net/using-defguard-for-end-users/mobile-client/instance-adding.md) - [Connecting to Instance](https://docs.defguard.net/using-defguard-for-end-users/mobile-client/instance-connect.md) - [Managing your Instance](https://docs.defguard.net/using-defguard-for-end-users/mobile-client/instance-manage.md) - [Using Biometry as MFA method](https://docs.defguard.net/using-defguard-for-end-users/mobile-client/using-biometry-as-mfa-method.md) - [Desktop Client](https://docs.defguard.net/using-defguard-for-end-users/desktop-client.md) - [Instance configuration](https://docs.defguard.net/using-defguard-for-end-users/desktop-client/instance-configuration.md): In this guide, you will learn how to add, remove and update Instance in Defguard desktop client. - [Using Multi-Factor Authentication (MFA)](https://docs.defguard.net/using-defguard-for-end-users/desktop-client/using-multi-factor-authentication-mfa.md) - [Configuring MFA methods](https://docs.defguard.net/using-defguard-for-end-users/desktop-client/configuring-mfa-methods.md) - [MTU Setting](https://docs.defguard.net/using-defguard-for-end-users/desktop-client/mtu-setting.md) - [Command-line (defguard-client)](https://docs.defguard.net/using-defguard-for-end-users/desktop-client/command-line-defguard-cli.md) - [Nightly builds](https://docs.defguard.net/using-defguard-for-end-users/desktop-client/nightly-builds.md) - [Other WireGuard® Clients](https://docs.defguard.net/using-defguard-for-end-users/adding-wireguard-devices.md) - [Configuring a device for new VPN Location manually](https://docs.defguard.net/using-defguard-for-end-users/adding-wireguard-devices/configuring-a-device-for-a-new-vpn-location.md) - [Password change / Reset](https://docs.defguard.net/using-defguard-for-end-users/changing-your-password.md) - [Enrollment & Onboarding](https://docs.defguard.net/using-defguard-for-end-users/enrollment.md) - [With internal Defguard SSO](https://docs.defguard.net/using-defguard-for-end-users/enrollment/with-internal-defguard-sso.md) - [With external SSO (Google/Microsoft/Custom)](https://docs.defguard.net/using-defguard-for-end-users/enrollment/with-external-sso-google-microsoft-custom.md) - [Setting up 2FA/MFA](https://docs.defguard.net/using-defguard-for-end-users/setting-up-2fa-mfa.md) - [Resolving Posture Check Failures](https://docs.defguard.net/using-defguard-for-end-users/resolving-posture-check-failures.md) - [Version support policy](https://docs.defguard.net/support-1/version-support-policy.md): This page explains how long each Defguard version receives updates and which versions are currently supported. - [How to submit an issue](https://docs.defguard.net/support-1/how-to-submit-an-issue.md) - [Sending support information](https://docs.defguard.net/support-1/sending-support-information.md) - [Core](https://docs.defguard.net/support-1/sending-support-information/core.md) - [Desktop Client](https://docs.defguard.net/support-1/sending-support-information/desktop-client.md) - [Mobile client](https://docs.defguard.net/support-1/sending-support-information/mobile-client.md) - [Using the Support Portal](https://docs.defguard.net/support-1/using-the-support-portal.md) - [Troubleshooting Guides](https://docs.defguard.net/support-1/troubleshooting-guides.md): Before contacting support, check whether your problem is covered here. - [Core](https://docs.defguard.net/support-1/troubleshooting-guides/core.md) - [h2 protocol error from reverse proxy](https://docs.defguard.net/support-1/troubleshooting-guides/core/h2-protocol-error-from-reverse-proxy.md) - [Unable to sign in with correct credentials](https://docs.defguard.net/support-1/troubleshooting-guides/core/unable-to-sign-in-with-correct-credentials.md) - [User lost access to their 2FA methods](https://docs.defguard.net/support-1/troubleshooting-guides/core/user-lost-access-to-their-2fa-methods.md) - [Enrollment URL Changed](https://docs.defguard.net/support-1/troubleshooting-guides/core/enrollment-url-changed.md) - [Failed to parse duration](https://docs.defguard.net/support-1/troubleshooting-guides/core/failed-to-parse-duration.md) - [Core cannot connect to Gateway or Edge after restart on single-host deployments](https://docs.defguard.net/support-1/troubleshooting-guides/core/core-cannot-connect-to-gateway-or-edge-after-restart-on-single-host-deployments.md) - [Lost access](https://docs.defguard.net/support-1/troubleshooting-guides/core/lost-access.md) - [Desktop Client](https://docs.defguard.net/support-1/troubleshooting-guides/desktop-client.md) - [Unix socket permission error on connect (Linux)](https://docs.defguard.net/support-1/troubleshooting-guides/desktop-client/unix-socket-permission-error-on-connect-linux.md) - [MFA location disconnected after X-time](https://docs.defguard.net/support-1/troubleshooting-guides/desktop-client/mfa-location-disconnected-after-x-time.md) - [High disk usage](https://docs.defguard.net/support-1/troubleshooting-guides/desktop-client/high-disk-usage.md) - [Failed to configure DNS (Linux)](https://docs.defguard.net/support-1/troubleshooting-guides/desktop-client/failed-to-configure-dns-linux.md) - [Failed to parse IP address](https://docs.defguard.net/support-1/troubleshooting-guides/desktop-client/failed-to-parse-ip-address.md) - [Disconnecting shows "Connection failed" (Linux / NetworkManager)](https://docs.defguard.net/support-1/troubleshooting-guides/desktop-client/disconnecting-shows-connection-failed-linux-networkmanager.md) - [resolvconf not found (Debian)](https://docs.defguard.net/support-1/troubleshooting-guides/desktop-client/resolvconf-not-found-debian.md) - [Unix socket does not exist (Linux)](https://docs.defguard.net/support-1/troubleshooting-guides/desktop-client/unix-socket-does-not-exist-linux.md) - [Disconnected after MFA timeout](https://docs.defguard.net/support-1/troubleshooting-guides/desktop-client/disconnected-after-mfa-timeout.md) - [Could not start MFA process](https://docs.defguard.net/support-1/troubleshooting-guides/desktop-client/could-not-start-mfa-process.md) - [Client connects but cannot reach VPN servers (MTU)](https://docs.defguard.net/support-1/troubleshooting-guides/desktop-client/client-connects-but-cannot-reach-vpn-servers-mtu.md) - [Desktop client real-time / auto sync does not work](https://docs.defguard.net/support-1/troubleshooting-guides/desktop-client/desktop-client-real-time-auto-sync-does-not-work.md) - [Windows client unable to connect](https://docs.defguard.net/support-1/troubleshooting-guides/desktop-client/windows-client-unable-to-connect.md) - ["All traffic" connection issues](https://docs.defguard.net/support-1/troubleshooting-guides/desktop-client/client-all-traffic-connection-issues.md) - [Windows installer exit codes](https://docs.defguard.net/support-1/troubleshooting-guides/desktop-client/windows-installer-exit-codes.md): Desktop Client windows installer exist codes list. - [VPN location is missing from client](https://docs.defguard.net/support-1/troubleshooting-guides/desktop-client/vpn-location-is-missing-from-client.md) - [Client crashes immediately on launch with "Error 71 (Protocol error) dispatching to Wayland display"](https://docs.defguard.net/support-1/troubleshooting-guides/desktop-client/client-crashes-immediately-on-launch-with-error-71-protocol-error-dispatching-to-wayland-display.md) - [Desktop Client connectivity issues](https://docs.defguard.net/support-1/troubleshooting-guides/desktop-client/desktop-client-connectivity-issues.md) - [Mobile Client](https://docs.defguard.net/support-1/troubleshooting-guides/mobile-client.md) - [Android "Failed host lookup" error](https://docs.defguard.net/support-1/troubleshooting-guides/mobile-client/android-failed-host-lookup-error.md) - [Edge Component](https://docs.defguard.net/support-1/troubleshooting-guides/edge-component.md) - [There was a network error. Can't reach Edge](https://docs.defguard.net/support-1/troubleshooting-guides/edge-component/there-was-a-network-error.-cant-reach-edge.md) - [Gateway](https://docs.defguard.net/support-1/troubleshooting-guides/gateway.md) - [No buffer space available](https://docs.defguard.net/support-1/troubleshooting-guides/gateway/no-buffer-space-available.md) - [TOTP / email codes for MFA do not work](https://docs.defguard.net/support-1/troubleshooting-guides/totp-email-codes-for-mfa-do-not-work.md) - [WebAuthn security keys](https://docs.defguard.net/support-1/troubleshooting-guides/webauthn-security-keys.md) - [Can access VPN but not local network or internet](https://docs.defguard.net/support-1/troubleshooting-guides/can-access-vpn-but-not-local-network-or-internet.md) - [How to verify the VPN is working](https://docs.defguard.net/support-1/troubleshooting-guides/how-to-verify-the-vpn-is-working.md) - [Testing VPN speed](https://docs.defguard.net/support-1/troubleshooting-guides/testing-vpn-speed.md): VPN Speed Testing Guide: Linux Server & Windows/Linux Clients - [Server migration and licence transfer](https://docs.defguard.net/support-1/server-migration-and-licence-transfer.md) - [Troubleshooting Guide V1 legacy backup](https://docs.defguard.net/support-1/troubleshooting.md): Here are some common issues / problems that are frequently encountered. - [Sending support information](https://docs.defguard.net/support-1/troubleshooting/sending-support-info.md) - [Client Windows installer exit codes](https://docs.defguard.net/support-1/troubleshooting/windows-installer-exit-codes.md): Desktop Client windows installer exist codes list. - [Client "All traffic" connection issues](https://docs.defguard.net/support-1/troubleshooting/client-all-traffic-connection-issues.md) - [WebAuthn security keys](https://docs.defguard.net/support-1/troubleshooting/webauthn-security-keys.md) - [Initial Setup Wizard: setting up from scratch](https://docs.defguard.net/tutorials/initial-setup-wizard-setting-up-from-scratch.md) - [Migrating from Defguard 1.6 to 2.0](https://docs.defguard.net/tutorials/migrating-from-defguard-1.6-to-2.0.md) - [Migrating a 1.6 one-liner installation to 2.x](https://docs.defguard.net/tutorials/migrating-from-defguard-1.6-to-2.0/migrating-a-1.6-one-liner-installation-to-2.x.md) - [Adding Edge component](https://docs.defguard.net/tutorials/adding-edge-component.md) - [Defguard Compliance](https://docs.defguard.net/compliance/defguard-compliance.md) - [Secure by design](https://docs.defguard.net/in-depth/secure-by-design.md) - [Architecture](https://docs.defguard.net/in-depth/architecture.md) - [How do VPN statistics work](https://docs.defguard.net/in-depth/architecture/how-do-vpn-statistics-work.md) - [Security concepts](https://docs.defguard.net/in-depth/architecture/security-concepts.md) - [MFA Architecture](https://docs.defguard.net/in-depth/architecture/architecture.md) - [Architecture Decision Records](https://docs.defguard.net/in-depth/architecture-decision-records.md): What are Defguard's Architecture Decision Records? - [2.3](https://docs.defguard.net/in-depth/architecture-decision-records/2.3.md) - [2.1](https://docs.defguard.net/in-depth/architecture-decision-records/2.1.md) - [2.0](https://docs.defguard.net/in-depth/architecture-decision-records/2.0.md) - [1.6](https://docs.defguard.net/in-depth/architecture-decision-records/1.6.md) - [1.5](https://docs.defguard.net/in-depth/architecture-decision-records/1.5.md) - [1.4](https://docs.defguard.net/in-depth/architecture-decision-records/1.4.md) - [1.3](https://docs.defguard.net/in-depth/architecture-decision-records/1.3.md) - [Pre-1.3](https://docs.defguard.net/in-depth/architecture-decision-records/pre-1.3.md) - [Client application feature compatibility](https://docs.defguard.net/in-depth/client-application-feature-compatibility.md) - [Defguard Open Organisation](https://docs.defguard.net/in-depth/defguard-open-organisation.md) - [Product Development Procedure](https://docs.defguard.net/in-depth/defguard-open-organisation/product-development-procedure.md) - [Roadmap](https://docs.defguard.net/in-depth/defguard-open-organisation/roadmap.md): This is a high-level project roadmap of planned features. - [BoringTun](https://docs.defguard.net/in-depth/boringtun.md) - [Performance and deployment sizing](https://docs.defguard.net/in-depth/performance-and-deployment-sizing.md) - [Contributing](https://docs.defguard.net/for-developers/contributing.md) - [Environment setup](https://docs.defguard.net/for-developers/dev-env-setup.md) - [Translations (core/web)](https://docs.defguard.net/for-developers/dev-env-setup/translations-web.md) - [Switching language](https://docs.defguard.net/for-developers/dev-env-setup/translations-web/switching-language.md) - [Adding translations](https://docs.defguard.net/for-developers/dev-env-setup/translations-web/adding-translations.md) - [Translations (client)](https://docs.defguard.net/for-developers/dev-env-setup/translations-client.md) - [Adding translations](https://docs.defguard.net/for-developers/dev-env-setup/translations-client/adding-translations.md) - [REST API](https://docs.defguard.net/for-developers/rest-api.md) - [Core](https://docs.defguard.net/for-developers/rest-api/core.md) - [System](https://docs.defguard.net/for-developers/rest-api/core/system.md) - [Authorize a request forwarded by a reverse proxy](https://docs.defguard.net/for-developers/rest-api/core/system/authorize-a-request-forwarded-by-a-reverse-proxy.md) - [Check instance health](https://docs.defguard.net/for-developers/rest-api/core/system/check-instance-health.md) - [Get information about this defguard instance](https://docs.defguard.net/for-developers/rest-api/core/system/get-information-about-this-defguard-instance.md) - [List connected components whose version is incompatible with this Core](https://docs.defguard.net/for-developers/rest-api/core/system/list-connected-components-whose-version-is-incompatible-with-this-core.md) - [Check whether an email address or username is already taken](https://docs.defguard.net/for-developers/rest-api/core/system/check-whether-an-email-address-or-username-is-already-taken.md) - [Get information about the current session](https://docs.defguard.net/for-developers/rest-api/core/system/get-information-about-the-current-session.md) - [Get information about a newer defguard release, if any](https://docs.defguard.net/for-developers/rest-api/core/system/get-information-about-a-newer-defguard-release-if-any.md) - [Auth](https://docs.defguard.net/for-developers/rest-api/core/auth.md) - [Authenticate a user](https://docs.defguard.net/for-developers/rest-api/core/auth/authenticate-a-user.md) - [Send an email MFA code](https://docs.defguard.net/for-developers/rest-api/core/auth/send-an-email-mfa-code.md) - [Enable email MFA](https://docs.defguard.net/for-developers/rest-api/core/auth/enable-email-mfa.md) - [Start email MFA setup](https://docs.defguard.net/for-developers/rest-api/core/auth/start-email-mfa-setup.md) - [Verify an email MFA code](https://docs.defguard.net/for-developers/rest-api/core/auth/verify-an-email-mfa-code.md) - [Log out and clear the session cookie](https://docs.defguard.net/for-developers/rest-api/core/auth/log-out-and-clear-the-session-cookie.md) - [Enable MFA](https://docs.defguard.net/for-developers/rest-api/core/auth/enable-mfa.md) - [Disable MFA](https://docs.defguard.net/for-developers/rest-api/core/auth/disable-mfa.md) - [Authenticate with a recovery code](https://docs.defguard.net/for-developers/rest-api/core/auth/authenticate-with-a-recovery-code.md) - [Enable TOTP](https://docs.defguard.net/for-developers/rest-api/core/auth/enable-totp.md) - [Generate a new TOTP secret](https://docs.defguard.net/for-developers/rest-api/core/auth/generate-a-new-totp-secret.md) - [Verify a TOTP code](https://docs.defguard.net/for-developers/rest-api/core/auth/verify-a-totp-code.md) - [Finish WebAuthn authentication](https://docs.defguard.net/for-developers/rest-api/core/auth/finish-webauthn-authentication.md) - [Finish WebAuthn registration](https://docs.defguard.net/for-developers/rest-api/core/auth/finish-webauthn-registration.md) - [Start WebAuthn registration](https://docs.defguard.net/for-developers/rest-api/core/auth/start-webauthn-registration.md) - [Start WebAuthn authentication](https://docs.defguard.net/for-developers/rest-api/core/auth/start-webauthn-authentication.md) - [User](https://docs.defguard.net/for-developers/rest-api/core/user.md) - [Get the currently authenticated user](https://docs.defguard.net/for-developers/rest-api/core/user/get-the-currently-authenticated-user.md) - [List users](https://docs.defguard.net/for-developers/rest-api/core/user/list-users.md) - [Create a user](https://docs.defguard.net/for-developers/rest-api/core/user/create-a-user.md) - [Check whether a username is available](https://docs.defguard.net/for-developers/rest-api/core/user/check-whether-a-username-is-available.md) - [Bulk delete users](https://docs.defguard.net/for-developers/rest-api/core/user/bulk-delete-users.md) - [Bulk disable users](https://docs.defguard.net/for-developers/rest-api/core/user/bulk-disable-users.md) - [Bulk enable users](https://docs.defguard.net/for-developers/rest-api/core/user/bulk-enable-users.md) - [Bulk start user enrollment](https://docs.defguard.net/for-developers/rest-api/core/user/bulk-start-user-enrollment.md) - [Change your own password](https://docs.defguard.net/for-developers/rest-api/core/user/change-your-own-password.md) - [Get a user](https://docs.defguard.net/for-developers/rest-api/core/user/get-a-user.md) - [Update a user](https://docs.defguard.net/for-developers/rest-api/core/user/update-a-user.md) - [Delete a user](https://docs.defguard.net/for-developers/rest-api/core/user/delete-a-user.md) - [Disable email MFA of a user](https://docs.defguard.net/for-developers/rest-api/core/user/disable-email-mfa-of-a-user.md) - [Disable MFA of a user](https://docs.defguard.net/for-developers/rest-api/core/user/disable-mfa-of-a-user.md) - [Delete an authorized OAuth2 application of a user](https://docs.defguard.net/for-developers/rest-api/core/user/delete-an-authorized-oauth2-application-of-a-user.md) - [Change the password of a user](https://docs.defguard.net/for-developers/rest-api/core/user/change-the-password-of-a-user.md) - [Send a password reset email to a user](https://docs.defguard.net/for-developers/rest-api/core/user/send-a-password-reset-email-to-a-user.md) - [Delete a security key of a user](https://docs.defguard.net/for-developers/rest-api/core/user/delete-a-security-key-of-a-user.md) - [Start remote desktop configuration](https://docs.defguard.net/for-developers/rest-api/core/user/start-remote-desktop-configuration.md) - [Start enrollment for a user](https://docs.defguard.net/for-developers/rest-api/core/user/start-enrollment-for-a-user.md) - [Disable TOTP of a user](https://docs.defguard.net/for-developers/rest-api/core/user/disable-totp-of-a-user.md) - [Group](https://docs.defguard.net/for-developers/rest-api/core/group.md) - [List group names](https://docs.defguard.net/for-developers/rest-api/core/group/list-group-names.md) - [Create a group](https://docs.defguard.net/for-developers/rest-api/core/group/create-a-group.md) - [List groups with their details](https://docs.defguard.net/for-developers/rest-api/core/group/list-groups-with-their-details.md) - [Get a group](https://docs.defguard.net/for-developers/rest-api/core/group/get-a-group.md) - [Add a member to a group](https://docs.defguard.net/for-developers/rest-api/core/group/add-a-member-to-a-group.md) - [Update a group](https://docs.defguard.net/for-developers/rest-api/core/group/update-a-group.md) - [Delete a group](https://docs.defguard.net/for-developers/rest-api/core/group/delete-a-group.md) - [Remove a member from a group](https://docs.defguard.net/for-developers/rest-api/core/group/remove-a-member-from-a-group.md) - [Assign multiple users to multiple groups](https://docs.defguard.net/for-developers/rest-api/core/group/assign-multiple-users-to-multiple-groups.md) - [Device](https://docs.defguard.net/for-developers/rest-api/core/device.md) - [List devices](https://docs.defguard.net/for-developers/rest-api/core/device/list-devices.md) - [List the devices of a user](https://docs.defguard.net/for-developers/rest-api/core/device/list-the-devices-of-a-user.md) - [Get a device](https://docs.defguard.net/for-developers/rest-api/core/device/get-a-device.md) - [Add a device for a user](https://docs.defguard.net/for-developers/rest-api/core/device/add-a-device-for-a-user.md) - [Update a device](https://docs.defguard.net/for-developers/rest-api/core/device/update-a-device.md) - [Delete a device](https://docs.defguard.net/for-developers/rest-api/core/device/delete-a-device.md) - [Get the WireGuard configuration of a user device](https://docs.defguard.net/for-developers/rest-api/core/device/get-the-wireguard-configuration-of-a-user-device.md) - [Network Device](https://docs.defguard.net/for-developers/rest-api/core/network-device.md) - [List network devices](https://docs.defguard.net/for-developers/rest-api/core/network-device/list-network-devices.md) - [Create a network device](https://docs.defguard.net/for-developers/rest-api/core/network-device/create-a-network-device.md) - [Suggest free IP addresses in a location](https://docs.defguard.net/for-developers/rest-api/core/network-device/suggest-free-ip-addresses-in-a-location.md) - [Check whether the given IP addresses are free in a location](https://docs.defguard.net/for-developers/rest-api/core/network-device/check-whether-the-given-ip-addresses-are-free-in-a-location.md) - [Start CLI setup for a new network device](https://docs.defguard.net/for-developers/rest-api/core/network-device/start-cli-setup-for-a-new-network-device.md) - [Start CLI setup for an existing network device](https://docs.defguard.net/for-developers/rest-api/core/network-device/start-cli-setup-for-an-existing-network-device.md) - [Get a network device](https://docs.defguard.net/for-developers/rest-api/core/network-device/get-a-network-device.md) - [Update a network device](https://docs.defguard.net/for-developers/rest-api/core/network-device/update-a-network-device.md) - [Get the WireGuard configuration of a network device](https://docs.defguard.net/for-developers/rest-api/core/network-device/get-the-wireguard-configuration-of-a-network-device.md) - [Static IP](https://docs.defguard.net/for-developers/rest-api/core/static-ip.md) - [List the IP addresses of all devices of a user, grouped by location](https://docs.defguard.net/for-developers/rest-api/core/static-ip/list-the-ip-addresses-of-all-devices-of-a-user-grouped-by-location.md) - [Assign static IP addresses to user devices](https://docs.defguard.net/for-developers/rest-api/core/static-ip/assign-static-ip-addresses-to-user-devices.md) - [Check whether a single static IP assignment would be valid](https://docs.defguard.net/for-developers/rest-api/core/static-ip/check-whether-a-single-static-ip-assignment-would-be-valid.md) - [List the IP addresses of a user device, grouped by location](https://docs.defguard.net/for-developers/rest-api/core/static-ip/list-the-ip-addresses-of-a-user-device-grouped-by-location.md) - [Network](https://docs.defguard.net/for-developers/rest-api/core/network.md) - [List networks](https://docs.defguard.net/for-developers/rest-api/core/network/list-networks.md) - [Create a network](https://docs.defguard.net/for-developers/rest-api/core/network/create-a-network.md) - [Count networks](https://docs.defguard.net/for-developers/rest-api/core/network/count-networks.md) - [List networks reduced to their ID and name](https://docs.defguard.net/for-developers/rest-api/core/network/list-networks-reduced-to-their-id-and-name.md) - [Import a network from a WireGuard configuration file](https://docs.defguard.net/for-developers/rest-api/core/network/import-a-network-from-a-wireguard-configuration-file.md) - [Get a network](https://docs.defguard.net/for-developers/rest-api/core/network/get-a-network.md) - [Update a network](https://docs.defguard.net/for-developers/rest-api/core/network/update-a-network.md) - [Delete a network](https://docs.defguard.net/for-developers/rest-api/core/network/delete-a-network.md) - [Get the WireGuard configuration of a device in a location](https://docs.defguard.net/for-developers/rest-api/core/network/get-the-wireguard-configuration-of-a-device-in-a-location.md) - [Assign imported devices to users](https://docs.defguard.net/for-developers/rest-api/core/network/assign-imported-devices-to-users.md) - [Location Stats](https://docs.defguard.net/for-developers/rest-api/core/location-stats.md) - [Get traffic statistics for all locations](https://docs.defguard.net/for-developers/rest-api/core/location-stats/get-traffic-statistics-for-all-locations.md) - [List connected network devices in a location](https://docs.defguard.net/for-developers/rest-api/core/location-stats/list-connected-network-devices-in-a-location.md) - [List connected users in a location](https://docs.defguard.net/for-developers/rest-api/core/location-stats/list-connected-users-in-a-location.md) - [List the connected devices of a user in a location](https://docs.defguard.net/for-developers/rest-api/core/location-stats/list-the-connected-devices-of-a-user-in-a-location.md) - [Get traffic statistics for a location](https://docs.defguard.net/for-developers/rest-api/core/location-stats/get-traffic-statistics-for-a-location.md) - [Gateway](https://docs.defguard.net/for-developers/rest-api/core/gateway.md) - [List gateways in all locations](https://docs.defguard.net/for-developers/rest-api/core/gateway/list-gateways-in-all-locations.md) - [Get a gateway](https://docs.defguard.net/for-developers/rest-api/core/gateway/get-a-gateway.md) - [Rename a gateway, or enable or disable it](https://docs.defguard.net/for-developers/rest-api/core/gateway/rename-a-gateway-or-enable-or-disable-it.md) - [Delete a gateway](https://docs.defguard.net/for-developers/rest-api/core/gateway/delete-a-gateway.md) - [Get the state of gateways in all locations](https://docs.defguard.net/for-developers/rest-api/core/gateway/get-the-state-of-gateways-in-all-locations.md) - [Get the state of gateways in a location](https://docs.defguard.net/for-developers/rest-api/core/gateway/get-the-state-of-gateways-in-a-location.md) - [Adopt a gateway in a location](https://docs.defguard.net/for-developers/rest-api/core/gateway/adopt-a-gateway-in-a-location.md) - [Stream the progress of gateway TLS setup](https://docs.defguard.net/for-developers/rest-api/core/gateway/stream-the-progress-of-gateway-tls-setup.md) - [Proxy](https://docs.defguard.net/for-developers/rest-api/core/proxy.md) - [List edge instances](https://docs.defguard.net/for-developers/rest-api/core/proxy/list-edge-instances.md) - [Stream the progress of Let's Encrypt certificate issuance on the edge](https://docs.defguard.net/for-developers/rest-api/core/proxy/stream-the-progress-of-lets-encrypt-certificate-issuance-on-the-edge.md) - [Stream the progress of edge (proxy) TLS setup](https://docs.defguard.net/for-developers/rest-api/core/proxy/stream-the-progress-of-edge-proxy-tls-setup.md) - [Get an edge instance](https://docs.defguard.net/for-developers/rest-api/core/proxy/get-an-edge-instance.md) - [Rename an edge instance, or enable or disable it](https://docs.defguard.net/for-developers/rest-api/core/proxy/rename-an-edge-instance-or-enable-or-disable-it.md) - [Delete an edge instance](https://docs.defguard.net/for-developers/rest-api/core/proxy/delete-an-edge-instance.md) - [Certificates](https://docs.defguard.net/for-developers/rest-api/core/certificates.md) - [Get the certificate of the internal certificate authority](https://docs.defguard.net/for-developers/rest-api/core/certificates/get-the-certificate-of-the-internal-certificate-authority.md) - [Get the certificates currently used by core and edge](https://docs.defguard.net/for-developers/rest-api/core/certificates/get-the-certificates-currently-used-by-core-and-edge.md) - [Set up the certificate for the internal (core) URL](https://docs.defguard.net/for-developers/rest-api/core/certificates/set-up-the-certificate-for-the-internal-core-url.md) - [Set up the certificate for the external (edge) URL](https://docs.defguard.net/for-developers/rest-api/core/certificates/set-up-the-certificate-for-the-external-edge-url.md) - [SSH Key](https://docs.defguard.net/for-developers/rest-api/core/ssh-key.md) - [Get SSH authorized keys in the \`authorized\_keys\` file format](https://docs.defguard.net/for-developers/rest-api/core/ssh-key/get-ssh-authorized-keys-in-the-authorized_keys-file-format.md) - [List SSH and GPG authentication keys of a user](https://docs.defguard.net/for-developers/rest-api/core/ssh-key/list-ssh-and-gpg-authentication-keys-of-a-user.md) - [Add an SSH or GPG authentication key to a user](https://docs.defguard.net/for-developers/rest-api/core/ssh-key/add-an-ssh-or-gpg-authentication-key-to-a-user.md) - [Delete an authentication key of a user](https://docs.defguard.net/for-developers/rest-api/core/ssh-key/delete-an-authentication-key-of-a-user.md) - [Rename an authentication key of a user](https://docs.defguard.net/for-developers/rest-api/core/ssh-key/rename-an-authentication-key-of-a-user.md) - [API Token](https://docs.defguard.net/for-developers/rest-api/core/api-token.md) - [List API tokens of a user](https://docs.defguard.net/for-developers/rest-api/core/api-token/list-api-tokens-of-a-user.md) - [Create an API token for a user](https://docs.defguard.net/for-developers/rest-api/core/api-token/create-an-api-token-for-a-user.md) - [Delete an API token of a user](https://docs.defguard.net/for-developers/rest-api/core/api-token/delete-an-api-token-of-a-user.md) - [Rename an API token of a user](https://docs.defguard.net/for-developers/rest-api/core/api-token/rename-an-api-token-of-a-user.md) - [Webhook](https://docs.defguard.net/for-developers/rest-api/core/webhook.md) - [List webhooks](https://docs.defguard.net/for-developers/rest-api/core/webhook/list-webhooks.md) - [Create a webhook](https://docs.defguard.net/for-developers/rest-api/core/webhook/create-a-webhook.md) - [Get a webhook](https://docs.defguard.net/for-developers/rest-api/core/webhook/get-a-webhook.md) - [Enable or disable a webhook](https://docs.defguard.net/for-developers/rest-api/core/webhook/enable-or-disable-a-webhook.md) - [Update a webhook](https://docs.defguard.net/for-developers/rest-api/core/webhook/update-a-webhook.md) - [Delete a webhook](https://docs.defguard.net/for-developers/rest-api/core/webhook/delete-a-webhook.md) - [Settings](https://docs.defguard.net/for-developers/rest-api/core/settings.md) - [Get instance settings](https://docs.defguard.net/for-developers/rest-api/core/settings/get-instance-settings.md) - [Replace instance settings](https://docs.defguard.net/for-developers/rest-api/core/settings/replace-instance-settings.md) - [Update selected instance settings](https://docs.defguard.net/for-developers/rest-api/core/settings/update-selected-instance-settings.md) - [Restore default branding settings](https://docs.defguard.net/for-developers/rest-api/core/settings/restore-default-branding-settings.md) - [Get enterprise settings](https://docs.defguard.net/for-developers/rest-api/core/settings/get-enterprise-settings.md) - [Update selected enterprise settings](https://docs.defguard.net/for-developers/rest-api/core/settings/update-selected-enterprise-settings.md) - [Get settings required to render the web UI](https://docs.defguard.net/for-developers/rest-api/core/settings/get-settings-required-to-render-the-web-ui.md) - [LDAP](https://docs.defguard.net/for-developers/rest-api/core/ldap.md) - [Preview the changes a full LDAP sync would make](https://docs.defguard.net/for-developers/rest-api/core/ldap/preview-the-changes-a-full-ldap-sync-would-make.md) - [Test the LDAP connection using the currently saved settings](https://docs.defguard.net/for-developers/rest-api/core/ldap/test-the-ldap-connection-using-the-currently-saved-settings.md) - [Test the LDAP connection](https://docs.defguard.net/for-developers/rest-api/core/ldap/test-the-ldap-connection.md) - [Activity Log](https://docs.defguard.net/for-developers/rest-api/core/activity-log.md) - [List activity log events](https://docs.defguard.net/for-developers/rest-api/core/activity-log/list-activity-log-events.md) - [List activity log streams](https://docs.defguard.net/for-developers/rest-api/core/activity-log/list-activity-log-streams.md) - [Create an activity log stream](https://docs.defguard.net/for-developers/rest-api/core/activity-log/create-an-activity-log-stream.md) - [Update an activity log stream](https://docs.defguard.net/for-developers/rest-api/core/activity-log/update-an-activity-log-stream.md) - [Delete an activity log stream](https://docs.defguard.net/for-developers/rest-api/core/activity-log/delete-an-activity-log-stream.md) - [ACL](https://docs.defguard.net/for-developers/rest-api/core/acl.md) - [List ACL aliases](https://docs.defguard.net/for-developers/rest-api/core/acl/list-acl-aliases.md) - [Create an ACL alias](https://docs.defguard.net/for-developers/rest-api/core/acl/create-an-acl-alias.md) - [Apply ACL aliases](https://docs.defguard.net/for-developers/rest-api/core/acl/apply-acl-aliases.md) - [Count ACL aliases by state](https://docs.defguard.net/for-developers/rest-api/core/acl/count-acl-aliases-by-state.md) - [Get an ACL alias](https://docs.defguard.net/for-developers/rest-api/core/acl/get-an-acl-alias.md) - [Update an ACL alias](https://docs.defguard.net/for-developers/rest-api/core/acl/update-an-acl-alias.md) - [Delete an ACL alias](https://docs.defguard.net/for-developers/rest-api/core/acl/delete-an-acl-alias.md) - [List ACL destinations](https://docs.defguard.net/for-developers/rest-api/core/acl/list-acl-destinations.md) - [Create an ACL destination](https://docs.defguard.net/for-developers/rest-api/core/acl/create-an-acl-destination.md) - [Apply ACL destinations](https://docs.defguard.net/for-developers/rest-api/core/acl/apply-acl-destinations.md) - [Count ACL destinations by state](https://docs.defguard.net/for-developers/rest-api/core/acl/count-acl-destinations-by-state.md) - [Get an ACL destination](https://docs.defguard.net/for-developers/rest-api/core/acl/get-an-acl-destination.md) - [Update an ACL destination](https://docs.defguard.net/for-developers/rest-api/core/acl/update-an-acl-destination.md) - [Delete an ACL destination](https://docs.defguard.net/for-developers/rest-api/core/acl/delete-an-acl-destination.md) - [List ACL rules](https://docs.defguard.net/for-developers/rest-api/core/acl/list-acl-rules.md) - [Create an ACL rule](https://docs.defguard.net/for-developers/rest-api/core/acl/create-an-acl-rule.md) - [Apply ACL rules](https://docs.defguard.net/for-developers/rest-api/core/acl/apply-acl-rules.md) - [Count ACL rules by state](https://docs.defguard.net/for-developers/rest-api/core/acl/count-acl-rules-by-state.md) - [Get an ACL rule](https://docs.defguard.net/for-developers/rest-api/core/acl/get-an-acl-rule.md) - [Update an ACL rule](https://docs.defguard.net/for-developers/rest-api/core/acl/update-an-acl-rule.md) - [Delete an ACL rule](https://docs.defguard.net/for-developers/rest-api/core/acl/delete-an-acl-rule.md) - [Device Posture](https://docs.defguard.net/for-developers/rest-api/core/device-posture.md) - [List device posture check policies](https://docs.defguard.net/for-developers/rest-api/core/device-posture/list-device-posture-check-policies.md) - [Create a device posture check policy](https://docs.defguard.net/for-developers/rest-api/core/device-posture/create-a-device-posture-check-policy.md) - [List available posture check versions](https://docs.defguard.net/for-developers/rest-api/core/device-posture/list-available-posture-check-versions.md) - [Get a device posture check policy](https://docs.defguard.net/for-developers/rest-api/core/device-posture/get-a-device-posture-check-policy.md) - [Update a device posture check policy](https://docs.defguard.net/for-developers/rest-api/core/device-posture/update-a-device-posture-check-policy.md) - [Delete a device posture check policy](https://docs.defguard.net/for-developers/rest-api/core/device-posture/delete-a-device-posture-check-policy.md) - [Duplicate a device posture check policy](https://docs.defguard.net/for-developers/rest-api/core/device-posture/duplicate-a-device-posture-check-policy.md) - [Assign locations to a device posture check policy](https://docs.defguard.net/for-developers/rest-api/core/device-posture/assign-locations-to-a-device-posture-check-policy.md) - [Assign device posture check policies to a location](https://docs.defguard.net/for-developers/rest-api/core/device-posture/assign-device-posture-check-policies-to-a-location.md) - [SNAT](https://docs.defguard.net/for-developers/rest-api/core/snat.md) - [List SNAT bindings in a location](https://docs.defguard.net/for-developers/rest-api/core/snat/list-snat-bindings-in-a-location.md) - [Create a SNAT binding for a user in a location](https://docs.defguard.net/for-developers/rest-api/core/snat/create-a-snat-binding-for-a-user-in-a-location.md) - [Update a SNAT binding](https://docs.defguard.net/for-developers/rest-api/core/snat/update-a-snat-binding.md) - [Delete a SNAT binding](https://docs.defguard.net/for-developers/rest-api/core/snat/delete-a-snat-binding.md) - [Open ID](https://docs.defguard.net/for-developers/rest-api/core/open-id.md) - [Start login through the external OpenID provider](https://docs.defguard.net/for-developers/rest-api/core/open-id/start-login-through-the-external-openid-provider.md) - [Finish login through the external OpenID provider](https://docs.defguard.net/for-developers/rest-api/core/open-id/finish-login-through-the-external-openid-provider.md) - [List OpenID providers](https://docs.defguard.net/for-developers/rest-api/core/open-id/list-openid-providers.md) - [Create an OpenID provider](https://docs.defguard.net/for-developers/rest-api/core/open-id/create-an-openid-provider.md) - [Get the current OpenID provider](https://docs.defguard.net/for-developers/rest-api/core/open-id/get-the-current-openid-provider.md) - [Get an OpenID provider](https://docs.defguard.net/for-developers/rest-api/core/open-id/get-an-openid-provider.md) - [Update an OpenID provider](https://docs.defguard.net/for-developers/rest-api/core/open-id/update-an-openid-provider.md) - [Delete an OpenID provider](https://docs.defguard.net/for-developers/rest-api/core/open-id/delete-an-openid-provider.md) - [Test the directory sync connection of the current OpenID provider](https://docs.defguard.net/for-developers/rest-api/core/open-id/test-the-directory-sync-connection-of-the-current-openid-provider.md) - [OAuth2](https://docs.defguard.net/for-developers/rest-api/core/oauth2.md) - [Get the OpenID Connect discovery document](https://docs.defguard.net/for-developers/rest-api/core/oauth2/get-the-openid-connect-discovery-document.md) - [List OAuth2/OpenID client applications](https://docs.defguard.net/for-developers/rest-api/core/oauth2/list-oauth2-openid-client-applications.md) - [Create an OAuth2/OpenID client application](https://docs.defguard.net/for-developers/rest-api/core/oauth2/create-an-oauth2-openid-client-application.md) - [Start the OAuth2 authorization flow](https://docs.defguard.net/for-developers/rest-api/core/oauth2/start-the-oauth2-authorization-flow.md) - [Finish the OAuth2 authorization flow after user consent](https://docs.defguard.net/for-developers/rest-api/core/oauth2/finish-the-oauth2-authorization-flow-after-user-consent.md) - [Get the JSON Web Key Set used to verify ID token signatures](https://docs.defguard.net/for-developers/rest-api/core/oauth2/get-the-json-web-key-set-used-to-verify-id-token-signatures.md) - [Exchange an authorization code or a refresh token for tokens](https://docs.defguard.net/for-developers/rest-api/core/oauth2/exchange-an-authorization-code-or-a-refresh-token-for-tokens.md) - [Get the claims of the authenticated user](https://docs.defguard.net/for-developers/rest-api/core/oauth2/get-the-claims-of-the-authenticated-user.md) - [Get an OAuth2/OpenID client application](https://docs.defguard.net/for-developers/rest-api/core/oauth2/get-an-oauth2-openid-client-application.md) - [Enable or disable an OAuth2/OpenID client application](https://docs.defguard.net/for-developers/rest-api/core/oauth2/enable-or-disable-an-oauth2-openid-client-application.md) - [Update an OAuth2/OpenID client application](https://docs.defguard.net/for-developers/rest-api/core/oauth2/update-an-oauth2-openid-client-application.md) - [Delete an OAuth2/OpenID client application](https://docs.defguard.net/for-developers/rest-api/core/oauth2/delete-an-oauth2-openid-client-application.md) - [Support](https://docs.defguard.net/for-developers/rest-api/core/support.md) - [Send the support data bundle to the defguard support address](https://docs.defguard.net/for-developers/rest-api/core/support/send-the-support-data-bundle-to-the-defguard-support-address.md) - [Send a test email to verify the SMTP configuration](https://docs.defguard.net/for-developers/rest-api/core/support/send-a-test-email-to-verify-the-smtp-configuration.md) - [Get instance configuration for support purposes](https://docs.defguard.net/for-developers/rest-api/core/support/get-instance-configuration-for-support-purposes.md) - [Get recent instance logs for support purposes](https://docs.defguard.net/for-developers/rest-api/core/support/get-recent-instance-logs-for-support-purposes.md) - [License](https://docs.defguard.net/for-developers/rest-api/core/license.md) - [Get information about the enterprise license and enabled features](https://docs.defguard.net/for-developers/rest-api/core/license/get-information-about-the-enterprise-license-and-enabled-features.md) - [Check a license key and return its limits](https://docs.defguard.net/for-developers/rest-api/core/license/check-a-license-key-and-return-its-limits.md) - [Models](https://docs.defguard.net/for-developers/rest-api/core/models.md) ## 2.2 - [Welcome](https://docs.defguard.net/2.2/readme.md) - [Getting help](https://docs.defguard.net/2.2/support.md) - [About Defguard](https://docs.defguard.net/2.2/about/about-defguard.md) - [Features overview](https://docs.defguard.net/2.2/about/features-overview.md) - [One-line install script](https://docs.defguard.net/2.2/getting-started/one-line-install.md) - [MTU settings](https://docs.defguard.net/2.2/features/mtu-settings.md) - [Overview](https://docs.defguard.net/2.2/features/overview.md) - [Zero-Trust VPN with 2FA/MFA](https://docs.defguard.net/2.2/features/wireguard.md) - [Create/Manage VPN Location](https://docs.defguard.net/2.2/features/wireguard/create-your-vpn-network.md) - [Split Tunnel Configuration](https://docs.defguard.net/2.2/features/wireguard/create-your-vpn-network/split-tunnel-configuration.md) - [Network overview](https://docs.defguard.net/2.2/features/wireguard/network-overview.md) - [Multi-Factor Authentication (MFA/2FA)](https://docs.defguard.net/2.2/features/wireguard/multi-factor-authentication-mfa-2fa.md): Defguard is the sole VPN solution that genuinely implements Multi-Factor Authentication (MFA) before a WireGuard® VPN connection is established, significantly enhancing security against cyberattacks. - [MFA flows and methods](https://docs.defguard.net/2.2/features/wireguard/multi-factor-authentication-mfa-2fa/mfa-flows-and-methods.md) - [Configuring MFA for a location](https://docs.defguard.net/2.2/features/wireguard/multi-factor-authentication-mfa-2fa/configuring-mfa-for-a-location.md) - [Adding client device](https://docs.defguard.net/2.2/features/wireguard/remote-desktop-activation.md): How to manually generate token for user as an administrator. - [Client behaviour customization](https://docs.defguard.net/2.2/features/wireguard/behavior-customization.md) - [DNS and domains](https://docs.defguard.net/2.2/features/wireguard/dns-and-domains.md) - [Executing custom gateway commands](https://docs.defguard.net/2.2/features/wireguard/executing-custom-gateway-commands.md) - [Remote user enrollment](https://docs.defguard.net/2.2/features/remote-user-enrollment.md) - [User onboarding after enrollment](https://docs.defguard.net/2.2/features/remote-user-enrollment/user-onboarding-after-enrollment.md) - [Automatic (real time) desktop client configuration & sync](https://docs.defguard.net/2.2/features/remote-user-enrollment/automatic-real-time-desktop-client-configuration.md) - [Internal SSO (OpenID Connect Provider)](https://docs.defguard.net/2.2/features/openid-connect.md) - [Portainer](https://docs.defguard.net/2.2/features/openid-connect/portainer.md) - [Grafana setup](https://docs.defguard.net/2.2/features/openid-connect/grafana-setup.md) - [Proxmox](https://docs.defguard.net/2.2/features/openid-connect/proxmox.md) - [Matrix / Synapse](https://docs.defguard.net/2.2/features/openid-connect/proxmox-1.md) - [Django](https://docs.defguard.net/2.2/features/openid-connect/django.md) - [MinIO](https://docs.defguard.net/2.2/features/openid-connect/minio.md) - [Vault](https://docs.defguard.net/2.2/features/openid-connect/vault.md) - [External SSO/OpenID providers](https://docs.defguard.net/2.2/features/external-openid-providers.md) - [Google](https://docs.defguard.net/2.2/features/external-openid-providers/google.md) - [Microsoft](https://docs.defguard.net/2.2/features/external-openid-providers/microsoft.md) - [Okta](https://docs.defguard.net/2.2/features/external-openid-providers/okta.md) - [JumpCloud](https://docs.defguard.net/2.2/features/external-openid-providers/jumpcloud.md) - [Keycloak](https://docs.defguard.net/2.2/features/external-openid-providers/keycloak.md) - [Zitadel](https://docs.defguard.net/2.2/features/external-openid-providers/zitadel.md) - [Custom](https://docs.defguard.net/2.2/features/external-openid-providers/custom.md) - [External OIDC secure enrollment](https://docs.defguard.net/2.2/features/external-openid-providers/external-oidc-secure-enrollment.md) - [LDAP and Active Directory integration](https://docs.defguard.net/2.2/features/ldap-and-active-directory-integration.md) - [LDAP Configuration](https://docs.defguard.net/2.2/features/ldap-and-active-directory-integration/configuration.md): How to configure the connection between a Defguard instance and LDAP. - [Example configurations](https://docs.defguard.net/2.2/features/ldap-and-active-directory-integration/examples.md) - [Settings table](https://docs.defguard.net/2.2/features/ldap-and-active-directory-integration/settings-table.md): A list describing the LDAP settings available on the settings page. - [Two-way LDAP and Active Directory synchronization](https://docs.defguard.net/2.2/features/ldap-and-active-directory-integration/two-way-ldap-and-active-directory-synchronization.md) - [Firewall](https://docs.defguard.net/2.2/features/firewall.md) - [Aliases and Destinations](https://docs.defguard.net/2.2/features/firewall/aliases-and-destinations.md) - [Troubleshooting](https://docs.defguard.net/2.2/features/firewall/troubleshooting.md) - [Implementation Details](https://docs.defguard.net/2.2/features/firewall/firewall-internals.md) - [Network devices](https://docs.defguard.net/2.2/features/network-devices.md) - [Activity & Audit logs](https://docs.defguard.net/2.2/features/activity-log.md) - [Audit Log Streaming to SIEM systems](https://docs.defguard.net/2.2/features/activity-log/activity-log-streaming.md): This feature is designed to help teams centralize visibility into user actions, security events, and system behaviour by integrating with tools they already use for monitoring and incident response. - [Supported SIEM systems integrations](https://docs.defguard.net/2.2/features/activity-log/activity-log-streaming/activity-log-integrations.md): List of supported services to stream activity logs into. - [Vector integration guide](https://docs.defguard.net/2.2/features/activity-log/activity-log-streaming/activity-log-integrations/vector-integration-guide.md): How to stream activity logs to vector. - [Logstash integration guide](https://docs.defguard.net/2.2/features/activity-log/activity-log-streaming/activity-log-integrations/logstash-integration-guide.md): How to stream activity logs to logstash. - [Notifications](https://docs.defguard.net/2.2/features/notifications.md) - [Email notifications](https://docs.defguard.net/2.2/features/notifications/setting-up-smtp-for-email-notifications.md) - [Gateway notifications](https://docs.defguard.net/2.2/features/notifications/gateway-notifications.md) - [New version notifications](https://docs.defguard.net/2.2/features/notifications/new-version-notifications.md) - [Integrations](https://docs.defguard.net/2.2/features/integrations.md) - [Webhooks](https://docs.defguard.net/2.2/features/integrations/webhooks.md) - [REST API](https://docs.defguard.net/2.2/features/integrations/api-tokens.md) - [SSH Authentication](https://docs.defguard.net/2.2/features/ssh-authentication.md) - [Forward auth](https://docs.defguard.net/2.2/features/forward-auth.md) - [User SNAT bindings](https://docs.defguard.net/2.2/features/user-snat-bindings.md) - [Service locations](https://docs.defguard.net/2.2/features/service-locations.md) - [Desktop client auto-provisioning](https://docs.defguard.net/2.2/features/desktop-client-auto-provisioning.md) - [Auto-provisioning in Windows environments](https://docs.defguard.net/2.2/features/desktop-client-auto-provisioning/auto-provisioning-in-windows-environments.md) - [On-premise Active Directory](https://docs.defguard.net/2.2/features/desktop-client-auto-provisioning/auto-provisioning-in-windows-environments/on-premise-active-directory-environments.md) - [Entra ID](https://docs.defguard.net/2.2/features/desktop-client-auto-provisioning/auto-provisioning-in-windows-environments/entra-id-environments.md) - [Generating enrollment tokens with Defguard REST API](https://docs.defguard.net/2.2/features/desktop-client-auto-provisioning/generating-enrollment-tokens-with-defguard-rest-api.md) - [Static IP assignment](https://docs.defguard.net/2.2/features/static-ip-assignment.md) - [Certificate management](https://docs.defguard.net/2.2/features/certificate-management.md) - [Device posture verification](https://docs.defguard.net/2.2/features/device-posture-verification.md) - [Managing Defguard via CLI](https://docs.defguard.net/2.2/features/managing-defguard-via-cli.md) - [User management](https://docs.defguard.net/2.2/features/user-management.md) - [Overview](https://docs.defguard.net/2.2/deployment-strategies/overview.md): This documentation will guide you through the process of deploying your Defguard instance. - [Deploying to Production](https://docs.defguard.net/2.2/deployment-strategies/deploying-to-production.md) - [Migration guides](https://docs.defguard.net/2.2/deployment-strategies/upgrading.md): Notes on upgrading Defguard and its components - [Hardware, OS, network and firewall recommendations](https://docs.defguard.net/2.2/deployment-strategies/hardware-os-network-and-firewall-recommendations.md): Before Defguard can be deployed please get familiar with the following recommendations - [Standalone package based installation](https://docs.defguard.net/2.2/deployment-strategies/standalone-package-based-installation.md) - [PostgreSQL database](https://docs.defguard.net/2.2/deployment-strategies/standalone-package-based-installation/database.md) - [Defguard Core](https://docs.defguard.net/2.2/deployment-strategies/standalone-package-based-installation/core.md) - [Defguard Edge](https://docs.defguard.net/2.2/deployment-strategies/standalone-package-based-installation/edge.md) - [Defguard Gateway](https://docs.defguard.net/2.2/deployment-strategies/standalone-package-based-installation/gateway.md) - [Defguard APT repository](https://docs.defguard.net/2.2/deployment-strategies/standalone-package-based-installation/defguard-apt-repository.md) - [Docker Compose](https://docs.defguard.net/2.2/deployment-strategies/docker-compose.md) - [Kubernetes](https://docs.defguard.net/2.2/deployment-strategies/kubernetes.md) - [Terraform](https://docs.defguard.net/2.2/deployment-strategies/terraform.md) - [OVA](https://docs.defguard.net/2.2/deployment-strategies/ova.md) - [Amazon Machine Image (AMI)](https://docs.defguard.net/2.2/deployment-strategies/amis-and-aws-cloudformation.md) - [Configuring HTTPS using AWS Certificate Manager](https://docs.defguard.net/2.2/deployment-strategies/amis-and-aws-cloudformation/configuring-https-using-aws-certificate-manager.md) - [Configuration](https://docs.defguard.net/2.2/deployment-strategies/configuration.md) - [Running Gateway on OPNsense firewall](https://docs.defguard.net/2.2/deployment-strategies/running-gateway-on-opnsense-firewall.md) - [Running Gateway on VyOS](https://docs.defguard.net/2.2/deployment-strategies/running-gateway-on-vyos.md) - [Reverse Proxy configuration using NGINX](https://docs.defguard.net/2.2/deployment-strategies/reverse-proxy-configuration-using-nginx.md) - [High Availability and Failover](https://docs.defguard.net/2.2/deployment-strategies/high-availability-and-failover.md) - [WireGuard UDP load-balancing](https://docs.defguard.net/2.2/deployment-strategies/high-availability-and-failover/wireguard-udp-load-balancing.md) - [Gateway with CARP](https://docs.defguard.net/2.2/deployment-strategies/high-availability-and-failover/gateway-with-carp.md) - [Updating and version compatibility](https://docs.defguard.net/2.2/deployment-strategies/updating-and-version-compatibility.md) - [Using a userspace WireGuard implementation](https://docs.defguard.net/2.2/deployment-strategies/using-a-userspace-wireguard-implementation.md) - [Pre-production and development releases](https://docs.defguard.net/2.2/deployment-strategies/pre-production-and-development-releases.md) - [Health check](https://docs.defguard.net/2.2/deployment-strategies/health-check.md) - [Production deployment verification guide](https://docs.defguard.net/2.2/deployment-strategies/production-deployment-verification-guide.md) - [Linux Kernel WireGuard tuning](https://docs.defguard.net/2.2/deployment-strategies/linux-kernel-wireguard-tuning.md): This technical guide addresses WireGuard VPN latency, throughput, resilience, and scalability requirements by tuning Linux kernel parameters (as WireGuard is part of the Linux kernel). - [Programmatic gateway adoption](https://docs.defguard.net/2.2/deployment-strategies/programmatic-gateway-adoption.md) - [Gateway/Location VLAN routing](https://docs.defguard.net/2.2/deployment-strategies/gateway-location-vlan-routing.md) - [Purchasing and using the license](https://docs.defguard.net/2.2/enterprise/license.md) - [License limits](https://docs.defguard.net/2.2/enterprise/license-limits.md) - [Overview](https://docs.defguard.net/2.2/using-defguard-for-end-users/overwiew.md) - [Mobile Client](https://docs.defguard.net/2.2/using-defguard-for-end-users/mobile-client.md) - [Adding new Instance](https://docs.defguard.net/2.2/using-defguard-for-end-users/mobile-client/instance-adding.md) - [Connecting to Instance](https://docs.defguard.net/2.2/using-defguard-for-end-users/mobile-client/instance-connect.md) - [Managing your Instance](https://docs.defguard.net/2.2/using-defguard-for-end-users/mobile-client/instance-manage.md) - [Using Biometry as MFA method](https://docs.defguard.net/2.2/using-defguard-for-end-users/mobile-client/using-biometry-as-mfa-method.md) - [Desktop Client](https://docs.defguard.net/2.2/using-defguard-for-end-users/desktop-client.md) - [Instance configuration](https://docs.defguard.net/2.2/using-defguard-for-end-users/desktop-client/instance-configuration.md): In this guide, you will learn how to add, remove and update Instance in Defguard desktop client. - [Using Multi-Factor Authentication (MFA)](https://docs.defguard.net/2.2/using-defguard-for-end-users/desktop-client/using-multi-factor-authentication-mfa.md) - [Configuring MFA methods](https://docs.defguard.net/2.2/using-defguard-for-end-users/desktop-client/configuring-mfa-methods.md) - [MTU Setting](https://docs.defguard.net/2.2/using-defguard-for-end-users/desktop-client/mtu-setting.md) - [Command-line (defguard-client)](https://docs.defguard.net/2.2/using-defguard-for-end-users/desktop-client/command-line-defguard-cli.md) - [Nightly builds](https://docs.defguard.net/2.2/using-defguard-for-end-users/desktop-client/nightly-builds.md) - [Other WireGuard® Clients](https://docs.defguard.net/2.2/using-defguard-for-end-users/adding-wireguard-devices.md) - [Configuring a device for new VPN Location manually](https://docs.defguard.net/2.2/using-defguard-for-end-users/adding-wireguard-devices/configuring-a-device-for-a-new-vpn-location.md) - [Password change / Reset](https://docs.defguard.net/2.2/using-defguard-for-end-users/changing-your-password.md) - [Enrollment & Onboarding](https://docs.defguard.net/2.2/using-defguard-for-end-users/enrollment.md) - [With internal Defguard SSO](https://docs.defguard.net/2.2/using-defguard-for-end-users/enrollment/with-internal-defguard-sso.md) - [With external SSO (Google/Microsoft/Custom)](https://docs.defguard.net/2.2/using-defguard-for-end-users/enrollment/with-external-sso-google-microsoft-custom.md) - [Setting up 2FA/MFA](https://docs.defguard.net/2.2/using-defguard-for-end-users/setting-up-2fa-mfa.md) - [Resolving Posture Check Failures](https://docs.defguard.net/2.2/using-defguard-for-end-users/resolving-posture-check-failures.md) - [Version support policy](https://docs.defguard.net/2.2/support-1/version-support-policy.md): This page explains how long each Defguard version receives updates and which versions are currently supported. - [How to submit an issue](https://docs.defguard.net/2.2/support-1/how-to-submit-an-issue.md) - [Sending support information](https://docs.defguard.net/2.2/support-1/sending-support-information.md) - [Core](https://docs.defguard.net/2.2/support-1/sending-support-information/core.md) - [Desktop Client](https://docs.defguard.net/2.2/support-1/sending-support-information/desktop-client.md) - [Mobile client](https://docs.defguard.net/2.2/support-1/sending-support-information/mobile-client.md) - [Using the Support Portal](https://docs.defguard.net/2.2/support-1/using-the-support-portal.md) - [Troubleshooting Guides](https://docs.defguard.net/2.2/support-1/troubleshooting-guides.md): Before contacting support, check whether your problem is covered here. - [Core](https://docs.defguard.net/2.2/support-1/troubleshooting-guides/core.md) - [h2 protocol error from reverse proxy](https://docs.defguard.net/2.2/support-1/troubleshooting-guides/core/h2-protocol-error-from-reverse-proxy.md) - [Unable to sign in with correct credentials](https://docs.defguard.net/2.2/support-1/troubleshooting-guides/core/unable-to-sign-in-with-correct-credentials.md) - [User lost access to their 2FA methods](https://docs.defguard.net/2.2/support-1/troubleshooting-guides/core/user-lost-access-to-their-2fa-methods.md) - [Enrollment URL Changed](https://docs.defguard.net/2.2/support-1/troubleshooting-guides/core/enrollment-url-changed.md) - [Failed to parse duration](https://docs.defguard.net/2.2/support-1/troubleshooting-guides/core/failed-to-parse-duration.md) - [Core cannot connect to Gateway or Edge after restart on single-host deployments](https://docs.defguard.net/2.2/support-1/troubleshooting-guides/core/core-cannot-connect-to-gateway-or-edge-after-restart-on-single-host-deployments.md) - [Lost access](https://docs.defguard.net/2.2/support-1/troubleshooting-guides/core/lost-access.md) - [Desktop Client](https://docs.defguard.net/2.2/support-1/troubleshooting-guides/desktop-client.md) - [Unix socket permission error on connect (Linux)](https://docs.defguard.net/2.2/support-1/troubleshooting-guides/desktop-client/unix-socket-permission-error-on-connect-linux.md) - [MFA location disconnected after X-time](https://docs.defguard.net/2.2/support-1/troubleshooting-guides/desktop-client/mfa-location-disconnected-after-x-time.md) - [High disk usage](https://docs.defguard.net/2.2/support-1/troubleshooting-guides/desktop-client/high-disk-usage.md) - [Failed to configure DNS (Linux)](https://docs.defguard.net/2.2/support-1/troubleshooting-guides/desktop-client/failed-to-configure-dns-linux.md) - [Failed to parse IP address](https://docs.defguard.net/2.2/support-1/troubleshooting-guides/desktop-client/failed-to-parse-ip-address.md) - [Disconnecting shows "Connection failed" (Linux / NetworkManager)](https://docs.defguard.net/2.2/support-1/troubleshooting-guides/desktop-client/disconnecting-shows-connection-failed-linux-networkmanager.md) - [resolvconf not found (Debian)](https://docs.defguard.net/2.2/support-1/troubleshooting-guides/desktop-client/resolvconf-not-found-debian.md) - [Unix socket does not exist (Linux)](https://docs.defguard.net/2.2/support-1/troubleshooting-guides/desktop-client/unix-socket-does-not-exist-linux.md) - [Disconnected after MFA timeout](https://docs.defguard.net/2.2/support-1/troubleshooting-guides/desktop-client/disconnected-after-mfa-timeout.md) - [Could not start MFA process](https://docs.defguard.net/2.2/support-1/troubleshooting-guides/desktop-client/could-not-start-mfa-process.md) - [Client connects but cannot reach VPN servers (MTU)](https://docs.defguard.net/2.2/support-1/troubleshooting-guides/desktop-client/client-connects-but-cannot-reach-vpn-servers-mtu.md) - [Desktop client real-time / auto sync does not work](https://docs.defguard.net/2.2/support-1/troubleshooting-guides/desktop-client/desktop-client-real-time-auto-sync-does-not-work.md) - [Windows client unable to connect](https://docs.defguard.net/2.2/support-1/troubleshooting-guides/desktop-client/windows-client-unable-to-connect.md) - ["All traffic" connection issues](https://docs.defguard.net/2.2/support-1/troubleshooting-guides/desktop-client/client-all-traffic-connection-issues.md) - [Windows installer exit codes](https://docs.defguard.net/2.2/support-1/troubleshooting-guides/desktop-client/windows-installer-exit-codes.md): Desktop Client windows installer exist codes list. - [VPN location is missing from client](https://docs.defguard.net/2.2/support-1/troubleshooting-guides/desktop-client/vpn-location-is-missing-from-client.md) - [Client crashes immediately on launch with "Error 71 (Protocol error) dispatching to Wayland display"](https://docs.defguard.net/2.2/support-1/troubleshooting-guides/desktop-client/client-crashes-immediately-on-launch-with-error-71-protocol-error-dispatching-to-wayland-display.md) - [Desktop Client connectivity issues](https://docs.defguard.net/2.2/support-1/troubleshooting-guides/desktop-client/desktop-client-connectivity-issues.md) - [Mobile Client](https://docs.defguard.net/2.2/support-1/troubleshooting-guides/mobile-client.md) - [Android "Failed host lookup" error](https://docs.defguard.net/2.2/support-1/troubleshooting-guides/mobile-client/android-failed-host-lookup-error.md) - [Edge Component](https://docs.defguard.net/2.2/support-1/troubleshooting-guides/edge-component.md) - [There was a network error. Can't reach Edge](https://docs.defguard.net/2.2/support-1/troubleshooting-guides/edge-component/there-was-a-network-error.-cant-reach-edge.md) - [Gateway](https://docs.defguard.net/2.2/support-1/troubleshooting-guides/gateway.md) - [No buffer space available](https://docs.defguard.net/2.2/support-1/troubleshooting-guides/gateway/no-buffer-space-available.md) - [TOTP / email codes for MFA do not work](https://docs.defguard.net/2.2/support-1/troubleshooting-guides/totp-email-codes-for-mfa-do-not-work.md) - [WebAuthn security keys](https://docs.defguard.net/2.2/support-1/troubleshooting-guides/webauthn-security-keys.md) - [Can access VPN but not local network or internet](https://docs.defguard.net/2.2/support-1/troubleshooting-guides/can-access-vpn-but-not-local-network-or-internet.md) - [How to verify the VPN is working](https://docs.defguard.net/2.2/support-1/troubleshooting-guides/how-to-verify-the-vpn-is-working.md) - [Testing VPN speed](https://docs.defguard.net/2.2/support-1/troubleshooting-guides/testing-vpn-speed.md): VPN Speed Testing Guide: Linux Server & Windows/Linux Clients - [Server migration and licence transfer](https://docs.defguard.net/2.2/support-1/server-migration-and-licence-transfer.md) - [Troubleshooting Guide V1 legacy backup](https://docs.defguard.net/2.2/support-1/troubleshooting.md): Here are some common issues / problems that are frequently encountered. - [Sending support information](https://docs.defguard.net/2.2/support-1/troubleshooting/sending-support-info.md) - [Client Windows installer exit codes](https://docs.defguard.net/2.2/support-1/troubleshooting/windows-installer-exit-codes.md): Desktop Client windows installer exist codes list. - [Client "All traffic" connection issues](https://docs.defguard.net/2.2/support-1/troubleshooting/client-all-traffic-connection-issues.md) - [WebAuthn security keys](https://docs.defguard.net/2.2/support-1/troubleshooting/webauthn-security-keys.md) - [Initial Setup Wizard: setting up from scratch](https://docs.defguard.net/2.2/tutorials/initial-setup-wizard-setting-up-from-scratch.md) - [Migrating from Defguard 1.6 to 2.0](https://docs.defguard.net/2.2/tutorials/migrating-from-defguard-1.6-to-2.0.md) - [Migrating a 1.6 one-liner installation to 2.x](https://docs.defguard.net/2.2/tutorials/migrating-from-defguard-1.6-to-2.0/migrating-a-1.6-one-liner-installation-to-2.x.md) - [Adding Edge component](https://docs.defguard.net/2.2/tutorials/adding-edge-component.md) - [Defguard Compliance](https://docs.defguard.net/2.2/compliance/defguard-compliance.md) - [Secure by design](https://docs.defguard.net/2.2/in-depth/secure-by-design.md) - [Architecture](https://docs.defguard.net/2.2/in-depth/architecture.md) - [How do VPN statistics work](https://docs.defguard.net/2.2/in-depth/architecture/how-do-vpn-statistics-work.md) - [Security concepts](https://docs.defguard.net/2.2/in-depth/architecture/security-concepts.md) - [MFA Architecture](https://docs.defguard.net/2.2/in-depth/architecture/architecture.md) - [Architecture Decision Records](https://docs.defguard.net/2.2/in-depth/architecture-decision-records.md): What are Defguard's Architecture Decision Records? - [2.3](https://docs.defguard.net/2.2/in-depth/architecture-decision-records/2.3.md) - [2.1](https://docs.defguard.net/2.2/in-depth/architecture-decision-records/2.1.md) - [2.0](https://docs.defguard.net/2.2/in-depth/architecture-decision-records/2.0.md) - [1.6](https://docs.defguard.net/2.2/in-depth/architecture-decision-records/1.6.md) - [1.5](https://docs.defguard.net/2.2/in-depth/architecture-decision-records/1.5.md) - [1.4](https://docs.defguard.net/2.2/in-depth/architecture-decision-records/1.4.md) - [1.3](https://docs.defguard.net/2.2/in-depth/architecture-decision-records/1.3.md) - [Pre-1.3](https://docs.defguard.net/2.2/in-depth/architecture-decision-records/pre-1.3.md) - [Client application feature compatibility](https://docs.defguard.net/2.2/in-depth/client-application-feature-compatibility.md) - [Defguard Open Organisation](https://docs.defguard.net/2.2/in-depth/defguard-open-organisation.md) - [Product Development Procedure](https://docs.defguard.net/2.2/in-depth/defguard-open-organisation/product-development-procedure.md) - [Roadmap](https://docs.defguard.net/2.2/in-depth/defguard-open-organisation/roadmap.md): This is a high-level project roadmap of planned features. - [BoringTun](https://docs.defguard.net/2.2/in-depth/boringtun.md) - [Performance and deployment sizing](https://docs.defguard.net/2.2/in-depth/performance-and-deployment-sizing.md) - [Contributing](https://docs.defguard.net/2.2/for-developers/contributing.md) - [Environment setup](https://docs.defguard.net/2.2/for-developers/dev-env-setup.md) - [Translations (core/web)](https://docs.defguard.net/2.2/for-developers/dev-env-setup/translations-web.md) - [Switching language](https://docs.defguard.net/2.2/for-developers/dev-env-setup/translations-web/switching-language.md) - [Adding translations](https://docs.defguard.net/2.2/for-developers/dev-env-setup/translations-web/adding-translations.md) - [Translations (client)](https://docs.defguard.net/2.2/for-developers/dev-env-setup/translations-client.md) - [Adding translations](https://docs.defguard.net/2.2/for-developers/dev-env-setup/translations-client/adding-translations.md) - [REST API](https://docs.defguard.net/2.2/for-developers/rest-api.md) - [Core](https://docs.defguard.net/2.2/for-developers/rest-api/core.md) - [System](https://docs.defguard.net/2.2/for-developers/rest-api/core/system.md) - [Authorize a request forwarded by a reverse proxy](https://docs.defguard.net/2.2/for-developers/rest-api/core/system/authorize-a-request-forwarded-by-a-reverse-proxy.md) - [Check instance health](https://docs.defguard.net/2.2/for-developers/rest-api/core/system/check-instance-health.md) - [Get information about this defguard instance](https://docs.defguard.net/2.2/for-developers/rest-api/core/system/get-information-about-this-defguard-instance.md) - [List connected components whose version is incompatible with this Core](https://docs.defguard.net/2.2/for-developers/rest-api/core/system/list-connected-components-whose-version-is-incompatible-with-this-core.md) - [Check whether an email address or username is already taken](https://docs.defguard.net/2.2/for-developers/rest-api/core/system/check-whether-an-email-address-or-username-is-already-taken.md) - [Get information about the current session](https://docs.defguard.net/2.2/for-developers/rest-api/core/system/get-information-about-the-current-session.md) - [Get information about a newer defguard release, if any](https://docs.defguard.net/2.2/for-developers/rest-api/core/system/get-information-about-a-newer-defguard-release-if-any.md) - [Auth](https://docs.defguard.net/2.2/for-developers/rest-api/core/auth.md) - [Authenticate a user](https://docs.defguard.net/2.2/for-developers/rest-api/core/auth/authenticate-a-user.md) - [Send an email MFA code](https://docs.defguard.net/2.2/for-developers/rest-api/core/auth/send-an-email-mfa-code.md) - [Enable email MFA](https://docs.defguard.net/2.2/for-developers/rest-api/core/auth/enable-email-mfa.md) - [Start email MFA setup](https://docs.defguard.net/2.2/for-developers/rest-api/core/auth/start-email-mfa-setup.md) - [Verify an email MFA code](https://docs.defguard.net/2.2/for-developers/rest-api/core/auth/verify-an-email-mfa-code.md) - [Log out and clear the session cookie](https://docs.defguard.net/2.2/for-developers/rest-api/core/auth/log-out-and-clear-the-session-cookie.md) - [Enable MFA](https://docs.defguard.net/2.2/for-developers/rest-api/core/auth/enable-mfa.md) - [Disable MFA](https://docs.defguard.net/2.2/for-developers/rest-api/core/auth/disable-mfa.md) - [Authenticate with a recovery code](https://docs.defguard.net/2.2/for-developers/rest-api/core/auth/authenticate-with-a-recovery-code.md) - [Enable TOTP](https://docs.defguard.net/2.2/for-developers/rest-api/core/auth/enable-totp.md) - [Generate a new TOTP secret](https://docs.defguard.net/2.2/for-developers/rest-api/core/auth/generate-a-new-totp-secret.md) - [Verify a TOTP code](https://docs.defguard.net/2.2/for-developers/rest-api/core/auth/verify-a-totp-code.md) - [Finish WebAuthn authentication](https://docs.defguard.net/2.2/for-developers/rest-api/core/auth/finish-webauthn-authentication.md) - [Finish WebAuthn registration](https://docs.defguard.net/2.2/for-developers/rest-api/core/auth/finish-webauthn-registration.md) - [Start WebAuthn registration](https://docs.defguard.net/2.2/for-developers/rest-api/core/auth/start-webauthn-registration.md) - [Start WebAuthn authentication](https://docs.defguard.net/2.2/for-developers/rest-api/core/auth/start-webauthn-authentication.md) - [User](https://docs.defguard.net/2.2/for-developers/rest-api/core/user.md) - [Get the currently authenticated user](https://docs.defguard.net/2.2/for-developers/rest-api/core/user/get-the-currently-authenticated-user.md) - [List users](https://docs.defguard.net/2.2/for-developers/rest-api/core/user/list-users.md) - [Create a user](https://docs.defguard.net/2.2/for-developers/rest-api/core/user/create-a-user.md) - [Check whether a username is available](https://docs.defguard.net/2.2/for-developers/rest-api/core/user/check-whether-a-username-is-available.md) - [Bulk delete users](https://docs.defguard.net/2.2/for-developers/rest-api/core/user/bulk-delete-users.md) - [Bulk disable users](https://docs.defguard.net/2.2/for-developers/rest-api/core/user/bulk-disable-users.md) - [Bulk enable users](https://docs.defguard.net/2.2/for-developers/rest-api/core/user/bulk-enable-users.md) - [Bulk start user enrollment](https://docs.defguard.net/2.2/for-developers/rest-api/core/user/bulk-start-user-enrollment.md) - [Change your own password](https://docs.defguard.net/2.2/for-developers/rest-api/core/user/change-your-own-password.md) - [Get a user](https://docs.defguard.net/2.2/for-developers/rest-api/core/user/get-a-user.md) - [Update a user](https://docs.defguard.net/2.2/for-developers/rest-api/core/user/update-a-user.md) - [Delete a user](https://docs.defguard.net/2.2/for-developers/rest-api/core/user/delete-a-user.md) - [Disable email MFA of a user](https://docs.defguard.net/2.2/for-developers/rest-api/core/user/disable-email-mfa-of-a-user.md) - [Disable MFA of a user](https://docs.defguard.net/2.2/for-developers/rest-api/core/user/disable-mfa-of-a-user.md) - [Delete an authorized OAuth2 application of a user](https://docs.defguard.net/2.2/for-developers/rest-api/core/user/delete-an-authorized-oauth2-application-of-a-user.md) - [Change the password of a user](https://docs.defguard.net/2.2/for-developers/rest-api/core/user/change-the-password-of-a-user.md) - [Send a password reset email to a user](https://docs.defguard.net/2.2/for-developers/rest-api/core/user/send-a-password-reset-email-to-a-user.md) - [Delete a security key of a user](https://docs.defguard.net/2.2/for-developers/rest-api/core/user/delete-a-security-key-of-a-user.md) - [Start remote desktop configuration](https://docs.defguard.net/2.2/for-developers/rest-api/core/user/start-remote-desktop-configuration.md) - [Start enrollment for a user](https://docs.defguard.net/2.2/for-developers/rest-api/core/user/start-enrollment-for-a-user.md) - [Disable TOTP of a user](https://docs.defguard.net/2.2/for-developers/rest-api/core/user/disable-totp-of-a-user.md) - [Group](https://docs.defguard.net/2.2/for-developers/rest-api/core/group.md) - [List group names](https://docs.defguard.net/2.2/for-developers/rest-api/core/group/list-group-names.md) - [Create a group](https://docs.defguard.net/2.2/for-developers/rest-api/core/group/create-a-group.md) - [List groups with their details](https://docs.defguard.net/2.2/for-developers/rest-api/core/group/list-groups-with-their-details.md) - [Get a group](https://docs.defguard.net/2.2/for-developers/rest-api/core/group/get-a-group.md) - [Add a member to a group](https://docs.defguard.net/2.2/for-developers/rest-api/core/group/add-a-member-to-a-group.md) - [Update a group](https://docs.defguard.net/2.2/for-developers/rest-api/core/group/update-a-group.md) - [Delete a group](https://docs.defguard.net/2.2/for-developers/rest-api/core/group/delete-a-group.md) - [Remove a member from a group](https://docs.defguard.net/2.2/for-developers/rest-api/core/group/remove-a-member-from-a-group.md) - [Assign multiple users to multiple groups](https://docs.defguard.net/2.2/for-developers/rest-api/core/group/assign-multiple-users-to-multiple-groups.md) - [Device](https://docs.defguard.net/2.2/for-developers/rest-api/core/device.md) - [List devices](https://docs.defguard.net/2.2/for-developers/rest-api/core/device/list-devices.md) - [List the devices of a user](https://docs.defguard.net/2.2/for-developers/rest-api/core/device/list-the-devices-of-a-user.md) - [Get a device](https://docs.defguard.net/2.2/for-developers/rest-api/core/device/get-a-device.md) - [Add a device for a user](https://docs.defguard.net/2.2/for-developers/rest-api/core/device/add-a-device-for-a-user.md) - [Update a device](https://docs.defguard.net/2.2/for-developers/rest-api/core/device/update-a-device.md) - [Delete a device](https://docs.defguard.net/2.2/for-developers/rest-api/core/device/delete-a-device.md) - [Get the WireGuard configuration of a user device](https://docs.defguard.net/2.2/for-developers/rest-api/core/device/get-the-wireguard-configuration-of-a-user-device.md) - [Network Device](https://docs.defguard.net/2.2/for-developers/rest-api/core/network-device.md) - [List network devices](https://docs.defguard.net/2.2/for-developers/rest-api/core/network-device/list-network-devices.md) - [Create a network device](https://docs.defguard.net/2.2/for-developers/rest-api/core/network-device/create-a-network-device.md) - [Suggest free IP addresses in a location](https://docs.defguard.net/2.2/for-developers/rest-api/core/network-device/suggest-free-ip-addresses-in-a-location.md) - [Check whether the given IP addresses are free in a location](https://docs.defguard.net/2.2/for-developers/rest-api/core/network-device/check-whether-the-given-ip-addresses-are-free-in-a-location.md) - [Start CLI setup for a new network device](https://docs.defguard.net/2.2/for-developers/rest-api/core/network-device/start-cli-setup-for-a-new-network-device.md) - [Start CLI setup for an existing network device](https://docs.defguard.net/2.2/for-developers/rest-api/core/network-device/start-cli-setup-for-an-existing-network-device.md) - [Get a network device](https://docs.defguard.net/2.2/for-developers/rest-api/core/network-device/get-a-network-device.md) - [Update a network device](https://docs.defguard.net/2.2/for-developers/rest-api/core/network-device/update-a-network-device.md) - [Get the WireGuard configuration of a network device](https://docs.defguard.net/2.2/for-developers/rest-api/core/network-device/get-the-wireguard-configuration-of-a-network-device.md) - [Static IP](https://docs.defguard.net/2.2/for-developers/rest-api/core/static-ip.md) - [List the IP addresses of all devices of a user, grouped by location](https://docs.defguard.net/2.2/for-developers/rest-api/core/static-ip/list-the-ip-addresses-of-all-devices-of-a-user-grouped-by-location.md) - [Assign static IP addresses to user devices](https://docs.defguard.net/2.2/for-developers/rest-api/core/static-ip/assign-static-ip-addresses-to-user-devices.md) - [Check whether a single static IP assignment would be valid](https://docs.defguard.net/2.2/for-developers/rest-api/core/static-ip/check-whether-a-single-static-ip-assignment-would-be-valid.md) - [List the IP addresses of a user device, grouped by location](https://docs.defguard.net/2.2/for-developers/rest-api/core/static-ip/list-the-ip-addresses-of-a-user-device-grouped-by-location.md) - [Network](https://docs.defguard.net/2.2/for-developers/rest-api/core/network.md) - [List networks](https://docs.defguard.net/2.2/for-developers/rest-api/core/network/list-networks.md) - [Create a network](https://docs.defguard.net/2.2/for-developers/rest-api/core/network/create-a-network.md) - [Count networks](https://docs.defguard.net/2.2/for-developers/rest-api/core/network/count-networks.md) - [List networks reduced to their ID and name](https://docs.defguard.net/2.2/for-developers/rest-api/core/network/list-networks-reduced-to-their-id-and-name.md) - [Import a network from a WireGuard configuration file](https://docs.defguard.net/2.2/for-developers/rest-api/core/network/import-a-network-from-a-wireguard-configuration-file.md) - [Get a network](https://docs.defguard.net/2.2/for-developers/rest-api/core/network/get-a-network.md) - [Update a network](https://docs.defguard.net/2.2/for-developers/rest-api/core/network/update-a-network.md) - [Delete a network](https://docs.defguard.net/2.2/for-developers/rest-api/core/network/delete-a-network.md) - [Get the WireGuard configuration of a device in a location](https://docs.defguard.net/2.2/for-developers/rest-api/core/network/get-the-wireguard-configuration-of-a-device-in-a-location.md) - [Assign imported devices to users](https://docs.defguard.net/2.2/for-developers/rest-api/core/network/assign-imported-devices-to-users.md) - [Location Stats](https://docs.defguard.net/2.2/for-developers/rest-api/core/location-stats.md) - [Get traffic statistics for all locations](https://docs.defguard.net/2.2/for-developers/rest-api/core/location-stats/get-traffic-statistics-for-all-locations.md) - [List connected network devices in a location](https://docs.defguard.net/2.2/for-developers/rest-api/core/location-stats/list-connected-network-devices-in-a-location.md) - [List connected users in a location](https://docs.defguard.net/2.2/for-developers/rest-api/core/location-stats/list-connected-users-in-a-location.md) - [List the connected devices of a user in a location](https://docs.defguard.net/2.2/for-developers/rest-api/core/location-stats/list-the-connected-devices-of-a-user-in-a-location.md) - [Get traffic statistics for a location](https://docs.defguard.net/2.2/for-developers/rest-api/core/location-stats/get-traffic-statistics-for-a-location.md) - [Gateway](https://docs.defguard.net/2.2/for-developers/rest-api/core/gateway.md) - [List gateways in all locations](https://docs.defguard.net/2.2/for-developers/rest-api/core/gateway/list-gateways-in-all-locations.md) - [Get a gateway](https://docs.defguard.net/2.2/for-developers/rest-api/core/gateway/get-a-gateway.md) - [Rename a gateway, or enable or disable it](https://docs.defguard.net/2.2/for-developers/rest-api/core/gateway/rename-a-gateway-or-enable-or-disable-it.md) - [Delete a gateway](https://docs.defguard.net/2.2/for-developers/rest-api/core/gateway/delete-a-gateway.md) - [Get the state of gateways in all locations](https://docs.defguard.net/2.2/for-developers/rest-api/core/gateway/get-the-state-of-gateways-in-all-locations.md) - [Get the state of gateways in a location](https://docs.defguard.net/2.2/for-developers/rest-api/core/gateway/get-the-state-of-gateways-in-a-location.md) - [Adopt a gateway in a location](https://docs.defguard.net/2.2/for-developers/rest-api/core/gateway/adopt-a-gateway-in-a-location.md) - [Stream the progress of gateway TLS setup](https://docs.defguard.net/2.2/for-developers/rest-api/core/gateway/stream-the-progress-of-gateway-tls-setup.md) - [Proxy](https://docs.defguard.net/2.2/for-developers/rest-api/core/proxy.md) - [List edge instances](https://docs.defguard.net/2.2/for-developers/rest-api/core/proxy/list-edge-instances.md) - [Stream the progress of Let's Encrypt certificate issuance on the edge](https://docs.defguard.net/2.2/for-developers/rest-api/core/proxy/stream-the-progress-of-lets-encrypt-certificate-issuance-on-the-edge.md) - [Stream the progress of edge (proxy) TLS setup](https://docs.defguard.net/2.2/for-developers/rest-api/core/proxy/stream-the-progress-of-edge-proxy-tls-setup.md) - [Get an edge instance](https://docs.defguard.net/2.2/for-developers/rest-api/core/proxy/get-an-edge-instance.md) - [Rename an edge instance, or enable or disable it](https://docs.defguard.net/2.2/for-developers/rest-api/core/proxy/rename-an-edge-instance-or-enable-or-disable-it.md) - [Delete an edge instance](https://docs.defguard.net/2.2/for-developers/rest-api/core/proxy/delete-an-edge-instance.md) - [Certificates](https://docs.defguard.net/2.2/for-developers/rest-api/core/certificates.md) - [Get the certificate of the internal certificate authority](https://docs.defguard.net/2.2/for-developers/rest-api/core/certificates/get-the-certificate-of-the-internal-certificate-authority.md) - [Get the certificates currently used by core and edge](https://docs.defguard.net/2.2/for-developers/rest-api/core/certificates/get-the-certificates-currently-used-by-core-and-edge.md) - [Set up the certificate for the internal (core) URL](https://docs.defguard.net/2.2/for-developers/rest-api/core/certificates/set-up-the-certificate-for-the-internal-core-url.md) - [Set up the certificate for the external (edge) URL](https://docs.defguard.net/2.2/for-developers/rest-api/core/certificates/set-up-the-certificate-for-the-external-edge-url.md) - [SSH Key](https://docs.defguard.net/2.2/for-developers/rest-api/core/ssh-key.md) - [Get SSH authorized keys in the \`authorized\_keys\` file format](https://docs.defguard.net/2.2/for-developers/rest-api/core/ssh-key/get-ssh-authorized-keys-in-the-authorized_keys-file-format.md) - [List SSH and GPG authentication keys of a user](https://docs.defguard.net/2.2/for-developers/rest-api/core/ssh-key/list-ssh-and-gpg-authentication-keys-of-a-user.md) - [Add an SSH or GPG authentication key to a user](https://docs.defguard.net/2.2/for-developers/rest-api/core/ssh-key/add-an-ssh-or-gpg-authentication-key-to-a-user.md) - [Delete an authentication key of a user](https://docs.defguard.net/2.2/for-developers/rest-api/core/ssh-key/delete-an-authentication-key-of-a-user.md) - [Rename an authentication key of a user](https://docs.defguard.net/2.2/for-developers/rest-api/core/ssh-key/rename-an-authentication-key-of-a-user.md) - [API Token](https://docs.defguard.net/2.2/for-developers/rest-api/core/api-token.md) - [List API tokens of a user](https://docs.defguard.net/2.2/for-developers/rest-api/core/api-token/list-api-tokens-of-a-user.md) - [Create an API token for a user](https://docs.defguard.net/2.2/for-developers/rest-api/core/api-token/create-an-api-token-for-a-user.md) - [Delete an API token of a user](https://docs.defguard.net/2.2/for-developers/rest-api/core/api-token/delete-an-api-token-of-a-user.md) - [Rename an API token of a user](https://docs.defguard.net/2.2/for-developers/rest-api/core/api-token/rename-an-api-token-of-a-user.md) - [Webhook](https://docs.defguard.net/2.2/for-developers/rest-api/core/webhook.md) - [List webhooks](https://docs.defguard.net/2.2/for-developers/rest-api/core/webhook/list-webhooks.md) - [Create a webhook](https://docs.defguard.net/2.2/for-developers/rest-api/core/webhook/create-a-webhook.md) - [Get a webhook](https://docs.defguard.net/2.2/for-developers/rest-api/core/webhook/get-a-webhook.md) - [Enable or disable a webhook](https://docs.defguard.net/2.2/for-developers/rest-api/core/webhook/enable-or-disable-a-webhook.md) - [Update a webhook](https://docs.defguard.net/2.2/for-developers/rest-api/core/webhook/update-a-webhook.md) - [Delete a webhook](https://docs.defguard.net/2.2/for-developers/rest-api/core/webhook/delete-a-webhook.md) - [Settings](https://docs.defguard.net/2.2/for-developers/rest-api/core/settings.md) - [Get instance settings](https://docs.defguard.net/2.2/for-developers/rest-api/core/settings/get-instance-settings.md) - [Replace instance settings](https://docs.defguard.net/2.2/for-developers/rest-api/core/settings/replace-instance-settings.md) - [Update selected instance settings](https://docs.defguard.net/2.2/for-developers/rest-api/core/settings/update-selected-instance-settings.md) - [Restore default branding settings](https://docs.defguard.net/2.2/for-developers/rest-api/core/settings/restore-default-branding-settings.md) - [Get enterprise settings](https://docs.defguard.net/2.2/for-developers/rest-api/core/settings/get-enterprise-settings.md) - [Update selected enterprise settings](https://docs.defguard.net/2.2/for-developers/rest-api/core/settings/update-selected-enterprise-settings.md) - [Get settings required to render the web UI](https://docs.defguard.net/2.2/for-developers/rest-api/core/settings/get-settings-required-to-render-the-web-ui.md) - [LDAP](https://docs.defguard.net/2.2/for-developers/rest-api/core/ldap.md) - [Preview the changes a full LDAP sync would make](https://docs.defguard.net/2.2/for-developers/rest-api/core/ldap/preview-the-changes-a-full-ldap-sync-would-make.md) - [Test the LDAP connection using the currently saved settings](https://docs.defguard.net/2.2/for-developers/rest-api/core/ldap/test-the-ldap-connection-using-the-currently-saved-settings.md) - [Test the LDAP connection](https://docs.defguard.net/2.2/for-developers/rest-api/core/ldap/test-the-ldap-connection.md) - [Activity Log](https://docs.defguard.net/2.2/for-developers/rest-api/core/activity-log.md) - [List activity log events](https://docs.defguard.net/2.2/for-developers/rest-api/core/activity-log/list-activity-log-events.md) - [List activity log streams](https://docs.defguard.net/2.2/for-developers/rest-api/core/activity-log/list-activity-log-streams.md) - [Create an activity log stream](https://docs.defguard.net/2.2/for-developers/rest-api/core/activity-log/create-an-activity-log-stream.md) - [Update an activity log stream](https://docs.defguard.net/2.2/for-developers/rest-api/core/activity-log/update-an-activity-log-stream.md) - [Delete an activity log stream](https://docs.defguard.net/2.2/for-developers/rest-api/core/activity-log/delete-an-activity-log-stream.md) - [ACL](https://docs.defguard.net/2.2/for-developers/rest-api/core/acl.md) - [List ACL aliases](https://docs.defguard.net/2.2/for-developers/rest-api/core/acl/list-acl-aliases.md) - [Create an ACL alias](https://docs.defguard.net/2.2/for-developers/rest-api/core/acl/create-an-acl-alias.md) - [Apply ACL aliases](https://docs.defguard.net/2.2/for-developers/rest-api/core/acl/apply-acl-aliases.md) - [Count ACL aliases by state](https://docs.defguard.net/2.2/for-developers/rest-api/core/acl/count-acl-aliases-by-state.md) - [Get an ACL alias](https://docs.defguard.net/2.2/for-developers/rest-api/core/acl/get-an-acl-alias.md) - [Update an ACL alias](https://docs.defguard.net/2.2/for-developers/rest-api/core/acl/update-an-acl-alias.md) - [Delete an ACL alias](https://docs.defguard.net/2.2/for-developers/rest-api/core/acl/delete-an-acl-alias.md) - [List ACL destinations](https://docs.defguard.net/2.2/for-developers/rest-api/core/acl/list-acl-destinations.md) - [Create an ACL destination](https://docs.defguard.net/2.2/for-developers/rest-api/core/acl/create-an-acl-destination.md) - [Apply ACL destinations](https://docs.defguard.net/2.2/for-developers/rest-api/core/acl/apply-acl-destinations.md) - [Count ACL destinations by state](https://docs.defguard.net/2.2/for-developers/rest-api/core/acl/count-acl-destinations-by-state.md) - [Get an ACL destination](https://docs.defguard.net/2.2/for-developers/rest-api/core/acl/get-an-acl-destination.md) - [Update an ACL destination](https://docs.defguard.net/2.2/for-developers/rest-api/core/acl/update-an-acl-destination.md) - [Delete an ACL destination](https://docs.defguard.net/2.2/for-developers/rest-api/core/acl/delete-an-acl-destination.md) - [List ACL rules](https://docs.defguard.net/2.2/for-developers/rest-api/core/acl/list-acl-rules.md) - [Create an ACL rule](https://docs.defguard.net/2.2/for-developers/rest-api/core/acl/create-an-acl-rule.md) - [Apply ACL rules](https://docs.defguard.net/2.2/for-developers/rest-api/core/acl/apply-acl-rules.md) - [Count ACL rules by state](https://docs.defguard.net/2.2/for-developers/rest-api/core/acl/count-acl-rules-by-state.md) - [Get an ACL rule](https://docs.defguard.net/2.2/for-developers/rest-api/core/acl/get-an-acl-rule.md) - [Update an ACL rule](https://docs.defguard.net/2.2/for-developers/rest-api/core/acl/update-an-acl-rule.md) - [Delete an ACL rule](https://docs.defguard.net/2.2/for-developers/rest-api/core/acl/delete-an-acl-rule.md) - [Device Posture](https://docs.defguard.net/2.2/for-developers/rest-api/core/device-posture.md) - [List device posture check policies](https://docs.defguard.net/2.2/for-developers/rest-api/core/device-posture/list-device-posture-check-policies.md) - [Create a device posture check policy](https://docs.defguard.net/2.2/for-developers/rest-api/core/device-posture/create-a-device-posture-check-policy.md) - [List available posture check versions](https://docs.defguard.net/2.2/for-developers/rest-api/core/device-posture/list-available-posture-check-versions.md) - [Get a device posture check policy](https://docs.defguard.net/2.2/for-developers/rest-api/core/device-posture/get-a-device-posture-check-policy.md) - [Update a device posture check policy](https://docs.defguard.net/2.2/for-developers/rest-api/core/device-posture/update-a-device-posture-check-policy.md) - [Delete a device posture check policy](https://docs.defguard.net/2.2/for-developers/rest-api/core/device-posture/delete-a-device-posture-check-policy.md) - [Duplicate a device posture check policy](https://docs.defguard.net/2.2/for-developers/rest-api/core/device-posture/duplicate-a-device-posture-check-policy.md) - [Assign locations to a device posture check policy](https://docs.defguard.net/2.2/for-developers/rest-api/core/device-posture/assign-locations-to-a-device-posture-check-policy.md) - [Assign device posture check policies to a location](https://docs.defguard.net/2.2/for-developers/rest-api/core/device-posture/assign-device-posture-check-policies-to-a-location.md) - [SNAT](https://docs.defguard.net/2.2/for-developers/rest-api/core/snat.md) - [List SNAT bindings in a location](https://docs.defguard.net/2.2/for-developers/rest-api/core/snat/list-snat-bindings-in-a-location.md) - [Create a SNAT binding for a user in a location](https://docs.defguard.net/2.2/for-developers/rest-api/core/snat/create-a-snat-binding-for-a-user-in-a-location.md) - [Update a SNAT binding](https://docs.defguard.net/2.2/for-developers/rest-api/core/snat/update-a-snat-binding.md) - [Delete a SNAT binding](https://docs.defguard.net/2.2/for-developers/rest-api/core/snat/delete-a-snat-binding.md) - [Open ID](https://docs.defguard.net/2.2/for-developers/rest-api/core/open-id.md) - [Start login through the external OpenID provider](https://docs.defguard.net/2.2/for-developers/rest-api/core/open-id/start-login-through-the-external-openid-provider.md) - [Finish login through the external OpenID provider](https://docs.defguard.net/2.2/for-developers/rest-api/core/open-id/finish-login-through-the-external-openid-provider.md) - [List OpenID providers](https://docs.defguard.net/2.2/for-developers/rest-api/core/open-id/list-openid-providers.md) - [Create an OpenID provider](https://docs.defguard.net/2.2/for-developers/rest-api/core/open-id/create-an-openid-provider.md) - [Get the current OpenID provider](https://docs.defguard.net/2.2/for-developers/rest-api/core/open-id/get-the-current-openid-provider.md) - [Get an OpenID provider](https://docs.defguard.net/2.2/for-developers/rest-api/core/open-id/get-an-openid-provider.md) - [Update an OpenID provider](https://docs.defguard.net/2.2/for-developers/rest-api/core/open-id/update-an-openid-provider.md) - [Delete an OpenID provider](https://docs.defguard.net/2.2/for-developers/rest-api/core/open-id/delete-an-openid-provider.md) - [Test the directory sync connection of the current OpenID provider](https://docs.defguard.net/2.2/for-developers/rest-api/core/open-id/test-the-directory-sync-connection-of-the-current-openid-provider.md) - [OAuth2](https://docs.defguard.net/2.2/for-developers/rest-api/core/oauth2.md) - [Get the OpenID Connect discovery document](https://docs.defguard.net/2.2/for-developers/rest-api/core/oauth2/get-the-openid-connect-discovery-document.md) - [List OAuth2/OpenID client applications](https://docs.defguard.net/2.2/for-developers/rest-api/core/oauth2/list-oauth2-openid-client-applications.md) - [Create an OAuth2/OpenID client application](https://docs.defguard.net/2.2/for-developers/rest-api/core/oauth2/create-an-oauth2-openid-client-application.md) - [Start the OAuth2 authorization flow](https://docs.defguard.net/2.2/for-developers/rest-api/core/oauth2/start-the-oauth2-authorization-flow.md) - [Finish the OAuth2 authorization flow after user consent](https://docs.defguard.net/2.2/for-developers/rest-api/core/oauth2/finish-the-oauth2-authorization-flow-after-user-consent.md) - [Get the JSON Web Key Set used to verify ID token signatures](https://docs.defguard.net/2.2/for-developers/rest-api/core/oauth2/get-the-json-web-key-set-used-to-verify-id-token-signatures.md) - [Exchange an authorization code or a refresh token for tokens](https://docs.defguard.net/2.2/for-developers/rest-api/core/oauth2/exchange-an-authorization-code-or-a-refresh-token-for-tokens.md) - [Get the claims of the authenticated user](https://docs.defguard.net/2.2/for-developers/rest-api/core/oauth2/get-the-claims-of-the-authenticated-user.md) - [Get an OAuth2/OpenID client application](https://docs.defguard.net/2.2/for-developers/rest-api/core/oauth2/get-an-oauth2-openid-client-application.md) - [Enable or disable an OAuth2/OpenID client application](https://docs.defguard.net/2.2/for-developers/rest-api/core/oauth2/enable-or-disable-an-oauth2-openid-client-application.md) - [Update an OAuth2/OpenID client application](https://docs.defguard.net/2.2/for-developers/rest-api/core/oauth2/update-an-oauth2-openid-client-application.md) - [Delete an OAuth2/OpenID client application](https://docs.defguard.net/2.2/for-developers/rest-api/core/oauth2/delete-an-oauth2-openid-client-application.md) - [Support](https://docs.defguard.net/2.2/for-developers/rest-api/core/support.md) - [Send the support data bundle to the defguard support address](https://docs.defguard.net/2.2/for-developers/rest-api/core/support/send-the-support-data-bundle-to-the-defguard-support-address.md) - [Send a test email to verify the SMTP configuration](https://docs.defguard.net/2.2/for-developers/rest-api/core/support/send-a-test-email-to-verify-the-smtp-configuration.md) - [Get instance configuration for support purposes](https://docs.defguard.net/2.2/for-developers/rest-api/core/support/get-instance-configuration-for-support-purposes.md) - [Get recent instance logs for support purposes](https://docs.defguard.net/2.2/for-developers/rest-api/core/support/get-recent-instance-logs-for-support-purposes.md) - [License](https://docs.defguard.net/2.2/for-developers/rest-api/core/license.md) - [Get information about the enterprise license and enabled features](https://docs.defguard.net/2.2/for-developers/rest-api/core/license/get-information-about-the-enterprise-license-and-enabled-features.md) - [Check a license key and return its limits](https://docs.defguard.net/2.2/for-developers/rest-api/core/license/check-a-license-key-and-return-its-limits.md) - [Models](https://docs.defguard.net/2.2/for-developers/rest-api/core/models.md)