Blog
Expert guides on WireGuard® VPN deployment, MFA implementation, and building zero-trust infrastructure for enterprise environments.

New Desktop Client, Device Posture Checks, dynamic Allowed IPs and Gateway on VyOS - meet Defguard 2.1
Defguard 2.1 brings a redesigned Desktop Client with tray mode, Device Posture verification before a WireGuard® connection is allowed, Allowed IPs generated from Firewall Rules for true least-privilege access, and official support for running Defguard Gateway on VyOS.

VyOS + Defguard = ownership and control of your VPN / Remote Access stack
Defguard is an official VyOS technology partner, and VyOS is an officially supported platform for running Defguard gateways. Together they form a sovereign networking stack: VyOS provides the networking foundation, Defguard adds identity-aware WireGuard® remote access with MFA.

Defguard 2.0 stable is now available
Defguard 2.0 stable is now available. This release introduces faster setup, high-availability improvements, firewall management updates, and static IP assignment for users and devices.

Defguard 2.0 is now feature-complete and entering the Beta stabilization phase.
Defguard 2.0 Beta 1 introduces guided migration from 1.x, built-in SSL termination for Core and Edge, new certificate settings, and a video tutorial center.

SonicWall vs Defguard - Why MSPs choose to migrate to Defguard
Compare SonicWall VPN and Defguard for enterprise remote access, focusing on security architecture, performance, and operational scalability.

Defguard vs NetBird: Enterprise VPN vs WireGuard® Mesh (2026)
NetBird is a cloud-first WireGuard® mesh VPN. Defguard is on-premises-first with isolated control plane and secure-by-design architecture. Compare features, security, and use cases.

Defguard 2.0 Release Alpha 2 is now available
Defguard 2.0 Alpha 2 is now nearly feature-complete. This release introduces faster setup, high-availability improvements, firewall management updates, and static IP assignment for users and devices.

Best OpenVPN Access Server Alternative: Top 3 Reasons to Switch to Defguard
OpenVPN Access Server alternative - Compare Defguard, modern WireGuard® based enterprise VPN

Defguard 2.0 Alpha now available for early user testing
Defguard 2.0 is a major step forward, featuring a redesigned interface, stronger security and simpler deployment. This post covers why the changes were made, what was rebuilt and how the new architecture enables high availability and future growth.

2025 Summary & Future Plans
A look back at Defguard's achievements in 2025 and a preview of what's coming in 2026, including the 2.0 release with easier deployment and UI redesign.

Defguard 1.6 brings Zero-touch Enrollment at Enterprise Scale for WireGuard®
Zero-touch WireGuard® VPN enrollment, Pre-logon VPN for Active Directory, Always-On VPN, native macOS/Windows clients, and enterprise-scale device provisioning. The most complete open-source WireGuard® VPN solution.

New Defguard on macOS: App Store Launch and Migration Guide
Defguard 1.6 brings the macOS client to the App Store. Learn why migration is required and how to move your configuration from version 1.5.

Understanding SSL VPN Limitations: Transport, Mobility and Modern Alternatives
Tired of users complaining your Fortinet VPN is slow? You're not alone. The problem is the SSL VPN protocol itself. See the facts & why even Fortinet is deprecating it.

MFA for WireGuard®: How to Meet NIS2 Directive Requirements
The NIS2 Directive mandates MFA for VPNs. Learn how to implement true, connection-level Multi-Factor Authentication for VPNs using the WireGuard® protocol with Defguard to ensure compliance and top-tier security.

Release 1.5 with Mobile apps, External SSO MFA, MFA with Biometry
This is the biggest, most feature packed release we have ever done! We've introduced 11 major features and nearly 100 bugfixes.

Why We Made Defguard Open Source
Discover how new Swiss laws are reshaping digital sovereignty — and why Defguard's open source model is leading the way in secure, transparent infrastructure.

Defguard Secures Strategic Partners and Raises EUR 1.2 Million in Pre-Seed Funding
Defguard has established strategic partnerships with top open-source and IT security experts in Poland and secured significant pre-seed funding of EUR 1.2 million, led by Hard2beat and including renowned industry leaders.

Secure Tauri/Windows Code Signing with Certum HSM
One of our products — Defguard & WireGuard® Desktop Client has multiple platform releases (Linux, MacOS, and Windows). We're building it with our beloved Rust and a great multi-platform desktop framework Tauri.

True Zero-Trust WireGuard® VPN with 2FA/MFA - Defguard security paltform released by teonite
Defguard offers a unique combination of security-related functionalities from identity management (OpenID/OAuth2/LDAP) to VPN (WireGuard®) to other features (Multi-Factor Authentication, Yubikey provisioning, Web3, Webhooks, etc.).