I love Defguard for the stability, security and ease of operations. The Docker deployment option makes upgrades and deployment into a multi host and network isolated setup safe and full of choice for an optimal security footprint adapted to existing network infrastructure. The product already have such a rich enterprise functionality with OpenID support, also built-in TOTP to harden the VPN connection with an MFA option right out of the box. There is split tunneling support in the client and the multi platform client support for Defguard's own client is very impressive (iOS and Android delivered thru each platforms native app store). The separate enrollment and admin web management interfaces are drop dead gorgeous and the VPN client GUI is straight forward and to the point (thinking about easy of usability for end users).
Defguard's support in form of their the documentation leaves very little to ask for, I deployed a fairly complex setup using nothing but documentation and guides and the only bumps in the road were due to our environments already existing somewhat complex routing that had to be weaved into the Defguard VPN client traffic flows.
The pricing is very competitive from my perspective and I would like to give a shout out to Defguard for proving a starter plan for free (up to five users) for a small startup or a free lance worker. Giving back to the community in this way is such a big deal for me as a extra value when evaluating a new product / supplier!
Lastly, the product is built on top of WireGuard - this is such a wonderful choice when it comes to security and Defguard also makes it possible to use WireGuard clients instead of forcing customers to only be able to use their own Defguard VPN client. Not taking the road of vendor lock-in is sort of rare these days but it must be pointed out and commended! Review collected by and hosted on G2.com.
There could of course always be improvements - I think the site, group and ACL combination / glue could be improved but it is already on it's way in the new 2.x version so I would have to wait for this to roll out fully before I would really add this as a dislike. I am also very hopeful for the upgrade path from 1.6.x to the 2.x version and here there could be a potential for a disappointment if this is not managed in a stream lined way (most importantly when it comes to information / documentation with regards to supported scenarios etc). But it is quite to early to make this a dislike as well. Review collected by and hosted on G2.com.
