I love Defguard for the stability, security and ease of operations. The Docker deployment option makes upgrades and deployment into a multi host and network isolated setup safe and full of choice for an optimal security footprint adapted to existing network infrastructure. The product already have such a rich enterprise functionality with OpenID support, also built-in TOTP to harden the VPN connection with an MFA option right out of the box. There is split tunneling support in the client and the multi platform client support for Defguard's own client is very impressive (iOS and Android delivered thru each platforms native app store). The separate enrollment and admin web management interfaces are drop dead gorgeous and the VPN client GUI is straight forward and to the point (thinking about easy of usability for end users). Defguard's support in form of their the documentation leaves very little to ask for, I deployed a fairly complex setup using nothing but documentation and guides and the only bumps in the road were due to our environments already existing somewhat complex routing that had to be weaved into the Defguard VPN client traffic flows. The pricing is very competitive from my perspective and I would like to give a shout out to Defguard for proving a starter plan for free (up to five users) for a small startup or a free lance worker. Giving back to the community in this way is such a big deal for me as a extra value when evaluating a new product / supplier! Lastly, the product is built on top of WireGuard - this is such a wonderful choice when it comes to security and Defguard also makes it possible to use WireGuard clients instead of forcing customers to only be able to use their own Defguard VPN client. Not taking the road of vendor lock-in is sort of rare these days but it must be pointed out and commended!