Defguard has proven to be a solid VPN solution that combines secure remote access with strong authentication capabilities. One of the features I appreciate most is its integration with Microsoft Entra ID (formerly Azure AD) through external OIDC authentication. The integration process is well thought out and enables a seamless user experience. A particularly valuable capability is the synchronisation of Microsoft groups and the ability to apply access policies and rules based on group membership. This significantly simplifies user administration and helps ensure that access rights remain aligned with organisational structures. The implementation does come with a slight learning curve, especially for administrators who are new to the platform. However, there is a good amount of documentation, community content, and implementation guidance available online, which answers most common questions. In cases where additional assistance is required, the support team has been responsive and helpful, providing quick answers and practical guidance. The user interface is another strong point. It is clean, polished, and intuitive, presenting the information administrators and users need without unnecessary complexity. Performance is one of Defguard's strongest areas. Because it is built on top of the WireGuard protocol, connections are fast, efficient, and reliable. From a pricing perspective, Defguard is not a free solution. However, the cost is justified by the maturity of the product, the available feature set, and the quality of support. Rather than assembling multiple separate components, you get a complete solution that addresses most VPN, MFA, and identity integration requirements out of the box. Overall, Defguard is a well-designed and reliable platform that provides strong Microsoft integration, flexible access management, responsive support, and a professional user experience. I would recommend it to organisations looking for a modern VPN solution with MFA and identity-provider integration.

I love Defguard for the stability, security and ease of operations. The Docker deployment option makes upgrades and deployment into a multi host and network isolated setup safe and full of choice for an optimal security footprint adapted to existing network infrastructure. The product already have such a rich enterprise functionality with OpenID support, also built-in TOTP to harden the VPN connection with an MFA option right out of the box. There is split tunneling support in the client and the multi platform client support for Defguard's own client is very impressive (iOS and Android delivered thru each platforms native app store). The separate enrollment and admin web management interfaces are drop dead gorgeous and the VPN client GUI is straight forward and to the point (thinking about easy of usability for end users). Defguard's support in form of their the documentation leaves very little to ask for, I deployed a fairly complex setup using nothing but documentation and guides and the only bumps in the road were due to our environments already existing somewhat complex routing that had to be weaved into the Defguard VPN client traffic flows. The pricing is very competitive from my perspective and I would like to give a shout out to Defguard for proving a starter plan for free (up to five users) for a small startup or a free lance worker. Giving back to the community in this way is such a big deal for me as a extra value when evaluating a new product / supplier! Lastly, the product is built on top of WireGuard - this is such a wonderful choice when it comes to security and Defguard also makes it possible to use WireGuard clients instead of forcing customers to only be able to use their own Defguard VPN client. Not taking the road of vendor lock-in is sort of rare these days but it must be pointed out and commended!