Example MFA Location configuration
MFA in Defguard desktop client
Attempting to use an MFA method that has not been enabled on the user's account.
.png)
.png)
.png)
.png)
.png)
.png)
.png)
.png)
.png)
.png)
 (1) (1).png)
.png)
.png)
Rule context menu
Rule context menu
.png)
.png)
.png)
.png)
.png)
.png)
.png)
.png)
.png)
.png)
.png)
ACL alias list
.png)
ACL alias list
.png)
Alias creation form
.png)
Alias creation form
.png)
.png)
.png)
You cannot delete aliases used by ACL rules
.png)
You cannot delete aliases used by ACL rules
.png)
ACL rule Destination section with Aliases field
.png)
ACL rule Destination section with Aliases field
 (1).png)
Alias select modal
.png)
Alias select modal
.png)
.png)
.png)
SSH component alias definition
.png)
SSH component alias definition
.png)
Postgres server destination alias
.png)
Postgres server destination alias
Activity log page
Activity log page
.png)
Event filter modal
.png)
Event filter modal
.png)
Time range filter modal
Time range filter modal
.png)
.png)
.png)
.png)
.png)
.png)
.png)
.png)
.png)
.png)
.png)
.png)
.png)
.png)
.png)
.png)
.png)
.png)
.png)
.png)
.png)
.png)
.png)
.png)
.png)
.png)
.png)
.png)
.png)
.png)
.png)
.png)
.png)
.png)
 (1) (1) (1) (1).png)
.png)
.png)
.png)
.png)
.png)
.png)
.png)
.png)
.png)
.png)
.png)
 (1) (1) (1) (1) (1).png)
.png)
 (1) (1) (1) (1) (1) (1) (1) (1) (1).png)
.png)
 (1) (1) (1) (1) (1) (1).png)
 (1) (1) (1).png)
.png)
 (1) (1).png)
.png)
 (1) (1).png)
.png)
 (1) (1).png)
.png)
 (1) (1).png)
.png)
 (1) (1).png)
.png)
.png)
.png)
.png)
.png)
.png)
.png)
.png)
.png)
.png)
.png)
.png)
.png)
.png)
.png)
.png)
 (1).png)
.png)
 (1).png)
.png)
 (1).png)
.png)
.png)
 (1) (1).png)
 (1) (1) (1).png)
.png)
.png)
.png)
.png)
.png)
.png)
.png)
.png)
.png)
.png)
.png)
.png)
.png)
.png)
.png)
.png)
.png)
.png)
 (1) (1) (1).png)
.png)
.png)
.png)
 (1).png)
button.
+Make sure you selected "Enable LDAP integration" as without it, the two-way synchronization won't work. After you fill out all the fields, test your configuration using the button.
The LDAP two-way synchronization has the following options available:
-.png)
.png)
.png)
.png)
.png)
+4. Enable the LDAP integration in the settings .png)
5. Now, the next two-way synchronization will remove all users from Defguard who have the synchronization group you just assigned in Defguard but don't have it in LDAP, effectively leaving you only with users that have the group in both sources.
## Synchronization mechanism overview
diff --git a/admin-and-features/network-devices.md b/features/network-devices.md
similarity index 83%
rename from admin-and-features/network-devices.md
rename to features/network-devices.md
index 917c01d..91b6f1f 100644
--- a/admin-and-features/network-devices.md
+++ b/features/network-devices.md
@@ -1,6 +1,6 @@
# Network devices
-Network devices are like regular user devices but can only be managed by admins and have access to only one network. They are designed to be used with the [Defguard CLI client](../../help/cli-client.md).
+Network devices are like regular user devices but can only be managed by admins and have access to only one network. They are designed to be used with the [Defguard CLI client](../using-defguard-for-end-users/cli-client.md).
### Adding a new network device
@@ -8,14 +8,14 @@ In order to add a new network device, navigate to the network device menu (selec
While in the network device menu, click the "Add new" button. You will be presented with a popup prompting you to select your method of setting up the network device.
-* **Defguard Command Line Client -** choose it to automatically configure your device with the [Defguard CLI client](../../help/cli-client.md)
+* **Defguard Command Line Client -** choose it to automatically configure your device with the [Defguard CLI client](../using-defguard-for-end-users/cli-client.md)
* **Manual WireGuard Client** - choose it if you don't want to use the Defguard CLI client. You will need to configure your network device manually with a WireGuard config file.
#### Using the Defguard CLI client
After selecting the first option you will be presented with the initial setup screen.
-.png)
.png)
.png)
.png)
.png)
 (1) (1) (1) (1) (1) (1) (1).png)
.png)
.png)
.png)
.png)
 (1) (1) (1) (1).png)
.png)
 (1) (1).png)
 (1) (1).png)
 (1) (1) (1) (1).png)
.png)
 (1) (1) (1) (1) (1).png)
.png)
 (1) (1) (1) (1).png)
.png)
 (1).png)
.png)
.png)
{% endhint %}
The specific API endpoint used for this is `/api/v1/ssh_authorized_keys`. It returns a list of public keys, each in a new line. It allows you to filter you query by specifying a username, a group or a combination of both.
diff --git a/features/user-snat-bindings.md b/features/user-snat-bindings.md
new file mode 100644
index 0000000..478b88c
--- /dev/null
+++ b/features/user-snat-bindings.md
@@ -0,0 +1,3 @@
+# User SNAT bindings
+
+## Please check [documentation of Defguard 1.5.0](https://app.gitbook.com/s/kHPDOBrb5X1TB8O3GsjW/features/user-snat-bindings)
diff --git a/admin-and-features/wireguard/README.md b/features/wireguard/README.md
similarity index 100%
rename from admin-and-features/wireguard/README.md
rename to features/wireguard/README.md
diff --git a/admin-and-features/wireguard/behavior-customization.md b/features/wireguard/behavior-customization.md
similarity index 100%
rename from admin-and-features/wireguard/behavior-customization.md
rename to features/wireguard/behavior-customization.md
diff --git a/admin-and-features/wireguard/create-your-vpn-network.md b/features/wireguard/create-your-vpn-network.md
similarity index 85%
rename from admin-and-features/wireguard/create-your-vpn-network.md
rename to features/wireguard/create-your-vpn-network.md
index 88a4407..78695fc 100644
--- a/admin-and-features/wireguard/create-your-vpn-network.md
+++ b/features/wireguard/create-your-vpn-network.md
@@ -104,7 +104,7 @@ By defining a group, assigning users to that group and then choosing this group(
By enabling this setting, this location **will require Multi-Factor Authentication** on each connection to this location.
{% hint style="danger" %}
-This feature is only supported in [**Defguard Desktop Client**](../../help/desktop-client/)**.**
+This feature is only supported in [**Defguard Desktop Client**](../../using-defguard-for-end-users/desktop-client/)**.**
{% endhint %}
Each connection in the client:
@@ -115,8 +115,8 @@ Each connection in the client:
{% hint style="warning" %}
For this feature to work, the user must:
-1. configure their [TOTP settings in the profile](../../help/setting-up-2fa-mfa.md#one-time-password)
-2. [SMTP settings needs to be set up](../../notifications/setting-up-smtp-for-email-notifications.md) and the user must enable Email tokens in their profile.
+1. configure their [TOTP settings in the profile](../../using-defguard-for-end-users/setting-up-2fa-mfa.md#one-time-password)
+2. [SMTP settings needs to be set up](../notifications/setting-up-smtp-for-email-notifications.md) and the user must enable Email tokens in their profile.
{% endhint %}
#### Keep alive interval
@@ -136,13 +136,5 @@ Recommended is more then 300.
#### Multi-Factor Authentication with external OIDC/SSO (Google/Microsoft/Okta/...)
{% hint style="info" %}
-This feature is currently [available in pre-release](../../deployment-strategies/pre-production-and-development-releases.md) version 1.5 - please help us test it!
+This feature is currently available in pre-release version 1.5
{% endhint %}
-
-On each location, you can choose if the Location should support our Internal MFA (configured by each user in their own profile) or (if you have [external OIDC/SSO configured](../external-openid-providers/)) external MFA:
-
-
Example MFA Location configuration
MFA in Defguard desktop client
Attempting to use an MFA method that has not been enabled on the user's account.
 (1) (1) (1) (1) (1) (1) (1) (1) (1) (1).png)
 (1) (1) (1) (1).png)
 (1) (1) (1) (1).png)
.png)
.png)
.png)
.png)
.png)
.png)
.png)
.png)
.png)
.png)
.png)
.png)
