# Defguard

Defguard is a self-hosted secure remote access platform that combines a WireGuard virtual private network, identity and access management, multi-factor authentication, and network access control to give organizations. It is open source and self-hosted, installable on Proxmox.

Canonical page: https://ourlocalhost.com/app/7047/defguard

## Description

Defguard is a self-hosted secure remote access platform that combines a WireGuard virtual private network, identity and access management, multi-factor authentication, and network access control to give organizations centralized control over private infrastructure.

## Platform availability

Available on 1 of 9 platforms: Proxmox.

## Links

- Documentation: https://docs.defguard.net
- Proxmox: https://community-scripts.github.io/ProxmoxVE/scripts?id=defguard
- GitHub: https://github.com/DefGuard/defguard

## Common questions

### Can Defguard let users sign in with Google or Microsoft?

Yes, it supports external OIDC providers including Google and Microsoft, and it can also sync users from LDAP or AD.

### Can I restrict access to specific internal networks by user or group?

Yes, firewall allow/deny rules can be applied per VPN location by user or group in real time.

### Is there an audit log for VPN and access events?

Defguard includes an activity log with filtering and search; real-time SIEM streaming is listed as an Enterprise feature.

### Does Defguard require calling outside services for authentication or data?

No, it is described as fully self-hosted with no external dependencies, and no data leaves your infrastructure.

### What main components are involved in a Defguard deployment?

The architecture uses Core for identity and policy, Edge as the public entry point, and Gateway to enforce network access policies.

---
Source: Our Local Host (https://ourlocalhost.com/app/7047/defguard), the self-hosted and open-source app directory.