v2.1.0-beta1

🎉 Welcome to Defguard 2.1 Beta 1 🎉

This is a feature-complete beta release, not meant for production use. Penetration testing is still pending.

2.1 brings exciting new features:

• Device Posture Verification

• Generate Allowed IPs from Firewall Rules

• Completely redesigned Desktop Client - try it out by installing the package for your OS from the client release assets

🚀 Here you can find a quick tutorial on how to quickly launch 2.1α using one-line-script in pre-relase mode.

We want to get as much feedback as possible, so we encourage you to:
💬 open a GitHub discussion
🪲 report any missing features or bugs as issues

What's Changed

• invalidate cached app version by @wojcik91 in #3159
• add password reset disabled email by @wojcik91 in #3160
• Always on linux by @j-chmielewski in #3156
• LDAP dry run by @t-aleksander in #3161
• Allow ignoring validation of SMTP certs by @t-aleksander in #3177
• Add VyOS/OPNSense deployment method by @jakub-tldr in #3186
• implement better errors for cert upload by @filipslezaklab in #3187
• pin pnpm by @wojcik91 in #3188
• dev -> 2.1 update by @t-aleksander in #3183
• Fix cargo deny by @t-aleksander in #3353
• Allow disk encryption posture check on macOS by @moubctez in #3354
• Block service locations when postures are assigned by @j-chmielewski in #3327
• Don't check if reported version is present in versions array by @j-chmielewski in #3356
• UI fixes batch by @filipslezaklab in #3357
• Open a support ticket button by @moubctez in #3369
• Fix time synchronization crash during stats purge by @t-aleksander in #3372
• batch release fixes 2 by @filipslezaklab in #3385
• Exclude disabled users from license limits by @t-aleksander in #3383
• Fix logging in via oidc for the first time when exceeding limits by @t-aleksander in #3368
• Don't swallow SMTP error while running the SMTP test by @t-aleksander in #3393
• Fix expires in for tokens by @moubctez in #3396
• port e2e issue workflow by @wojcik91 in #3407
• Fix license limits frontend cache invalidation by @t-aleksander in #3410
• Fix limits invalidation, second attempt by @t-aleksander in #3418
• add missing SMTP setup in password reset test by @wojcik91 in #3420
• Fix saving LDAP settings after deleting the default admin by @t-aleksander in #3421
• add Edge UI settings E2E tests by @wojcik91 in #3422
• fix selected filter icon contrast by @j-chmielewski in #3425
• Posture assignment updates gateways by @j-chmielewski in #3424
• Block edit form for service locations if no/expired license by @j-chmielewski in #3432
• Show OpenID directory sync events in activity log by @jakub-tldr in #3430
• Mobile client version posture by @j-chmielewski in #3434
• Make error displayed when enabling a user over a limit clearer by @t-aleksander in #3442
• Cleanup in posture code by @moubctez in #3444
• generate shorter key IDs for OpenID tokens by @wojcik91 in #3448
• fix: avoid bidi request timeouts when calling blocking SMTP functions by @wojcik91 in #3450
• Reenrollment fixes by @j-chmielewski in #3451
• Add CLI manage commands by @jakub-tldr in #3452
• Updated Individual Contributor Assignment Agreement (#3453) by @kchudy in #3454
• enable external user password reset by @wojcik91 in #3457
• LDAP remote enrollment fix by @wojcik91 in #3460
• Update UI (fix table collapse) and small cleanups by @moubctez in #3461
• Dont clear phone number on enrollment by @t-aleksander in #3463
• Allow restricting synchronization scope for all directory sync providers by @t-aleksander in #3455
• License reactivation modal by @jakub-tldr in #3467
• Don't allow users to go back after completing Edge adoption by @t-aleksander in #3470
• Dont display manual device setup if only posture locations available by @t-aleksander in #3468
• Properly display Entra login error by @t-aleksander in #3464
• Prevent adding wireguard device for disabled users by @t-aleksander in #3471
• Group client traffic policy by @j-chmielewski in #3469
• Activity log connection events by @j-chmielewski in #3472
• CLI commands tweaks by @jakub-tldr in #3476
• Filter activity log by event date by @jakub-tldr in #3473
• Fix google field description, sort dry run table by deleted first by @t-aleksander in #3479
• Change label & Check license when adding gateway from VPN Overview by @jakub-tldr in #3482
• add Client behavior setting to disable bare WireGuard tunnels by @wojcik91 in #3481
• add table reference to help sidebar by @wojcik91 in #3486
• add SMTP backfill migration fix by @wojcik91 in #3494
• Properly handle email changes for directory sync providers by @t-aleksander in #3489
• Fix migration conflict by @t-aleksander in #3497
• add missing toggle in enrollment message settings by @wojcik91 in #3498
• Release UI fixes by @filipslezaklab in #3503
• Posture check authenticates the device with polling token by @j-chmielewski in #3500
• Update Swagger & automatically update openapi specification on gitbook by @jakub-tldr in #3504
• Fix logging in overwriting user groups when directory sync is enabled by @t-aleksander in #3519
• Service location posture checks by @j-chmielewski in #3508
• port workflow changes from stable branch by @wojcik91 in #3522
• add posture edit confirmation modals by @wojcik91 in #3517
• revoke active VPN sessions when a posture check is rejected by @j-chmielewski in #3523
• continue on postures step during network creation test by @j-chmielewski in #3524

Full Changelog: v2.1.0-alpha1...v2.1.0-beta1