t-aleksander
Aleksander
🎉 Welcome to Defguard 2.1 🎉
2.1 makes the device itself part of the access decision - admins define the security criteria a machine must meet, and non-compliant endpoints simply can't establish a connection - and it ships a rebuilt Desktop Client whose tray mode gets your users onto the VPN in two clicks.
🛡️ Device Posture verification - client and OS version, security updates, AD membership, antivirus, disk encryption,
🖥️ a redesigned Desktop Client with tray mode,
⌨️ defguard-client - drive the client from a terminal, MFA included,
🔒 Allowed IPs generated from Firewall Rules - least-privilege configs, no network recon,
🐧 service locations on Linux - Always-on VPN from system boot,
🧩 official support for running Defguard Gateway on VyOS as a container.
More details with videos in this blogpost.
🔐 As always, this release was pentested by ISEC, together with Striga.AI - all major findings were fixed before release. The full report will be published on our pentesting page.
📖 Documentation for the new features:
- Device Posture verification
- CLI client
- Generate Allowed IPs from Firewall Rules
- Service locations
- Running Gateway on VyOS
🚅 If you would like to test Defguard, we offer a quick and easy One-line install script.
Business features require free registration.
👉 https://defguard.net/get-free-business/
Once registered, simply apply your license to your instance.
We want to get as much feedback as possible, so we encourage you to:
💬 open a GitHub discussion
🪲 report any missing features or bugs as issues
What's Changed
- Implement posture checks by @j-chmielewski in #300
- Fix proxy warning page by @j-chmielewski in #301
- Report windows security update max age by @t-aleksander in #303
- Build debs for debian 12/ubuntu 22.04 by @jakub-tldr in #305
- Fix Dockerfile by @jakub-tldr in #306
- Fix posture errors separator by @j-chmielewski in #308
- chore: bump version to 2.1.0 (#309) by @wojcik91 in #310
- Hide footer when admin email is user email by @jakub-tldr in #311
- Revert "Hide footer when admin email is user email" by @jakub-tldr in #312
- Updated README by @kchudy in #314
- display OIDC error message by @j-chmielewski in #315
- Display OIDC error message (#315) by @j-chmielewski in #316
- Fix config in FreeBSD package by @moubctez in #318
- control Edge UI by Core settings by @wojcik91 in #319
- merge stable/2.x -> dev by @wojcik91 in #321
- Update proto by @filipslezaklab in #323
- Security patches (release/2.1) by @renovate[bot] in #351
- Security patches (release/2.1) by @renovate[bot] in #364
- chore: update proto submodule to handle disable_tunnels flag by @wojcik91 in #366
- Authenticate posture checks by @j-chmielewski in #367
- port remaining changes from stable branch by @wojcik91 in #369
- bump protos to stable/2.x by @j-chmielewski in #370
- bump core dependencies by @j-chmielewski in #371
- DG2608-18: Client IP address is taken from attacker-controlled forwarding headers and forwarded to Defguard Core by @moubctez in #383
- Migrate sbom ignore, bump deps by @t-aleksander in #384
- DG2608-19: [proxy] Enrollment and password reset session cookies are issued without the Secure attribute by @wojcik91 in #386
- Bump core dependency by @t-aleksander in #389
- Bump minimal version of components by @t-aleksander in #390
- Remove major docker tag from being automatically added by @t-aleksander in #393
Full Changelog: v2.0.1...v2.1.0
