This is a patch release for v2.1 that includes the following fixes for macOS:
- Fixed an issue where the client could freeze over time, causing the VPN connection to stop working.
- Improved VPN connection stability and fixed intermittent disconnections.
- Fixed an issue where the VPN could appear connected but stop working after switching networks.
- Improved automatic VPN reconnection when changing networks.
With v2.1 release of the Defguard Desktop Client, we introduce a brand-new interface, redesigned from scratch. It brings two separate views: a minimalistic “tray” version for day-to-day activities and a full “window” version for advanced tasks.
The new client is also designed to work with the latest Defguard 2.1 server capabilities. The version makes the device itself part of the access decision - admins define the security criteria a machine must meet, and non-compliant endpoints simply can't establish a connection - and it ships a rebuilt Desktop Client whose tray mode gets your users onto the VPN in two clicks.
🛡️ Device Posture verification - client and OS version, security updates, AD membership, antivirus, disk encryption,
⌨️ defguard-client - drive the client from a terminal, MFA included,
🔒 Allowed IPs generated from Firewall Rules - least-privilege configs, no network recon,
🐧 service locations on Linux - Always-on VPN from system boot,
🧩 official support for running Defguard Gateway on VyOS as a container.
More details with videos in this blogpost.
👇 Installation packages for the new client are available in the release assets. For macOS users, it is also available in the App Store.
🔐 As always, this release was pentested by ISEC, together with Striga.AI - all major findings were fixed before release. The full report will be published on our pentesting page.
📖 Documentation for the new features:
- Device Posture verification
- CLI client
- Generate Allowed IPs from Firewall Rules
- Service locations
- Running Gateway on VyOS
🚅 If you would like to test Defguard, we offer a quick and easy One-line install script.
⚠️ Device Posture verification, Service locations and Generate Allowed IPs from Firewall Rules are Enterprise features. Business features require free registration. 👉 https://defguard.net/get-free-business/ Once registered, simply apply your license to your instance.
We want to get as much feedback as possible, so we encourage you to: 💬 open a GitHub discussion 🪲 report any missing features or bugs as issues
What's Changed
Other Changes
- Fix mobile approve factor flickering issue by @filipslezaklab in https://github.com/DefGuard/client/pull/1143
- Bump version to 2.1.1 by @jakub-tldr in https://github.com/DefGuard/client/pull/1144
- Bump VPNExtension version by @jakub-tldr in https://github.com/DefGuard/client/pull/1145
- Fix nightly by @jakub-tldr in https://github.com/DefGuard/client/pull/1146
- Change unknown to archived on nightly by @jakub-tldr in https://github.com/DefGuard/client/pull/1147
- Fix network selector by @jakub-tldr in https://github.com/DefGuard/client/pull/1148
- Statically link crt by @t-aleksander in https://github.com/DefGuard/client/pull/1149
- Remove vc dependency by @t-aleksander in https://github.com/DefGuard/client/pull/1155
- Allow sleeping on Windows and prepare 2.1.2 release by @moubctez in https://github.com/DefGuard/client/pull/1174
- Unstuck macOS by @moubctez in https://github.com/DefGuard/client/pull/1181
- Fix handling CTRL-C by @moubctez in https://github.com/DefGuard/client/pull/1185
Full Changelog: https://github.com/DefGuard/client/compare/v2.1.0...v2.1.2
