ΒΆ
Defguard Security Hardening
Restrict Defguard admin UI to management networks or VPN.
Enforce SSO/MFA for admin accounts.
Rotate WireGuard keys and revoke stale peers promptly.
Protect API tokens and audit enrollment events.