faq generation fixed

Michał Gryczka · Michał Gryczka · commit 13875a2f23b6 · 2025-09-01T16:19:20.000+02:00
diff --git a/src/content/faq/acls.mdx b/src/content/faq/acls.mdx
@@ -1,6 +1,6 @@
 ---
 title: Does Defguard support ACLs?
-order: 4
+order: 5
 ---
 
 Yes, Defguard <a href="https://docs.defguard.net/enterprise/all-enteprise-features/access-control-list">supports Access Control Lists (ACLs)</a> starting from version 1.3. This feature enables administrators to define and manage precise access rules for network resources, specifying which users, groups, or devices can access particular destinations based on IP addresses, ports, and protocols. ACLs can be applied per location, allowing for granular control over network access. Additionally, administrators can set default policies (allow or deny) for unspecified traffic, ensuring a secure and tailored network environment.
diff --git a/src/content/faq/audit-logging.mdx b/src/content/faq/audit-logging.mdx
@@ -10,4 +10,4 @@ The event log supports **streaming events to external SIEM systems**, such as:
 * **Vector:** A lightweight observability pipeline program, enabling data forwarding to monitoring systems (Datadog, New Relic, Grafana Loki, Prometheus, InfluxDB, ClickHouse), SIEM and logging systems (ElasticSearch, Splunk HEC, Graylog, Mezmo, Axiom), and cloud services (AWS CloudWatch, Kinesis, S3, SNS/SQS; Google Cloud Pub/Sub, Monitoring, Storage).
 * **Logstash:** Open-source server-side software that ingests, processes, and forwards data for logging and analysis purposes.
 
-[Audit log and SIEM integration guide](https://docs.defguard.net/about/features-overview)
+[Audit log and SIEM integration guide](https://docs.defguard.net/features/activity-log)
diff --git a/src/content/faq/cryptographics.mdx b/src/content/faq/cryptographics.mdx
@@ -0,0 +1,9 @@
+---
+title: What cryptographic algorithms does WireGuard use in Defguard?
+order: 1
+---
+WireGuard in Defguard uses modern and most secure algorithms, not supporting outdated or insecure algorithms like 3DES, Blowfish, or RSA. These are:
+
+* **ChaCha20** (encryption)
+* **Poly1305** (authentication)
+* **Curve25519** (key exchange)
diff --git a/src/content/faq/defguard-wireguard.mdx b/src/content/faq/defguard-wireguard.mdx
@@ -9,13 +9,3 @@ Defguard uses the **WireGuard** protocol for VPN infrastructure access. It is **
 * **High performance:** WireGuard operates in the system kernel (Linux kernel module), providing 2–5 times faster data transfer than OpenVPN and is significantly more CPU efficient than IPsec.
 
 [Learn more about WireGuard and Zero-Trust VPN in the Defguard docs](https://docs.defguard.net/features/wireguard)
-
----
-
-**What cryptographic algorithms does WireGuard use in Defguard?**
-
-WireGuard in Defguard uses modern and most secure algorithms, not supporting outdated or insecure algorithms like 3DES, Blowfish, or RSA. These are:
-
-* **ChaCha20** (encryption)
-* **Poly1305** (authentication)
-* **Curve25519** (key exchange)
diff --git a/src/content/faq/external-idp.mdx b/src/content/faq/external-idp.mdx
@@ -12,4 +12,4 @@ Defguard is the only provider supporting multi-factor authentication using exter
 * **Zitadel**
 * Any other provider supporting the **OpenID Connect (OIDC)** protocol
 
-[See all supported external SSO providers](https://docs.defguard.net/about/features-overview)
+[See all supported external SSO providers](https://docs.defguard.net/features/external-openid-providers)
diff --git a/src/content/faq/identity-provider.mdx b/src/content/faq/identity-provider.mdx
@@ -9,4 +9,4 @@ As an IdP, Defguard supports multi-factor authentication using **TOTP, EMAIL one
 
 Thanks to its built-in IdP, Defguard provides a single solution for **one login/password and MFA system for logging into business applications and remote access simultaneously**.
 
-[Identity management and SSO details](https://docs.defguard.net/about/features-overview)
+[Identity management and SSO details](https://docs.defguard.net/features/openid-connect)
diff --git a/src/content/faq/integration-methods.mdx b/src/content/faq/integration-methods.mdx
@@ -8,4 +8,4 @@ Defguard supports the following integration methods:
 * **Full REST API**
 * For selected events, **WebHooks configuration**
 
-[Integrations overview: REST API & Webhooks](https://docs.defguard.net/about/features-overview)
+[Integrations overview: REST API & Webhooks](https://docs.defguard.net/features/integrations)
diff --git a/src/content/faq/mfa-architecture.mdx b/src/content/faq/mfa-architecture.mdx
@@ -5,7 +5,7 @@ order: 3
 
 Defguard is the **only solution that supports Multi-Factor Authentication (MFA) at the WireGuard protocol level**. This means that **every connection undergoes multi-factor authentication**, not just a 2FA process during application startup or configuration, making Defguard offer a **Zero-Trust VPN**. It has advanced MFA methods that support (beyond private and public keys):
 
-* **The first authentication step** (see question 4)
+* **The first authentication step**
 * **The second authentication step** using WireGuard PSK (Pre-Shared Key) keys, which enhances encryption and **protects against post-quantum attacks**.
 * **The third level** is the exchange of WireGuard PSK session keys.
 * **The fourth level** is the physical configuration of the Gateway server after the entire multi-factor session, without which the VPN server has no configuration for a given client/device.
diff --git a/src/content/faq/mobile.mdx b/src/content/faq/mobile.mdx
diff --git a/src/content/faq/platform-support.mdx b/src/content/faq/platform-support.mdx
@@ -5,4 +5,4 @@ order: 8
 
 Defguard supports WireGuard VPN on operating systems such as: **Linux, FreeBSD, OPNSense, NetBSD**
 
-[See platform support overview](https://docs.defguard.net/about/features-overview)
+[See platform support overview](https://docs.defguard.net/features/gateway)
diff --git a/src/content/faq/secure-configuration.mdx b/src/content/faq/secure-configuration.mdx
@@ -10,4 +10,4 @@ Defguard is the **only solution offering secure remote client configuration (Des
 * Configuration occurs using **tokens unique to the user and device**, valid for 24 hours from issuance and 10 minutes from their use.
 * All business operations are performed in a secure segment inaccessible from the public network, and only the result of these operations is passed to the proxy.
 
-[More on remote enrollment and secure configuration](https://docs.defguard.net/about/features-overview)
+[More on remote enrollment and secure configuration](https://docs.defguard.net/features/remote-user-enrollment)
diff --git a/src/content/faq/security-architecture.mdx b/src/content/faq/security-architecture.mdx
@@ -9,4 +9,4 @@ Defguard has a **secure architecture** that:
 * All events requiring access from a public network (e.g., the Internet) are handled by a **stateless and secure Proxy component**.
 * The Core component connects to the Proxy and **performs all business operations in a secure segment inaccessible from the public network, passing only the result of these operations to the proxy component**.
 
-[Architecture and security concepts](https://docs.defguard.net/about/features-overview)
+[Architecture and security concepts](https://docs.defguard.net/in-depth/architecture/security-concepts)
diff --git a/src/content/faq/user-sync.mdx b/src/content/faq/user-sync.mdx
@@ -7,4 +7,4 @@ Defguard supports **two-way synchronization of user and group directories** usin
 
 When Defguard is configured with an external identity provider, it supports synchronization of user and group directories with: **Google Workspace, Microsoft EntraID, and Okta**.
 
-[Learn about LDAP and external IdP sync](https://docs.defguard.net/about/features-overview)
+[Learn about LDAP and external IdP sync](https://docs.defguard.net/features/ldap-and-active-directory-integration)
diff --git a/src/pages/faq.astro b/src/pages/faq.astro

Original file line number	Diff line number	Diff line change
`@@ -9,4 +9,4 @@ As an IdP, Defguard supports multi-factor authentication using **TOTP, EMAIL one`
`9`	`9`
`10`	`10`	`Thanks to its built-in IdP, Defguard provides a single solution for one login/password and MFA system for logging into business applications and remote access simultaneously.`
`11`	`11`
`12`		`-[Identity management and SSO details](https://docs.defguard.net/about/features-overview)`
	`12`	`+[Identity management and SSO details](https://docs.defguard.net/features/openid-connect)`
Original file line number	Diff line number	Diff line change
`@@ -5,4 +5,4 @@ order: 8`
`5`	`5`
`6`	`6`	`Defguard supports WireGuard VPN on operating systems such as: Linux, FreeBSD, OPNSense, NetBSD`
`7`	`7`
`8`		`-[See platform support overview](https://docs.defguard.net/about/features-overview)`
	`8`	`+[See platform support overview](https://docs.defguard.net/features/gateway)`