Merge branch 'docs' of github.com:DefGuard/docs into mobile-client

Author: jakub-tldr

SUMMARY.md

@@ -96,6 +96,7 @@
 ## Enterprise
 
 * [License](enterprise/license.md)
+* [Enterprise features](enterprise/enterprise-features.md)
 
 ## Using Defguard (for end users) <a href="#help" id="help"></a>
 

admin-and-features/ldap-and-active-directory-integration/two-way-ldap-and-active-directory-synchronization.md

@@ -1,5 +1,9 @@
 # Two-way LDAP and Active Directory synchronization
 
+{% hint style="warning" %}
+This is an enterprise feature. To use it, purchase our [enterprise license](../../enterprise/license.md) or ensure that your deployment does not exceed the [usage limits](../../enterprise/license.md#enterprise-is-free-up-to-certain-limits).
+{% endhint %}
+
 {% hint style="warning" %}
 This feature is available in Defguard version ≥ v1.3.0
 {% endhint %}

enterprise/enterprise-features.md

@@ -0,0 +1,15 @@
+# Enterprise features
+
+Here is a list of all Enterprise features:
+
+* [Ability to use external OIDC](../admin-and-features/external-openid-providers/) (Google/Microsoft/Okta/JumpCloud/Custom) to login or create defguard account.
+* [Two-way LDAP & Active Directory synchronization](../admin-and-features/ldap-and-active-directory-integration/two-way-ldap-and-active-directory-synchronization.md)
+* [Real time sync for client configurations](../admin-and-features/remote-user-enrollment/automatic-real-time-desktop-client-configuration.md)! **First WireGuard client to support this feature!**
+* Ability to define and enforce [Access Control List rules](../admin-and-features/access-control-list/) / firewall management
+* Ability to [stream the Activity & Audit logs to external SIEM systems](../activity-log/activity-log-streaming/)
+* Ability to use [external OIDC for secure remote enrollment and Desktop client configuration](../admin-and-features/external-openid-providers/external-oidc-secure-enrollment.md)
+* Ability to [disable for users to manage their devices](../admin-and-features/wireguard/behavior-customization.md#disable-for-users-to-manage-their-devices) (just admin will have this possibility).
+* Ability to [disable for users to configure WireGuard clients other then defguard desktop client](../admin-and-features/wireguard/behavior-customization.md#disable-ability-to-configure-other-vpn-clients-then-defguard-desktop-client).
+* Ability to [disable "All traffic" in the desktop client ](../admin-and-features/wireguard/behavior-customization.md#disable-all-traffic-option-in-the-desktop-client)- just "predefined" traffic by admins.
+* Ability to integrate with external tooling using [REST API](../integrations/api-tokens.md).
+

enterprise/license.md

@@ -1,6 +1,6 @@
 # License
 
-Defguard Enterprise offers a lot of functionalities that are not offered in the Open Source Open Core, like external OpenID Connect/SSO support, automatic\&real time desktop client synchronization and configuration, and much more (go to [All Enterprise Features](broken-reference) to see more).
+Defguard Enterprise offers a lot of functionalities that are not offered in the Open Source Open Core, like external OpenID Connect/SSO support, automatic\&real time desktop client synchronization and configuration, and much more (go to [All Enterprise Features](enterprise-features.md) to see more).
 
 ### Enterprise is free up to certain limits
 
@@ -57,6 +57,3 @@ To configure Defguard with the received license, please go to **Settings** -> en
 The license will be validated and detailed information about the license will be diplayed (validity period and the license type):
 
 <figure><img src="../.gitbook/assets/enterprise-settings.png" alt=""><figcaption><p>Defguard enterprise license settings</p></figcaption></figure>
-
-
-

help/mobile-client.md

@@ -1,4 +1,5 @@
 # Mobile Client
+
 {% hint style="warning" %}
 Mobile client is currently under development, current page should be considered as preview. Some parts of UI may look diffrent in upcoming release.
 {% endhint %}
@@ -48,26 +49,25 @@ Download for [iOS](https://defguard.net) or [Android](https://defguard.net) (Com
 
 
 {% hint style="warning" %}
-Your phone will need to add new VPN configuration, when you see the request, please allow it. Without this permission, Defguard cannot establish VPN connection. 
+Your phone will need to add new VPN configuration, when you see the request, please allow it. Without this permission, Defguard cannot establish VPN connection.
 {% endhint %}
+
 ### Connecting to location (without MFA)
 
 1. Choose desired instance from list
 2. Select location by clicking "Connect" next to it
 3. Choose if you want to route you traffic with:
-    - Predefined traffic (Faster for general browsing)
-    - All traffic (Full encryption and privacy)
+   * Predefined traffic (Faster for general browsing)
+   * All traffic (Full encryption and privacy)
 4. Press "Connect"
 
-
-
 ### Connecting to location (with MFA)
 
 1. Choose desired instance from list
 2. Select location by clicking "Connect" next to it
 3. Choose if you want to route you traffic with:
-    - Predefined traffic (Faster for general browsing)
-    - All traffic (Full encryption and privacy)
+   * Predefined traffic (Faster for general browsing)
+   * All traffic (Full encryption and privacy)
 4. Choose MFA method which is configured in your account
     - Email
     - Authenticator App
@@ -99,6 +99,7 @@ An instance contains locations. These are the servers you can connect to via VPN
 
 
 ### Supported MFA Methods
+
 Defguard Mobile supports multiple secure authentication methods:
 - **TOTP** – time‑based one‑time passwords (Authenticator apps)  
 - **Email** – receive verification codes via email  
@@ -108,7 +109,8 @@ Defguard Mobile supports multiple secure authentication methods:
 
 
 ## Additional features
-- Switch to **dark/light theme** — adapts to your system settings  
-- View **live connection stats**, logs & tunnel details  
-- Manage multiple instances
-- Choose if you want to route all or predefined traffic
+
+* Switch to **dark/light theme** — adapts to your system settings
+* View **live connection stats**, logs & tunnel details
+* Manage multiple instances
+* Choose if you want to route all or predefined traffic