2.7 Virtual Guarded Network (VGN) Module

The VGN module enables encrypted virtual network connections between branches and locations using WireGuard-based tunneling, as shown in Figure 2.7-1.

Figure 2.7-1 – VGN Management Interface

2.7.1 Main Navigation Tabs

The top-right corner of the module provides five navigation tabs for managing the virtual network, as shown in Figure 2.7.1-1.

Figure 2.7.1-1 – VGN Tab Navigation

2.7.2 VGN Chains Tab

The VGN Chains tab displays all configured virtual network tunnels as individual chain cards, as shown in Figure 2.7.2-1.

Figure 2.7.2-1 – VGN Chains View

2.7.2.1 Search Chains

A Search chains field at the top of the VGN Chains tab allows you to filter chains by name, making it easy to locate specific tunnels in large deployments.

2.7.2.2 Chain Card Structure

Each VGN chain is displayed as a card containing configuration parameters, topology visualization, and action buttons.

Card Header:

The card header displays the chain name (e.g., "Afyon Merkez arası") and the current operational status (e.g., OFFLINE).

Chain Parameters:

Topology Visualization:

Each card includes a visual chain builder showing the connection flow:

User Entry → Auto Detected (188.xxx.xxx.xxx) → Internet Exit

Description:

A descriptive text below the topology explains the chain's purpose (e.g., "Afyon şubesi ile merkez arasındaki şifreli bağlantı yolu").

2.7.2.3 Chain Action Buttons

Each chain card includes the following action buttons:

2.7.2.4 Editing a VGN Chain

Clicking the Edit button on a chain card opens the configuration form, as shown in Figure 2.7.2.4-1.

Figure 2.7.2.4-1 – Edit VGN Chain Form

The form is titled "Edit VGN Chain" and includes the following sections:

General Configuration:

Visual Chain Builder:

The topology visualization displays the connection path:

User Entry → Auto Detected (188.xxx.xxx.xxx) → Internet Exit

2.7.2.5 Managing Authorized Groups

The Authorized Groups section within the Edit form lists all groups with access to this chain, as shown in Figure 2.7.2.5-1.

Figure 2.7.2.5-1 – Authorized Groups Section

The groups table displays the following columns:

Click the Add Group button to authorize a new group. The form opens with the following parameters:

2.7.2.6 Managing Static IP Assignments

The Static IP Assignments section within the Edit form lists all manually assigned IP addresses, as shown in Figure 2.7.2.6-1.

Figure 2.7.2.6-1 – Static IP Assignments Section

The static IPs table displays the following columns:

Click the Add IP button to assign a new static IP. The form opens with the following parameters:

2.7.3 Access Tab

The Access tab manages user authentication and authorization through LDAP server integration and local user accounts, as shown in Figure 2.7.3-1.

Figure 2.7.3-1 – Access Tab View

2.7.3.1 LDAP Server Configuration

The LDAP Server Configuration section manages directory service integrations. A search field allows filtering through configured servers.

The LDAP servers table displays the following columns:

Click the Add LDAP Server button to configure a new LDAP connection. The form includes the following parameters:

2.7.3.2 Local Users

The Local Users section manages manually created user accounts. A search field allows filtering through configured users.

The local users table displays the following columns:

Click the Edit button on a user row to modify account details. The edit form includes:

2.7.3.3 User Groups

The User Groups section within Local Users manages group assignments. Click the Users Group button to view and manage groups.

The groups table displays:

Click Add Group to create a new user group for VPN access.

2.7.3.4 Adding a New User

Click the Add User button to create a new local user account. The form includes:

2.7.4 MFA Policies Tab

The MFA Policies tab manages multi-factor authentication requirements for VGN access, as shown in Figure 2.7.4-1.

Figure 2.7.4-1 – MFA Policies View

2.7.4.1 Policy List Table

The MFA policies table displays the following columns:

2.7.4.2 Adding a New MFA Policy

Click the Add New Policy button to create an MFA policy. The form includes the following parameters:

MFA Channels:

Select at least one MFA channel for this policy. Multiple channels can be enabled simultaneously:

Note: You must select at least one MFA channel. The system will display a validation message: "Please select at least one MFA channel."

2.7.4.3 Editing an MFA Policy

Clicking the Edit icon on a policy row opens the "Edit MFA Policy" form with the same parameters described in 2.7.4.2, pre-filled with the existing configuration.

2.7.5 Logs Tab

The Logs tab provides audit trail visibility with three sub-tabs for different log categories, as shown in Figure 2.7.5-1.

Figure 2.7.5-1 – VGN Logs View

All log views include a date range filter and a search text bar for narrowing results by specific criteria.

2.7.5.1 Connections Log

The Connections sub-tab displays successful VPN connection records with the following columns:

2.7.5.2 Failures Log

The Failures sub-tab displays unsuccessful connection attempts with the following columns:

2.7.5.3 IP Assignments Log

The IP Assignments sub-tab displays IP address lease history with the following columns:

2.7.6 Download Client

The Download Client button, located alongside the main navigation tabs, opens the client software download page, as shown in Figure 2.7.6-1.

Figure 2.7.6-1 – Download Client Page

The page is titled "Download Guardpot Client" with the subtitle "Choose your platform to download the secure VPN client."

2.7.6.1 Desktop Applications

2.7.6.2 Mobile Applications

2.7.6.3 System Requirements

All clients require internet connection and valid Guardpot credentials. Mobile apps require iOS 12+ or Android 6+.