# Dispel Documentation & Resources

## Documentation

- [Welcome](https://docs.dispel.com/welcome.md): Secure remote access that gets your team and vendors to the right devices in minutes.
- [About Dispel](https://docs.dispel.com/get-started/about-dispel.md): What the Dispel Zero Trust Engine is, why access works the way it does, and how a connection reaches a device inside an OT network.
- [Key Terminology](https://docs.dispel.com/get-started/key-terminology.md)
- [Getting Started with Dispel](https://docs.dispel.com/get-started/getting-started-with-dispel.md)
- [Org Admin Quick Start Guide](https://docs.dispel.com/get-started/getting-started-with-dispel/org-admin-quick-start-guide.md): The first-run path for an Organization Admin: set up your account and MFA, push a subnet, build a facility and a device, grant access, and verify a first connection.
- [Facility Admin Quick Start Guide](https://docs.dispel.com/get-started/getting-started-with-dispel/facility-admin-quick-start-guide.md): The core tasks for a Facility Admin: manage members, set device ACLs, grant and manage access windows, apply changes in bulk with groups, and connect to devices.
- [User Quick Start Guide](https://docs.dispel.com/get-started/getting-started-with-dispel/user-quick-start-guide.md)
- [Dashboard](https://docs.dispel.com/get-started/dashboard.md): One powerful overview into your global operations
- [Access Windows](https://docs.dispel.com/connect-to-your-systems/access-windows.md): Access windows grant time-boxed access to a facility for the users and groups you choose. This section covers creating, requesting, approving, and managing them, plus the risk score that helps you wei
- [Create an approved access window](https://docs.dispel.com/connect-to-your-systems/access-windows/create-an-approved-access-window.md): Create an approved access window from the single-panel create flow, granting the members you pick access to a facility on the schedule you set.
- [Request an access window](https://docs.dispel.com/connect-to-your-systems/access-windows/request-an-access-window.md): Request access to a facility when you can't yet connect, then track your pending request until an approver responds.
- [Approve or deny a request](https://docs.dispel.com/connect-to-your-systems/access-windows/approve-or-deny-a-request.md): Review a pending access request inside an Access Window — check the risk tier and the reason, add approver notes, and approve or deny.
- [Manage an access window](https://docs.dispel.com/connect-to-your-systems/access-windows/manage-an-access-window.md): Open a window from the Access Windows list to rename it, change its schedule, manage who and what it reaches, review its activity, and revoke access.
- [Access window risk scores](https://docs.dispel.com/connect-to-your-systems/access-windows/access-window-risk-scores.md): How Dispel scores each access window for risk, what the tiers mean, and how to read the user and device breakdown behind the pill.
- [Manage access request approvers](https://docs.dispel.com/connect-to-your-systems/access-windows/manage-access-request-approvers.md): Set who reviews and approves access requests for a facility, choose who gets an email when a request comes in, and understand what happens when a facility has no approvers.
- [Connection Methods](https://docs.dispel.com/connect-to-your-systems/connection-methods.md)
- [Virtual Desktops](https://docs.dispel.com/connect-to-your-systems/connection-methods/virtual-desktops.md)
- [Reserve a Virtual Desktop (Admin)](https://docs.dispel.com/connect-to-your-systems/connection-methods/virtual-desktops/reserve-a-virutal-desktop-admin.md): Reserve a Virtual Desktop from a stack as an admin, connect over RDP or in the browser, and delete it when you're done.
- [Reserve a Virtual Desktop (User)](https://docs.dispel.com/connect-to-your-systems/connection-methods/virtual-desktops/reserve-a-virtual-desktop-user.md): Reserve a Virtual Desktop from a stack you can reach, connect to it over RDP or in the browser, and release it when you're done.
- [Stacks](https://docs.dispel.com/connect-to-your-systems/connection-methods/virtual-desktops/stacks.md)
- [VDI Users](https://docs.dispel.com/connect-to-your-systems/connection-methods/virtual-desktops/vdi-users.md): The VDI-User role is scoped to reserving and connecting to Virtual Desktops. Assign it to people who need desktop access to your network but shouldn't manage users, devices, or stacks.
- [Connect with an RDP client](https://docs.dispel.com/connect-to-your-systems/connection-methods/virtual-desktops/connect-with-an-rdp-client.md): Use the host, username, and password Dispel shows for a reserved Virtual Desktop to connect from a desktop RDP client on Windows or macOS.
- [Browser Connect](https://docs.dispel.com/connect-to-your-systems/connection-methods/browser-connect.md)
- [Enable Browser Connect for a region](https://docs.dispel.com/connect-to-your-systems/connection-methods/browser-connect/enable-browser-connect-for-a-region.md)
- [Set up Browser Connect on a device](https://docs.dispel.com/connect-to-your-systems/connection-methods/browser-connect/set-up-browser-connect-on-a-device.md)
- [Connect to a Browser Connect Session (Admin)](https://docs.dispel.com/connect-to-your-systems/connection-methods/browser-connect/connect-to-a-browser-connect-session-admin.md)
- [Connect to a Browser Connect Session (User)](https://docs.dispel.com/connect-to-your-systems/connection-methods/browser-connect/connect-to-a-browser-connect-session-user.md)
- [Use a Browser Connect session](https://docs.dispel.com/connect-to-your-systems/connection-methods/browser-connect/use-a-browser-connect-session.md)
- [Join a shared Browser Connect session](https://docs.dispel.com/connect-to-your-systems/connection-methods/browser-connect/join-a-shared-session.md): Open a Browser Connect session-share invite link, sign in as the invited person, and join a session someone else is already running.
- [Dispel Application](https://docs.dispel.com/connect-to-your-systems/connection-methods/dispel-application.md)
- [Install the Dispel VPN Client (macOS)](https://docs.dispel.com/connect-to-your-systems/connection-methods/dispel-application/import-install-and-connect-with-the-dispel-vpn-client-macos.md): Follow this guide to install and connect with the Dispel VPN Client Application for macOS.
- [Install the Dispel VPN Client (Windows)](https://docs.dispel.com/connect-to-your-systems/connection-methods/dispel-application/import-install-and-connect-with-the-dispel-vpn-client-windows.md): Follow this guide to install and connect with the Dispel VPN Client Application for Windows machines.
- [Quick Connect](https://docs.dispel.com/connect-to-your-systems/quick-connect.md): Choose the default connect experience non-admin users see in a region and control which connection links are offered.
- [Infrastructure](https://docs.dispel.com/build-your-environment/infrastructure.md): How a Dispel deployment fits together, from organizations and regions down to the facilities, Wickets, and devices you reach through them.
- [Deployment Infrastructure](https://docs.dispel.com/build-your-environment/infrastructure/deployment-infrastructure.md): The components that make up a Dispel deployment and how they stack: organizations contain regions, regions contain facilities, and facilities contain the Wickets and devices you connect to.
- [Organization](https://docs.dispel.com/build-your-environment/infrastructure/deployment-infrastructure/organization.md)
- [Region](https://docs.dispel.com/build-your-environment/infrastructure/deployment-infrastructure/region.md)
- [Facilities](https://docs.dispel.com/build-your-environment/infrastructure/deployment-infrastructure/facilities.md): A facility is one site inside a region, with its own members, devices, and Wickets. Create facilities to control who can reach which systems at each site.
- [Create a Facility](https://docs.dispel.com/build-your-environment/infrastructure/deployment-infrastructure/facilities/create-a-facility.md): Create a facility to group the users and devices at a site within a region. A facility is where you later add members, device ACLs, and access windows.
- [Add a User to a Facility](https://docs.dispel.com/build-your-environment/infrastructure/deployment-infrastructure/facilities/add-a-user-to-a-facility.md): Add a member to a facility, change the facility role they hold, or remove them. A user must belong to the facility before you can grant them device ACLs or access windows there.
- [Wickets](https://docs.dispel.com/build-your-environment/infrastructure/deployment-infrastructure/wickets.md): A Wicket is the on-premise hardware or software appliance that connects your OT network to a Dispel region over an outbound encrypted tunnel.
- [Subnet Management](https://docs.dispel.com/build-your-environment/infrastructure/deployment-infrastructure/wickets/subnet-management.md): Push a subnet to a Wicket interface so the devices on that range can be reached through Dispel, then confirm the appliance actually applied it.
- [Device Management](https://docs.dispel.com/build-your-environment/infrastructure/device-management.md): Manage every device in your organization from one searchable table, then open a device to view its details, security findings, remote-access rules, and file transfer settings.
- [Add devices](https://docs.dispel.com/build-your-environment/infrastructure/device-management/create-a-device.md): Add devices to Dispel so you can grant users remote access to them — one at a time from a form, or many at once from a CSV file.
- [Manage a device](https://docs.dispel.com/build-your-environment/infrastructure/device-management/edit-device-configurations.md): Open the device panel to review and edit a device's attributes, reach its Remote Access, Findings, and File Transfer settings, or delete it.
- [Device findings](https://docs.dispel.com/build-your-environment/infrastructure/device-management/device-findings.md): Read a device's risk score, asset intelligence, and security findings on the Findings tab, and refresh them from your connected security integrations.
- [Device access (ACLs)](https://docs.dispel.com/build-your-environment/infrastructure/device-management/device-access-acls.md): Grant users per-user, per-protocol access to a device from the Remote Access tab's Access Rules list, and save the changes back to your infrastructure.
- [Protocols & ports](https://docs.dispel.com/build-your-environment/infrastructure/device-management/device-protocols-and-ports.md): View and manage the protocols and ports a device accepts connections on — the list that device Access Rules (ACLs) draw from.
- [Password vault](https://docs.dispel.com/build-your-environment/infrastructure/device-management/device-password-vault.md): Store a device's login credentials in a dedicated vault so members open pre-authenticated sessions through desktop shortcuts without ever seeing the password.
- [File shares](https://docs.dispel.com/build-your-environment/infrastructure/device-management/file-share.md): Set up a file share on a device so it can back uploads, downloads, and automated file transfers.
- [Upload & download files](https://docs.dispel.com/build-your-environment/infrastructure/device-management/device-file-upload-download.md): Set which protocols a device accepts for file uploads and downloads, then send and retrieve files with a live progress and safety-scan view.
- [Scheduled file transfers](https://docs.dispel.com/build-your-environment/infrastructure/device-management/file-transfer.md): Set up an automated, scheduled file transfer that moves or copies files from a source facility to a destination facility over Dispel's network, then accept or deny it at the destination.
- [Deployment Options](https://docs.dispel.com/build-your-environment/infrastructure/deployment-options.md)
- [Users](https://docs.dispel.com/manage-users-and-access/users.md): Manage everyone in your organization from one roster — members, pending invitees, and shared accounts — and set what each person can do.
- [Invite a User](https://docs.dispel.com/manage-users-and-access/users/invite-a-user.md): Invite people to your organization one at a time, and resend or revoke a pending invitation.
- [Invite Links](https://docs.dispel.com/manage-users-and-access/users/invite-links.md): Create a link that lets people sign themselves up to your organization by matching email domain, and choose the group new members join.
- [Manage a User](https://docs.dispel.com/manage-users-and-access/users/manage-a-user.md): Open a person's detail page to change their role, reset MFA, block or restore sign-in, review permissions, and archive or remove them.
- [Sign in to Dispel](https://docs.dispel.com/manage-users-and-access/users/sign-in.md): Sign back in to Dispel with email and password, single sign-on, or Active Directory, and finish any multi-factor step your organization requires.
- [Shared Accounts](https://docs.dispel.com/manage-users-and-access/users/shared-accounts.md): Allow multiple individuals to securely access a single account while maintaining full attribution and audit trails
- [Create a Dispel Account](https://docs.dispel.com/manage-users-and-access/users/create-a-dispel-account.md)
- [Groups](https://docs.dispel.com/manage-users-and-access/groups.md)
- [Organization Groups](https://docs.dispel.com/manage-users-and-access/groups/organization-groups.md)
- [Facility Groups](https://docs.dispel.com/manage-users-and-access/groups/facility-groups.md)
- [Roles & Permissions](https://docs.dispel.com/manage-users-and-access/permissions.md)
- [Roles & Capabilities](https://docs.dispel.com/manage-users-and-access/permissions/roles-and-capabilities.md): What each Dispel role can do across your organization, its regions, and its facilities.
- [Policy Builder](https://docs.dispel.com/secure-and-govern/policy-builder.md): Define who gets challenged for MFA when signing in to Dispel, which factors they must use, and whether certain users are blocked or allowed through.
- [Sign-in Policy Builder](https://docs.dispel.com/secure-and-govern/policy-builder/policy-flows.md): Build sign-in rules for your organization — connect audiences to MFA rulesets, add conditions, configure a default, and publish.
- [MFA Rulesets](https://docs.dispel.com/secure-and-govern/policy-builder/mfa-rulesets.md): Create reusable definitions of which authentication factors satisfy an MFA challenge, then reference them from your sign-in policy rules.
- [Audiences](https://docs.dispel.com/secure-and-govern/policy-builder/audiences.md): Define named groups of users for your sign-in policy. Use existing Dispel groups, facility groups, or build custom audiences with your own membership rules.
- [Authenticators](https://docs.dispel.com/secure-and-govern/authenticators.md): How Dispel aligns its authentication architecture with NIST SP 800-63B and provides verifiable evidence of compliance across AAL1–AAL3.
- [Periodic Authentication Challenge](https://docs.dispel.com/secure-and-govern/authenticators/periodic-authentication-challenge.md): Confirming your password before you change how you sign in.
- [Account Recovery & MFA Reset](https://docs.dispel.com/secure-and-govern/reset-multifactor-authentication.md): Reset a member's multi-factor authentication and restore access to locked-out accounts, including an Organization Admin who cannot sign in.
- [Security & Data Handling](https://docs.dispel.com/secure-and-govern/security-and-data-handling.md): Where to find Dispel's security program, data-protection measures, data residency, sub-processors, and the shared-responsibility model for a security review.
- [Identity Providers (SSO)](https://docs.dispel.com/secure-and-govern/identity-providers.md): Let your users sign in to Dispel with your existing identity provider. Connect Microsoft Entra ID, Okta, or PingIdentity over OAuth (OIDC) or SAML for single sign-on.
- [Active Directory](https://docs.dispel.com/secure-and-govern/identity-providers/active-directory.md): Use Active Directory as your identity provider so users sign in to Dispel with their Active Directory credentials over LDAPS.
- [Microsoft Entra ID](https://docs.dispel.com/secure-and-govern/identity-providers/microsoft-entra-id.md): Use Microsoft Entra ID (formerly Azure AD) as your identity provider so users sign in to Dispel with their Microsoft credentials over OAuth (OIDC) or SAML.
- [Okta](https://docs.dispel.com/secure-and-govern/identity-providers/okta.md): Use Okta as your identity provider so users sign in to Dispel with their Okta credentials over OAuth (OIDC) or SAML.
- [PingIdentity](https://docs.dispel.com/secure-and-govern/identity-providers/ping-identity.md): Use PingIdentity as your identity provider for federated single sign-on, so users access Dispel with their existing enterprise credentials over OAuth (OIDC) or SAML.
- [Dispel Identity](https://docs.dispel.com/secure-and-govern/dispel-identity.md): Dispel Identity verifies who a person is and links them to the accounts they use.
- [Getting Started](https://docs.dispel.com/secure-and-govern/dispel-identity/getting-started.md): Turn on verification for the people you choose, then manage their access by person.
- [Use Cases](https://docs.dispel.com/secure-and-govern/dispel-identity/use-cases.md): Organizations use Dispel Identity to verify who is behind the accounts that reach their systems. What changes between setups is who you verify and why.
- [Identity Registers](https://docs.dispel.com/secure-and-govern/dispel-identity/identity-registers.md): A reference to the Settings → Identity tabs: what each register and settings tab lists, and what you use it for.
- [Data Backup & Recovery](https://docs.dispel.com/secure-and-govern/data-backup-and-recovery.md)
- [Compliance](https://docs.dispel.com/secure-and-govern/overview.md): Automated audit readiness with Dispel for NERC CIP, NIST 800-53, and NIS2 controls.
- [Supported Frameworks](https://docs.dispel.com/secure-and-govern/overview/supported-frameworks.md): Dispel Compliance supports a wide range of frameworks.
- [Getting Started](https://docs.dispel.com/secure-and-govern/overview/compliance-and-audit-readiness.md): Automated audit readiness with Dispel for NERC CIP, NIST 800-53, and NIS2 controls.
- [Session Forensics - Risk Factor Analysis](https://docs.dispel.com/monitor-and-investigate/risk-factor-analysis.md): Understand how Dispel calculates user event risk factors.
- [User & Entity Behavior Analytics](https://docs.dispel.com/monitor-and-investigate/user-and-entity-behavior-analytics.md): A technical review of Dispel UEBA for risk factor analysis
- [UEBA Baselines Dashboard](https://docs.dispel.com/monitor-and-investigate/user-and-entity-behavior-analytics/ueba-baselines-dashboard.md)
- [Data Exports](https://docs.dispel.com/monitor-and-investigate/data-exports.md)
- [Reading a UEBA Baselines Export](https://docs.dispel.com/monitor-and-investigate/data-exports/reading-a-ueba-baselines-export.md): The Export as JSON button on the UEBA Baselines page downloads the org's baseline state as a json file. This page is a field reference for that file.
- [Reading a Session Forensics Export](https://docs.dispel.com/monitor-and-investigate/data-exports/reading-a-session-forensics-export.md): The Export as JSON button on a Session Forensics event downloads the whole event record as a json file. This page is a field reference for that file.
- [Logs](https://docs.dispel.com/monitor-and-investigate/logs.md): Investigate activity across your organization with the activity log, monitor live Browser Connect utilization, and play back recorded sessions.
- [Topology](https://docs.dispel.com/monitor-and-investigate/topology.md): Browse every region, facility, Wicket, and device in your deployment from one view, and read each entity's status and risk.
- [Reports](https://docs.dispel.com/monitor-and-investigate/reports.md): Generate a report on virtual desktop usage, Browser Connect sessions, Wicket health, or user permissions, and export it as a CSV.
- [Integrations](https://docs.dispel.com/integrate-and-administer/integrations.md): Connect the tools your team already uses to Dispel. Manage identity providers, asset-discovery sources, and other vendors from one place, and control how often each connection syncs.
- [Asset Discovery](https://docs.dispel.com/integrate-and-administer/integrations/asset-discovery.md): Pull the OT and IoT asset inventory your security tools have already discovered into Dispel as devices. Connect Nozomi, Armis, Forescout, Dragos, TXOne, Tenable, Darktrace, or Claroty xDome and map th
- [Nozomi Networks](https://docs.dispel.com/integrate-and-administer/integrations/asset-discovery/nozomi.md): Connect Nozomi Networks (Vantage or Guardian) to pull your OT and IoT asset inventory into Dispel, map vendor sites to Wickets, and keep device data and vulnerability findings in sync.
- [Armis](https://docs.dispel.com/integrate-and-administer/integrations/asset-discovery/armis.md): Connect your Armis tenant to pull discovered managed and unmanaged assets into Dispel, map Armis sites to Wickets, and keep device data and vulnerability findings in sync.
- [Forescout](https://docs.dispel.com/integrate-and-administer/integrations/asset-discovery/forescout.md): Connect Forescout eyeControl, through its Web API on your Enterprise Manager appliance, to pull discovered hosts into Dispel as devices — mapped to a Wicket and refreshed on a recurring sync.
- [Dragos](https://docs.dispel.com/integrate-and-administer/integrations/asset-discovery/dragos.md): Connect the Dragos Platform (SiteStore) to pull discovered OT assets into Dispel, map Dragos sensors to Wickets, and keep device data and vulnerability findings in sync.
- [TXOne](https://docs.dispel.com/integrate-and-administer/integrations/asset-discovery/txone.md): Connect your TXOne StellarOne console to pull protected OT endpoints into Dispel as devices, mapped to a Wicket and refreshed on a recurring sync.
- [Tenable OT Security](https://docs.dispel.com/integrate-and-administer/integrations/asset-discovery/tenable.md): Connect Tenable OT Security, through its REST API on your on-premise appliance, to pull discovered OT assets into Dispel as devices — with their known vulnerabilities — mapped to a Wicket and refreshe
- [Darktrace](https://docs.dispel.com/integrate-and-administer/integrations/asset-discovery/darktrace.md): Connect Darktrace, through the ActiveAI Security Portal API, to pull discovered devices into Dispel — enriched with behavioural Model Alerts and a deep link to the Threat Visualizer — mapped to a Wick
- [Claroty xDome](https://docs.dispel.com/integrate-and-administer/integrations/asset-discovery/claroty-xdome.md): Connect Claroty xDome, through its cloud API, to pull discovered OT, IoT, and IIoT devices into Dispel — enriched with vulnerability findings — mapped to a Wicket.
- [Service Now](https://docs.dispel.com/integrate-and-administer/integrations/service-now.md)
- [SOC SIEM Forwarding](https://docs.dispel.com/integrate-and-administer/integrations/soc-siem-forwarding.md)
- [OIDC Group Mapping](https://docs.dispel.com/integrate-and-administer/integrations/oidc-group-mapping.md)
- [Settings](https://docs.dispel.com/integrate-and-administer/settings.md)
- [General](https://docs.dispel.com/integrate-and-administer/settings/general.md): Rename your organization and review the additional services enabled for it.
- [Security](https://docs.dispel.com/integrate-and-administer/settings/security.md): Configure organization-wide sign-in and account security policies, including MFA, single sign-on, access windows, password rules, and shared accounts.
- [Requiring MFA in your organization](https://docs.dispel.com/integrate-and-administer/settings/security/requiring-mfa.md): Organization owners can require users to enable multi-factor authentication for their accounts, making it harder for malicious actors to access systems.
- [Exempt shared accounts from MFA](https://docs.dispel.com/integrate-and-administer/settings/security/requiring-mfa/shared-accounts.md): Take shared accounts out of your organization's MFA requirement, and what that leaves in place.
- [Exempt SSO users from MFA](https://docs.dispel.com/integrate-and-administer/settings/security/requiring-mfa/sso-users.md): Hand MFA to your identity provider for members who sign in through it, and see who that covers.
- [Branding](https://docs.dispel.com/integrate-and-administer/settings/branding.md): Customize your organization's brand colors.
- [Browser Connect](https://docs.dispel.com/integrate-and-administer/settings/browser-connect.md): Configure organization-wide Browser Connect session behavior — recording visibility, kiosk mode, idle and maximum-duration timeouts, recording idle sensitivity, and the CA bundle used to validate targ
- [Organization Message](https://docs.dispel.com/integrate-and-administer/settings/organization-message.md): Post a closable banner across your organization's Dashboard to announce changes or warn members, on a schedule you set.
- [Points of Contact](https://docs.dispel.com/integrate-and-administer/settings/points-of-contact.md): Record the email addresses your organization keeps as its points of contact for billing, account communications, user help, and security.
- [Account Settings](https://docs.dispel.com/integrate-and-administer/settings/account.md): Manage your personal Dispel settings — profile, language, notifications, password, two-factor authentication, and theme.
- [Two-factor authentication](https://docs.dispel.com/integrate-and-administer/settings/account/two-factor-authentication.md): Set up multi-factor authentication on your Dispel account with an authenticator app or a security key, and keep your recovery codes safe.
- [Notifications](https://docs.dispel.com/integrate-and-administer/settings/account/notifications.md): Choose which email notifications you receive from your Account page.
- [Themes](https://docs.dispel.com/integrate-and-administer/settings/account/themes.md): Tailor how Dispel looks and how it conveys meaning through color
- [Session Length](https://docs.dispel.com/integrate-and-administer/settings/session-length.md)
- [Switch Organizations](https://docs.dispel.com/integrate-and-administer/settings/switch-organizations.md): Change which organization is active when your account belongs to more than one, and choose which one you start in at sign-in.
- [Delete Organization](https://docs.dispel.com/integrate-and-administer/settings/delete-organization.md): Ask Dispel support to delete your whole organization, and check what to save before you start the request.
- [Billing](https://docs.dispel.com/integrate-and-administer/billing.md)
- [Delivery & Acceptance Documentation](https://docs.dispel.com/integrate-and-administer/billing/delivery-and-acceptance-documentation.md)
- [Site Console](https://docs.dispel.com/site-console/site-console.md): Site Console is the administration interface for your on-premises Dispel appliance. Use it to check service health, manage Wickets, run diagnostics, and keep the appliance updated.
- [Verify your appliance](https://docs.dispel.com/site-console/site-console/verify-your-appliance.md): Once the setup wizard is complete, sign in to the Site Console and run through these checks to confirm the appliance is healthy and ready to use.
- [Dashboard](https://docs.dispel.com/site-console/site-console/dashboard.md): What each card on the Site Console dashboard shows, what a healthy appliance looks like, and which readings need action.
- [Wicket Tunnel Encryption](https://docs.dispel.com/reference/wicket-tunnel-encryption.md): A Wicket's IPsec tunnel to its Dispel region uses IKEv2, AES-256-GCM, and ECDH P-384, and authenticates with certificates that Dispel issues.
- [Connection & session troubleshooting](https://docs.dispel.com/troubleshooting/connection-and-session-troubleshooting.md): Match a connection or session problem to its likely cause and fix, across Virtual Desktops, Browser Connect, and the Dispel VPN client.
- [Sign-in & MFA troubleshooting](https://docs.dispel.com/troubleshooting/sign-in-and-mfa-troubleshooting.md): Work through SSO and Active Directory sign-in failures, MFA prompt and enrollment problems, and account lockout in Dispel.
- [Access & access-window troubleshooting](https://docs.dispel.com/troubleshooting/access-and-access-window-troubleshooting.md): What to check when access to a facility or device is blocked: access denied at connect time, a request no one approves, an expired window, and a device that won't connect.

## Regulatory Framework Mappings

- [Introduction](https://docs.dispel.com/regulatory-framework-mappings/master.md): This guide shows how Dispel's technology supports regulatory and framework requirements and guidelines.
- [Accessibility Statement](https://docs.dispel.com/regulatory-framework-mappings/wcag-accessibility/accessibility-statement.md): Adherence to Web Content Accessibility Guidelines (WCAG 2.1) and ISO/IEC 40500:2012
- [WITAF #503](https://docs.dispel.com/regulatory-framework-mappings/awwa-security-guidance/process-control-system-security-guidance-for-the-water-sector-witaf-503.md)
- [BSI Rules on Remote Maintenance in Industrial Environments](https://docs.dispel.com/regulatory-framework-mappings/german-remote-maintenance-bsi-cs-108/bsi-rules-on-remote-maintenance-in-industrial-environments.md): BSI-CS 108, Version 1.00
- [Overview](https://docs.dispel.com/regulatory-framework-mappings/dhs-tic/overview.md)
- [Vol. 2: Reference Architecture](https://docs.dispel.com/regulatory-framework-mappings/dhs-tic/vol.-2-reference-architecture.md)
- [Vol. 3: Security Capabilities](https://docs.dispel.com/regulatory-framework-mappings/dhs-tic/vol.-3-security-capabilities.md): April 2021, Version 1.1
- [IEC 62443](https://docs.dispel.com/regulatory-framework-mappings/iec-62443/iec-62443.md)
- [NERC-CIP Overview](https://docs.dispel.com/regulatory-framework-mappings/nerc-cip/overview.md): A NERC-CIP walkthrough and Dispel mapping of product offerings.
- [Medium Impact BCS](https://docs.dispel.com/regulatory-framework-mappings/nerc-cip/medium-impact-bcs.md): Dispel’s Zero Trust Engine mapped to NERC CIP Medium controls to support audit-ready compliance.
- [CIP-003-9/003-11](https://docs.dispel.com/regulatory-framework-mappings/nerc-cip/cip-003-9-003-11.md): Maps Dispel capabilities to NERC CIP-003-9 and CIP-003-11 for OT security and compliance
- [CIP-005-5](https://docs.dispel.com/regulatory-framework-mappings/nerc-cip/cip-005-05.md): Cyber Security - Electronic Security Perimeter(s)
- [CIP-007-6](https://docs.dispel.com/regulatory-framework-mappings/nerc-cip/cip-007-6.md): Cyber Security - System Security Management
- [CIP-011-2](https://docs.dispel.com/regulatory-framework-mappings/nerc-cip/cip-011-2.md): Cyber Security - Information Protection
- [Additional Sections](https://docs.dispel.com/regulatory-framework-mappings/nerc-cip/additional-sections.md): A quick summary of NERC CIP standards not previously discussed.
- [NIST Cybersecurity Framework 1.1](https://docs.dispel.com/regulatory-framework-mappings/nist-csf-1.1/nist-cybersecurity-framework-1.1.md)
- [Identify](https://docs.dispel.com/regulatory-framework-mappings/nist-csf-1.1/identifiy.md)
- [Protect](https://docs.dispel.com/regulatory-framework-mappings/nist-csf-1.1/protect.md)
- [Detect](https://docs.dispel.com/regulatory-framework-mappings/nist-csf-1.1/detect.md)
- [Respond](https://docs.dispel.com/regulatory-framework-mappings/nist-csf-1.1/respond.md)
- [Recover](https://docs.dispel.com/regulatory-framework-mappings/nist-csf-1.1/recover.md)
- [Section 5: ICS Security Architecture](https://docs.dispel.com/regulatory-framework-mappings/section-5-ics-security-architecture.md): Page 49 - 73 of https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-82r2.pdf

## Changelog

- [Changelog](https://docs.dispel.com/changelog/readme.md): What changed in each release of Dispel.
- [8.15.0 — 7 October 2026](https://docs.dispel.com/changelog/releases/2026-10-07.md): What changed in Dispel in the release of 7 October 2026.
- [8.14.0 — 23 September 2026](https://docs.dispel.com/changelog/releases/2026-09-23.md): What changed in Dispel in the release of 23 September 2026.
- [8.13.0 — 14 September 2026](https://docs.dispel.com/changelog/releases/2026-09-14.md): What changed in Dispel in the release of 14 September 2026.
- [8.12.0 — 26 August 2026](https://docs.dispel.com/changelog/releases/2026-08-26.md): What changed in Dispel in the release of 26 August 2026.
- [8.11.0 — 12 August 2026](https://docs.dispel.com/changelog/releases/2026-08-12.md): What changed in Dispel in the release of 12 August 2026.
- [8.10.0 — 27 July 2026](https://docs.dispel.com/changelog/releases/2026-07-27.md): What changed in Dispel in the release of 27 July 2026.
- [8.9.0 — 9 July 2026](https://docs.dispel.com/changelog/releases/2026-07-09.md): What changed in Dispel in the release of 9 July 2026.
- [8.8.0 — 25 June 2026](https://docs.dispel.com/changelog/releases/2026-06-25.md): What changed in Dispel in the release of 25 June 2026.
- [8.7.0 — 10 June 2026](https://docs.dispel.com/changelog/releases/2026-06-10.md): What changed in Dispel in the release of 10 June 2026.
- [8.6.0 — 28 May 2026](https://docs.dispel.com/changelog/releases/2026-05-28.md): What changed in Dispel in the release of 28 May 2026.
- [8.5.0 — 14 May 2026](https://docs.dispel.com/changelog/releases/2026-05-14.md): What changed in Dispel in the release of 14 May 2026.
- [8.4.0 — 29 April 2026](https://docs.dispel.com/changelog/releases/2026-04-29.md): What changed in Dispel in the release of 29 April 2026.
- [8.3.0 — 15 April 2026](https://docs.dispel.com/changelog/releases/2026-04-15.md): What changed in Dispel in the release of 15 April 2026.
- [8.2.0 — 1 April 2026](https://docs.dispel.com/changelog/releases/2026-04-01.md): What changed in Dispel in the release of 1 April 2026.
- [8.1.0 — 20 March 2026](https://docs.dispel.com/changelog/releases/2026-03-20.md): What changed in Dispel in the release of 20 March 2026.
- [8.0.16 — 6 March 2026](https://docs.dispel.com/changelog/releases/2026-03-06.md): What changed in Dispel in the release of 6 March 2026.
- [8.0.14 — 18 February 2026](https://docs.dispel.com/changelog/releases/2026-02-18.md): What changed in Dispel in the release of 18 February 2026.
- [8.0.13 — 9 February 2026](https://docs.dispel.com/changelog/releases/2026-02-09.md): What changed in Dispel in the release of 9 February 2026.
- [8.0.12 — 26 January 2026](https://docs.dispel.com/changelog/releases/2026-01-26.md): What changed in Dispel in the release of 26 January 2026.
- [8.0.11 — 8 January 2026](https://docs.dispel.com/changelog/releases/2026-01-08.md): What changed in Dispel in the release of 8 January 2026.
- [18 November 2025](https://docs.dispel.com/changelog/earlier-releases/2025-11-18.md): Organization Admins Automatically Added to All Facilities as Facility Custodians
- [27 October 2025](https://docs.dispel.com/changelog/earlier-releases/2025-10-27.md): Configurable invite link expiration length
- [14 October 2025](https://docs.dispel.com/changelog/earlier-releases/2025-10-14.md): Dispel Application Updates
- [9 October 2025](https://docs.dispel.com/changelog/earlier-releases/2025-10-09.md): VDI and Stack Microsoft Remote Assistance (MSRA) compatibility
- [7 October 2025](https://docs.dispel.com/changelog/earlier-releases/2025-10-07.md): Browser Connect Reliability Updates
- [11 September 2025](https://docs.dispel.com/changelog/earlier-releases/2025-09-11.md): Windows Installer Improvements
- [26 August 2025](https://docs.dispel.com/changelog/earlier-releases/2025-08-26.md): Windows App UI Refresh & Smarter VPN Connections
- [24 June 2025](https://docs.dispel.com/changelog/earlier-releases/2025-06-24.md): New Access Window Approval Notifications
- [10 June 2025](https://docs.dispel.com/changelog/earlier-releases/2025-06-10.md): HTML E-mail Support
- [26 February 2025](https://docs.dispel.com/changelog/earlier-releases/2025-02-26.md): Customizable Quick Connect Options
- [4 February 2025](https://docs.dispel.com/changelog/earlier-releases/2025-02-04.md): Dispel to Microsoft Entra Group Mapping via OIDC
- [3 October 2024](https://docs.dispel.com/changelog/earlier-releases/2024-10-03.md): Fall 2024 Infrastructure Updates
- [5 September 2024](https://docs.dispel.com/changelog/earlier-releases/2024-09-05.md): Enhanced Access Window Management: Simplified Setup and Efficient Membership Tracking
- [28 August 2024](https://docs.dispel.com/changelog/earlier-releases/2024-08-28.md): Added Support for Azure Bastion via Remote Desktop
- [19 July 2024](https://docs.dispel.com/changelog/earlier-releases/2024-07-19.md): OIDC Integration Improvement
- [17 July 2024](https://docs.dispel.com/changelog/earlier-releases/2024-07-17.md): Flexible device management
- [2 July 2024](https://docs.dispel.com/changelog/earlier-releases/2024-07-02.md): Link Generating and Performance
- [15 March 2024](https://docs.dispel.com/changelog/earlier-releases/2024-03-15.md): Device Accounts
- [26 February 2024](https://docs.dispel.com/changelog/earlier-releases/2024-02-26.md): Organization-Wide Single Sign On
- [29 January 2024](https://docs.dispel.com/changelog/earlier-releases/2024-01-29.md): Group Access Windows
- [4 December 2023](https://docs.dispel.com/changelog/earlier-releases/2023-12-04.md): Bulk Import Devices


---

# Agent Instructions
This documentation is published with GitBook. GitBook is the documentation platform designed so that both humans and AI agents can read, navigate, and reason over technical content effectively. Learn more at gitbook.com.

## Querying This Documentation
This site has an agentic ask interface you may use to query the documentation dynamically by asking a question.

Perform an HTTP GET request on the following URL with the `ask` and `goal` query parameters:

```
GET https://docs.dispel.com/index.md?ask=<question>&goal=<user_goal>
```

`ask` is the immediate question: it should be specific, self-contained, and written in natural language.
`goal` is what the user is ultimately trying to achieve, the reason they need the answer. Sharing it helps GitBook give you a better, more relevant answer. A goal is most helpful when it describes the outcome the user wants rather than restating the question. For example, with `ask=how do I create an API token`, a goal like `automate deployments from our CI pipeline` lets GitBook tailor the answer to that use case.

The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.