Skip to content
SPECIFICTION
Get listed

ExtremeControl

extremenetworks.com

WebWindowsmacOSLinuxAPISelf-hosted
Visit extremenetworks.com
Spec score 8.0 #8 of 23 in Network Access Control Software

What it is

ExtremeControl centralizes network access control, visibility, and policy management for users, endpoints, and IoT devices. It supports wired, wireless, and VPN access control, including role-based access, guest access, BYOD onboarding, 802.1X, and secure IoT access through third-party networking devices. Administrators can build policies around user, time, location, vulnerability, or access type, then apply VLAN, ACL, and QoS rules. The product can share user, IP address, and location context with perimeter firewalls and coordinate endpoint isolation and remediation after alerts. Reports and alerts cover authentication, guest access, onboarding, device profiles, and endpoint health. Listed integrations include NGFW, SIEM, CMDB, internet security, and EMM/MDM tools; an open northbound API supports custom integrations. Virtual engines are documented for VMware ESX/ESXi and Microsoft Hyper-V. ExtremeControl is paid, with pricing on request based on unique MAC addresses connected within the past 24 hours; there is no free plan. An initial ExtremeCloud IQ Site Engine installation does not include an end-system license, though its generated evaluation license includes unlimited end-systems.

Spec sheet

Purpose
ExtremeControl provides network access control and endpoint security through centralized visibility and control of users and devices.Read 4 Oct 2026 · extremenetworks.com
Intended users
The product page describes use by network administrators, security teams, and compliance auditors managing access policies across network users and devices.Read 4 Oct 2026 · extremenetworks.com
Deployment
ExtremeControl is available as part of ExtremeCloud IQ Site Engine, which can be managed in the cloud or locally on premises.Read 4 Oct 2026 · extremenetworks.com
API
It offers an open northbound API for customized integrations with enterprise platforms.Read 4 Oct 2026 · extremenetworks.com
Integrations
The product page names VMware Workspace ONE UEM (AirWatch), Citrix, and MobileIron among EMM/MDM integrations, and describes integration with NGFW, SIEM, CMDB, and internet security solutions.Read 4 Oct 2026 · extremenetworks.com
Compliance
It monitors device health and compliance before and after access and supports policy audits from integrated MDM/EMM solutions.Read 4 Oct 2026 · extremenetworks.com
Founded
1996Read 28 Sep 2026 · extremenetworks.com
Maker
Extreme Networks' company page states that it was founded in 1996 in Silicon Valley, California.Read 3 Oct 2026 · extremenetworks.com
Access controls
It supports role-based access, guest access, BYOD onboarding, and secure IoT network access, including for third-party networking devices.Read 3 Oct 2026 · extremenetworks.com
BYOD and guest
It supports secure guest access and BYOD onboarding.Read 4 Oct 2026 · extremenetworks.com
Firewall response
ExtremeControl can share user, IP address, and location context with perimeter firewalls and orchestrate endpoint isolation and remediation based on alerts.Read 3 Oct 2026 · extremenetworks.com
IoT
It provides secure IoT network access and policies based on device security posture.Read 4 Oct 2026 · extremenetworks.com
Legacy license quantities
For upgrades from Extreme Management Center, the documentation lists 500 Access Control end-systems for NMS-ADV and 250 for NMS-xx licenses.Read 3 Oct 2026 · emc.extremenetworks.com
Licensing limit
An initial ExtremeCloud IQ Site Engine installation includes no ExtremeControl end system license; an evaluation license can be generated that includes unlimited end systems.Read 4 Oct 2026 · emc.extremenetworks.com
Policy controls
Administrators can apply role based policies using endpoint attributes including user, time, location, vulnerability, or access type.Read 4 Oct 2026 · extremenetworks.com
Policy rules
Administrators can set policies using user, time, location, vulnerability, or access type, and apply VLAN, ACL, and QoS rules.Read 3 Oct 2026 · extremenetworks.com
Reporting
It provides customizable reports and alerts covering authentication, guest access, onboarding, device profiles, and endpoint health.Read 4 Oct 2026 · extremenetworks.com
Role based access
It provides role based network access control for devices, including third party networking devices.Read 4 Oct 2026 · extremenetworks.com
Security maintenance
Extreme says its Linux-based engines, including ExtremeControl, are hardened by limiting unnecessary services and software and applying upstream Linux security updates.Read 3 Oct 2026 · emc.extremenetworks.com
Support and training
Extreme offers ExtremeControl training for customers, partners, distributors, and employees, with video, instructor-led sessions, and hands-on labs; account registration or sign-in is required for materials.Read 3 Oct 2026 · extremenetworks.com
Threat response
It can coordinate endpoint isolation and remediation through integrations with next generation firewall solutions.Read 4 Oct 2026 · extremenetworks.com

Plans and prices

ExtremeControl Priced on request Priced separately · based on unique MAC addresses connected within the past 24 hours Read 4 Oct 2026 · extremenetworks.com

Every ExtremeControl plan and price →

Strong points and limits

Strong points

  • Supports wired, wireless, and VPN access control.
  • Policies can use user, time, location, and vulnerability.
  • Coordinates endpoint isolation and remediation with firewall integrations.
  • Offers reports, alerts, and an open API.

Limits

  • No free plan is listed.
  • Pricing is available on request.
  • Initial Site Engine installation excludes an end-system license.

Who it suits

ExtremeControl is aimed at network administrators, security teams, and compliance auditors managing access policies across users and devices. It suits organizations that need centralized rules and visibility across network and IoT endpoints.

Verdict

ExtremeControl combines access policies, endpoint visibility, integrations, and alert-driven response for managed networks. Buyers should confirm pricing and end-system licensing requirements for their deployment.

Where Specifiction places it

Alternatives to ExtremeControlAll alternatives →