Arbiter vs Cloudi-Fi Cloud NAC

Arbiter is a cloud-hosted network access control product that determines which devices can connect and what they can access. It identifies and catalogs devices by type and vendor without endpoint agents. Access controls include certificate-based EAP-TLS and 802.1X, plus MAC authentication bypass for headless devices. Its on-premises Edge appliance connects over RadSec and can continue authenticating locally during a WAN outage using cached decisions. A live Microsoft Intune integration reads device compliance and can quarantine non-compliant devices to a remediation VLAN. SIEM event forwarding supports Microsoft Sentinel, Elastic, TLS syslog, Splunk HEC, and generic HTTPS webhooks. The service supports wired and wireless access control in a hybrid deployment. The Asset Discovery tier profiles and inventories devices but does not enforce access; the access-control plans include the full feature set and vary by endpoint count. Asset Discovery costs €29 a month after a 60-day free trial. Essential costs €149 a month for 100 endpoints, Professional costs €399 a month for 500 endpoints, and Enterprise costs €999 a month for 1,500 endpoints. Arbiter is designed for SMEs and the MSPs or MSSPs that support them.

Cloudi-Fi Cloud NAC runs network access control from the cloud for wired and Wi-Fi environments. Switches and access points remain enforcement points while the service handles 802.1X authentication and policy enforcement. It uses 802.1X, RADIUS, and EAP-TLS with one policy set across wired and wireless sites. Authentication can use EAP-TLS certificates, directory credentials, or MAC authentication bypass for endpoints without a supplicant. Policies support dynamic VLAN assignment, role-based access, and isolation or quarantine of unknown or unmanaged endpoints. Identity checks can use Microsoft Entra ID, LDAP, Active Directory, client certificates, or approved MAC addresses. Managed endpoints can receive certificates through an MDM such as Microsoft Intune. A cloud captive portal supports self-registration or sponsored access for visitors, contractors, and personal devices. Authentication results and session data remain available for audits across sites. Cloudi-Fi identifies multi-site organizations, IoT-heavy networks, SASE or Zero Trust programs, post-merger environments, and sites replacing end-of-life NAC appliances as intended use cases. Pricing is by request, with no displayed price.