Arbiter vs Foxpass

Arbiter is a cloud-hosted network access control product that determines which devices can connect and what they can access. It identifies and catalogs devices by type and vendor without endpoint agents. Access controls include certificate-based EAP-TLS and 802.1X, plus MAC authentication bypass for headless devices. Its on-premises Edge appliance connects over RadSec and can continue authenticating locally during a WAN outage using cached decisions. A live Microsoft Intune integration reads device compliance and can quarantine non-compliant devices to a remediation VLAN. SIEM event forwarding supports Microsoft Sentinel, Elastic, TLS syslog, Splunk HEC, and generic HTTPS webhooks. The service supports wired and wireless access control in a hybrid deployment. The Asset Discovery tier profiles and inventories devices but does not enforce access; the access-control plans include the full feature set and vary by endpoint count. Asset Discovery costs €29 a month after a 60-day free trial. Essential costs €149 a month for 100 endpoints, Professional costs €399 a month for 500 endpoints, and Enterprise costs €999 a month for 1,500 endpoints. Arbiter is designed for SMEs and the MSPs or MSSPs that support them.

Foxpass Cloud RADIUS and Cloud PKI provide identity- and certificate-based authentication for Wi-Fi and VPN connections without hardware or local servers. Every plan includes Cloud LDAP, a hosted directory service for VPNs, legacy apps, and system logins. The Standard license adds EAP-TTLS authentication, group-based access control, role-based administration, and a web console and API. Advanced adds EAP-TLS, Cloud PKI, automated certificate lifecycle management, and device posture-based access control. Foxpass supports integrations with Microsoft Entra ID, Google Workspace, Okta, OneLogin, legacy Active Directory, and custom LDAP directories. Cloud PKI integrates with MDMs including Intune, Jamf, Kandji, and Addigy. Base plans retain logs for 24 hours, with an add-on extending retention to 90 days. An Engineering License add-on supports Linux, macOS, and SSH workflows, including SSH key rotation and sudo access policy enforcement. Dedicated cloud tenancy and self-hosted deployments are custom options; self-hosting is limited to enterprise customers. The standalone Cloud PKI plan is $0.50 a month, billed annually. A free trial is available, but there is no free plan.