Cloudi-Fi Cloud NAC vs Foxpass

Cloudi-Fi Cloud NAC runs network access control from the cloud for wired and Wi-Fi environments. Switches and access points remain enforcement points while the service handles 802.1X authentication and policy enforcement. It uses 802.1X, RADIUS, and EAP-TLS with one policy set across wired and wireless sites. Authentication can use EAP-TLS certificates, directory credentials, or MAC authentication bypass for endpoints without a supplicant. Policies support dynamic VLAN assignment, role-based access, and isolation or quarantine of unknown or unmanaged endpoints. Identity checks can use Microsoft Entra ID, LDAP, Active Directory, client certificates, or approved MAC addresses. Managed endpoints can receive certificates through an MDM such as Microsoft Intune. A cloud captive portal supports self-registration or sponsored access for visitors, contractors, and personal devices. Authentication results and session data remain available for audits across sites. Cloudi-Fi identifies multi-site organizations, IoT-heavy networks, SASE or Zero Trust programs, post-merger environments, and sites replacing end-of-life NAC appliances as intended use cases. Pricing is by request, with no displayed price.

Foxpass Cloud RADIUS and Cloud PKI provide identity- and certificate-based authentication for Wi-Fi and VPN connections without hardware or local servers. Every plan includes Cloud LDAP, a hosted directory service for VPNs, legacy apps, and system logins. The Standard license adds EAP-TTLS authentication, group-based access control, role-based administration, and a web console and API. Advanced adds EAP-TLS, Cloud PKI, automated certificate lifecycle management, and device posture-based access control. Foxpass supports integrations with Microsoft Entra ID, Google Workspace, Okta, OneLogin, legacy Active Directory, and custom LDAP directories. Cloud PKI integrates with MDMs including Intune, Jamf, Kandji, and Addigy. Base plans retain logs for 24 hours, with an add-on extending retention to 90 days. An Engineering License add-on supports Linux, macOS, and SSH workflows, including SSH key rotation and sudo access policy enforcement. Dedicated cloud tenancy and self-hosted deployments are custom options; self-hosting is limited to enterprise customers. The standalone Cloud PKI plan is $0.50 a month, billed annually. A free trial is available, but there is no free plan.