Cloudi-Fi Cloud NAC vs NACIO

Cloudi-Fi Cloud NAC runs network access control from the cloud for wired and Wi-Fi environments. Switches and access points remain enforcement points while the service handles 802.1X authentication and policy enforcement. It uses 802.1X, RADIUS, and EAP-TLS with one policy set across wired and wireless sites. Authentication can use EAP-TLS certificates, directory credentials, or MAC authentication bypass for endpoints without a supplicant. Policies support dynamic VLAN assignment, role-based access, and isolation or quarantine of unknown or unmanaged endpoints. Identity checks can use Microsoft Entra ID, LDAP, Active Directory, client certificates, or approved MAC addresses. Managed endpoints can receive certificates through an MDM such as Microsoft Intune. A cloud captive portal supports self-registration or sponsored access for visitors, contractors, and personal devices. Authentication results and session data remain available for audits across sites. Cloudi-Fi identifies multi-site organizations, IoT-heavy networks, SASE or Zero Trust programs, post-merger environments, and sites replacing end-of-life NAC appliances as intended use cases. Pricing is by request, with no displayed price.

NACIO is network access control software for 802.1X RADIUS authentication, device profiling, compliance enforcement, and captive portals. It supports wired, wireless, and VPN access control and is currently in pre-release, with early access available by request. NACIO can be self-hosted on customer infrastructure or used as a cloud-hosted service. Its built-in RADIUS supports EAP-TLS, PEAP-MSCHAPv2, EAP-TTLS, EAP-FAST, and CHAP. Identity sources include Active Directory, Azure AD/Entra ID, Okta, Google Workspace, SAML 2.0, LDAP/LDAPS, RADIUS proxy, and a local user database. Windows and macOS agents check patch level, antivirus, disk encryption, firewall status, and custom rules before access. NACIO also provides an internal certificate authority, endpoint profiling from DHCP, HTTP user-agent data and network behavior, and guest portals with sponsor approval, verification, social login, and time limits. Licensing uses perpetual per-device licenses tied to a major version, with optional upgrades. Pricing is available on request.