Foxpass vs PacketFence

Foxpass Cloud RADIUS and Cloud PKI provide identity- and certificate-based authentication for Wi-Fi and VPN connections without hardware or local servers. Every plan includes Cloud LDAP, a hosted directory service for VPNs, legacy apps, and system logins. The Standard license adds EAP-TTLS authentication, group-based access control, role-based administration, and a web console and API. Advanced adds EAP-TLS, Cloud PKI, automated certificate lifecycle management, and device posture-based access control. Foxpass supports integrations with Microsoft Entra ID, Google Workspace, Okta, OneLogin, legacy Active Directory, and custom LDAP directories. Cloud PKI integrates with MDMs including Intune, Jamf, Kandji, and Addigy. Base plans retain logs for 24 hours, with an add-on extending retention to 90 days. An Engineering License add-on supports Linux, macOS, and SSH workflows, including SSH key rotation and sudo access policy enforcement. Dedicated cloud tenancy and self-hosted deployments are custom options; self-hosting is limited to enterprise customers. The standalone Cloud PKI plan is $0.50 a month, billed annually. A free trial is available, but there is no free plan.

PacketFence is an enterprise network access control platform for organizations managing wired, wireless, and VPN access. It can enforce policy through SNMP or RADIUS, inline Layer 2 or Layer 3 deployment, VLAN assignment, and quarantine isolation. Authentication options include 802.1X/EAP, directory services, external RADIUS, OAuth2 social login, SAML 2.0, and PKI certificates. Guest workflows include self-registration, sponsored access, email or SMS confirmation, and CSV imports. Self-service provisioning can configure 802.1X profiles for iOS, Android, Windows, macOS, and ChromeOS. The platform checks antivirus, operating system patch level, and security-agent presence, and can quarantine devices that fail policy. Administrators get a web interface, command-line tools, REST API, customizable captive portals, and Perl extension points. The self-hosted Community Edition is GPL v2+ with unlimited devices and full source code. Its listed minimum requirements include Debian 12.x or RHEL 8.x, four CPU cores, 16 GB RAM, 200 GB disk, and a network interface. Paid plans include Starter at $5,000 /year for up to 250 registered devices.