PacketFence vs Portnox NAC

PacketFence is an enterprise network access control platform for organizations managing wired, wireless, and VPN access. It can enforce policy through SNMP or RADIUS, inline Layer 2 or Layer 3 deployment, VLAN assignment, and quarantine isolation. Authentication options include 802.1X/EAP, directory services, external RADIUS, OAuth2 social login, SAML 2.0, and PKI certificates. Guest workflows include self-registration, sponsored access, email or SMS confirmation, and CSV imports. Self-service provisioning can configure 802.1X profiles for iOS, Android, Windows, macOS, and ChromeOS. The platform checks antivirus, operating system patch level, and security-agent presence, and can quarantine devices that fail policy. Administrators get a web interface, command-line tools, REST API, customizable captive portals, and Perl extension points. The self-hosted Community Edition is GPL v2+ with unlimited devices and full source code. Its listed minimum requirements include Debian 12.x or RHEL 8.x, four CPU cores, 16 GB RAM, 200 GB disk, and a network interface. Paid plans include Starter at $5,000 /year for up to 250 registered devices.

Portnox NAC is a cloud-delivered network access control service for hybrid and distributed networks. It provides device visibility, risk-based access controls, and automated compliance enforcement across wired, wireless, and VPN connections. Administrators can define policies by role, location, device type, and network layer. Authentication options include 802.1X, MAC Authentication Bypass, and passwordless certificates; Portnox can act as a certificate authority or integrate with a third party. The service continuously assesses endpoint risk and can use agentless assessment integrations such as Microsoft Intune. Noncompliant devices can be quarantined or moved to a remediation VLAN, with automated policies able to return endpoints to compliance. Portnox lists integrations including Active Directory, Entra ID, Intune, Jamf, CrowdStrike, SentinelOne, Okta, and a REST API. The service supports RDP, SSH, VNC, and Telnet, along with SIEM log export and session recording. Portnox says its controls can help organizations address HIPAA, GLBA, PCI DSS, and GDPR. A 30-day trial is advertised, but no plan price is listed; subscription terms are 12, 24, or 36 months.