Foxpass Plans: Secure Every User, Device, and Network

Access Control Plans

Standard License

EAP-TTLS (Username/Password) Authentication + Cloud LDAP
The simplest way to secure Wi-Fi and VPN access using identity-based credentials.

Best for:
Organizations seeking password-based Wi-Fi/VPN authentication and cloud directory integration.

Includes:

• Foxpass Cloud RADIUS (Wi-Fi & VPN access control)

• EAP-TTLS network authentication

• RADIUS over TLS (RadSec)

• Foxpass Cloud LDAP (user/group directory for VPN, legacy apps, legacy Active Directory authentication replacement)

• Group-based access control

• Directory sync & password delegation (Entra ID, Google Workspace, Okta, OneLogin)

• Role-based administrative controls (RBAC)

• Web-based admin console and API

• Standard logging & monitoring - 24h audit log retention (RADIUS & LDAP)

• High availability with global redundancy

• SOC 2 Type II and HIPAA-ready infrastructure

• Email-based support

• Guided onboarding setup assistance - no extra fee or hidden costs

Advanced License

EAP-TLS (Certificate-Based Authentication) + Cloud PKI
Deploy zero-trust, certificate-based access across all devices, with a fully managed PKI included.

Best for:
Teams adopting certificate-based Wi-Fi/VPN authentication, device identity, or MDM-driven certificate enrollment.

Includes Everything in Standard, plus:

• EAP-TLS & certificate-based authentication

• Foxpass Cloud PKI (built-in)

• Automated certificate lifecycle management

• SCEP and MDM integrations (Intune, Jamf, Iru, Addigy)

• BYOD certificate installer

• Support for 3rd party PKI

• Certificate-driven device identity for conditional access

• Device posture–based access control (Intune compliance–based network access decisions)

• Real-time certificate audit logging

• Automated certificate invalidation tied to your identity provider

• Enforcement of device trust and zero-trust policies

Standalone Certificate Management

Foxpass Cloud PKI (Standalone)

Fully Managed Cloud PKI
Issue, renew, and revoke X.509 certificates across all devices, platforms, and MDMs — even if you don’t use Foxpass RADIUS.

Best for:

• Organizations with existing RADIUS servers

• Teams enabling Microsoft Entra CBA

• Intune/Jamf/Iru/Addigy certificate enrollment

• VPNs or VDI requiring certificate authentication

• Replacing on-prem Active Directory Certificate Services (ADCS)

• Hybrid or non-Foxpass network architectures

Key capabilities:

• Fully managed private CA & certificate lifecycle automation

• Multiple enrollment methods: SCEP (compatible with any SCEP-capable MDM), BYOD installer, CSR upload, and manual certificate creation via the Foxpass console

• Works with any RADIUS/VPN/firewall appliance

• Zero-trust device identity & compliance enforcement

• High availability with global redundancy

• Compliance-aligned PKI architecture built to meet SOC 2 Type II, ISO 27001, and other industry framework controls

Base Plan Comparison