# Best Network Access Control Software

  *By [Brandon Summers-Miller](https://research.g2.com/insights/author/brandon-summers-miller)*

   Network access control (NAC) software allows users to implement policies that control access to corporate infrastructure.

To qualify for inclusion in the Network Access Control category, a product must:

- Allow users to implement policies for controlling access to their business’s infrastructure.
- Enable users to protect their data from potential outside attacks.
- Allow users to control access to their information from a central point.





## Best Network Access Control Software At A Glance

- **Leader:** [SecureW2 JoinNow](https://www.g2.com/products/securew2-joinnow/reviews)
- **Highest Performer:** [Coro Cybersecurity](https://www.g2.com/products/coro-cybersecurity/reviews)
- **Easiest to Use:** [HPE Aruba Networking SSE](https://www.g2.com/products/aruba-a-hewlett-packard-enterprise-company-hpe-aruba-networking-sse/reviews)
- **Top Trending:** [Foxpass by Splashtop](https://www.g2.com/products/foxpass-by-splashtop/reviews)
- **Best Free Software:** [Portnox](https://www.g2.com/products/portnox/reviews)


---

**Sponsored**

### Foxpass by Splashtop

Foxpass Cloud RADIUS by Splashtop is a fully managed, cloud-hosted RADIUS authentication service designed to provide secure, passwordless access to Wi-Fi networks, VPNs, and various network infrastructures. This solution is particularly tailored for IT teams that prioritize security, control, and operational simplicity. By employing certificate-based and identity-based authentication protocols, Foxpass ensures that every device and user connection is validated, enhancing the overall security posture of an organization. The product is especially beneficial for organizations looking to eliminate the vulnerabilities associated with shared passwords. By utilizing X.509 certificate authentication (EAP-TLS) and identity-driven policies (EAP-TTLS), Foxpass facilitates the implementation of Zero Trust principles. This approach allows organizations to assign role-based access controls and maintain comprehensive audit visibility without the need for on-premises servers or complex Public Key Infrastructure (PKI). Such features make Foxpass an appealing choice for enterprises, educational institutions, and global teams seeking to streamline their authentication processes. Foxpass seamlessly integrates with various identity providers, including Microsoft Entra ID (Azure), Google, OKTA, and OneLogin. This integration is complemented by automated certificate management capabilities through leading Mobile Device Management (MDM) solutions such as Microsoft Intune, Jamf, Kandji, and Addigy. Additionally, the built-in Bring Your Own Device (BYOD) workflows enable secure enrollment of unmanaged or personal devices, ensuring that organizations can maintain security standards while accommodating diverse device types. Compliance with industry standards is another critical aspect of Foxpass. The service is designed to meet regulations such as GDPR, SOC 2, ISO 27001, HIPAA, FERPA, and CIPA, making it suitable for organizations with stringent compliance requirements. Furthermore, Foxpass offers regional hosting and data residency options, which are essential for organizations that must adhere to specific sovereignty or privacy mandates. This flexibility ensures that users can implement Foxpass in a manner that aligns with their operational and regulatory needs. Overall, Foxpass Cloud RADIUS by Splashtop stands out in the authentication service category by providing a robust, cloud-based solution that enhances security, simplifies management, and supports compliance across various industries. Its focus on passwordless access and seamless integration with existing identity systems positions it as a valuable tool for organizations aiming to enhance their network security infrastructure.



[Book a Demo](https://www.g2.com/external_clickthroughs/record?secure%5Bad_program%5D=ppc&secure%5Bad_slot%5D=category_product_list&secure%5Bcategory_id%5D=1497&secure%5Bdisplayable_resource_id%5D=1497&secure%5Bdisplayable_resource_type%5D=Category&secure%5Bmedium%5D=sponsored&secure%5Bplacement_reason%5D=page_category&secure%5Bplacement_resource_ids%5D%5B%5D=1497&secure%5Bprioritized%5D=false&secure%5Bproduct_id%5D=16236&secure%5Bresource_id%5D=1497&secure%5Bresource_type%5D=Category&secure%5Bsource_type%5D=category_page&secure%5Bsource_url%5D=https%3A%2F%2Fwww.g2.com%2Fcategories%2Fnetwork-access-control-nac%3Fpage%3D1&secure%5Btoken%5D=9b2c2215b856720070e50e988481dde1b54093c0015fd07044641a119c482583&secure%5Burl%5D=https%3A%2F%2Fwww.splashtop.com%2Ffoxpass%3Futm_source%3Dg2.com%26utm_medium%3Dcpc%26utm_campaign%3D251218_WW_WW_G2_NAC_Foxpass&secure%5Burl_type%5D=custom_url)

---

## Top-Rated Products (Ranked by G2 Score)
  ### 1. [SecureW2 JoinNow](https://www.g2.com/products/securew2-joinnow/reviews)
  SecureW2 is a cloud-native authentication solution designed to enhance security by eliminating credential compromise through its innovative JoinNow Platform. This platform combines Dynamic Public Key Infrastructure (PKI) and Cloud RADIUS to facilitate real-time trust validation and continuous authentication for users accessing networks and applications. Each access request initiates an identity-based risk assessment, which determines the issuance of certificates and the corresponding access privileges. Once access is granted, the system continuously validates the compliance of devices, ensuring that only verified entities maintain their authorization. The JoinNow Platform caters to a diverse range of users, including K-12 and higher education institutions, mid-market businesses, and global enterprises. By providing scalable and resilient authentication solutions, SecureW2 addresses the unique security needs of various sectors without placing an additional burden on IT teams. The platform's ability to seamlessly integrate with existing identity providers, such as Entra ID (formerly Azure AD), Okta, and Google Workspace, allows organizations to implement adaptive, passwordless authentication without the need for complex upgrades or disruptions. SecureW2 effectively tackles several prevalent security challenges. Credential compromise remains a significant concern, as traditional passwords and multi-factor authentication (MFA) can be vulnerable. By utilizing certificate-based authentication, SecureW2 eliminates these risks entirely. Additionally, the platform addresses high operational overhead associated with managing legacy security systems by automating certificate issuance, revocation, and lifecycle management. This automation not only saves IT resources but also enhances visibility and control, providing real-time insights into authentication processes. Key features of SecureW2 include its agentless architecture, which eliminates software bloat while ensuring secure and frictionless authentication. The extensive policy engine allows organizations to create customized policies that are automatically enforced both before and after authentication. Continuous authentication adapts in real time, validating access dynamically based on evolving security conditions. Furthermore, the platform’s interoperability ensures compatibility with any identity provider, mobile device management (MDM) system, and security stack, making it a versatile choice for organizations looking to enhance their security posture. In summary, SecureW2 redefines authentication for modern businesses by ensuring that every access request is trust-validated. Its scalable, lightweight design enables rapid deployment and effortless scaling, allowing organizations to maintain robust security without the complexities and costs typically associated with traditional authentication solutions.


  **Average Rating:** 4.7/5.0
  **Total Reviews:** 96

**User Satisfaction Scores:**

- **Has the product been a good partner in doing business?:** 9.4/10 (Category avg: 8.9/10)
- **Security:** 9.6/10 (Category avg: 9.1/10)
- **Data Protection:** 9.3/10 (Category avg: 9.0/10)
- **Processes:** 8.5/10 (Category avg: 8.9/10)


**Seller Details:**

- **Seller:** [SecureW2](https://www.g2.com/sellers/securew2)
- **Company Website:** https://www.securew2.com/
- **Year Founded:** 2014
- **HQ Location:** Seattle, US
- **Twitter:** @SecureW2 (86 Twitter followers)
- **LinkedIn® Page:** https://www.linkedin.com/company/securew2/ (118 employees on LinkedIn®)

**Reviewer Demographics:**
  - **Top Industries:** Primary/Secondary Education, Computer Software
  - **Company Size:** 55% Mid-Market, 41% Enterprise


#### Pros & Cons

**Pros:**

- Customer Support (20 reviews)
- Setup Ease (19 reviews)
- Ease of Use (18 reviews)
- Security (17 reviews)
- Authentication (14 reviews)

**Cons:**

- Performance Issues (12 reviews)
- Expensive (6 reviews)
- Poor Customer Support (5 reviews)
- Poor Documentation (5 reviews)
- Difficult Learning Curve (4 reviews)

  ### 2. [HPE Aruba Networking SSE](https://www.g2.com/products/aruba-a-hewlett-packard-enterprise-company-hpe-aruba-networking-sse/reviews)
  Aruba ClearPass Policy Manager is a comprehensive network access control solution designed to provide secure, role- and device-based access for employees, contractors, and guests across multi-vendor wired, wireless, and VPN infrastructures. It features a context-based policy engine, supports RADIUS and TACACS+ protocols, and offers device profiling, posture assessment, onboarding, and guest access capabilities. ClearPass simplifies network security by enabling organizations to enforce consistent policies, ensuring that only authorized users and devices can access network resources. Key Features and Functionality: - Role-Based Access Control: Enforces network access policies based on user roles, device types, and ownership status, ensuring appropriate access levels. - Device Profiling and Posture Assessment: Identifies and assesses devices connecting to the network, verifying compliance with security policies before granting access. - Comprehensive Policy Management: Allows administrators to create and enforce detailed access rules based on user identity, device posture, location, and time, supporting dynamic VLAN assignment and real-time policy adjustments. - Multi-Vendor Integration: Supports industry-standard protocols like RADIUS, TACACS+, and 802.1X, enabling seamless integration with various network equipment from different vendors. - Guest and BYOD Management: Provides customizable guest access workflows, self-service device onboarding, and integration with mobile device management solutions for secure BYOD environments. - Third-Party Security Integration: Integrates with firewalls, SIEM systems, and other security solutions to automate threat detection and response workflows. Primary Value and Problem Solved: Aruba ClearPass Policy Manager addresses the challenge of securing diverse network environments by providing a unified platform for network access control. It enhances security by ensuring that only authorized users and compliant devices can access network resources, regardless of the infrastructure's complexity or the variety of devices connecting to it. By automating policy enforcement and integrating with existing security solutions, ClearPass reduces administrative overhead, streamlines onboarding processes, and ensures compliance with organizational security policies. This comprehensive approach to network access control helps organizations protect their networks from unauthorized access and security threats while maintaining a seamless user experience.


  **Average Rating:** 4.3/5.0
  **Total Reviews:** 36

**User Satisfaction Scores:**

- **Has the product been a good partner in doing business?:** 9.0/10 (Category avg: 8.9/10)
- **Security:** 9.5/10 (Category avg: 9.1/10)
- **Data Protection:** 8.9/10 (Category avg: 9.0/10)
- **Processes:** 9.0/10 (Category avg: 8.9/10)


**Seller Details:**

- **Seller:** [Aruba, a Hewlett Packard Enterprise company](https://www.g2.com/sellers/aruba-a-hewlett-packard-enterprise-company)
- **HQ Location:** Santa Clara, California
- **LinkedIn® Page:** https://www.linkedin.com/company/aruba-a-hewlett-packard-enterprise-company/ (5,118 employees on LinkedIn®)

**Reviewer Demographics:**
  - **Who Uses This:** Network Engineer
  - **Top Industries:** Information Technology and Services, Computer & Network Security
  - **Company Size:** 48% Enterprise, 45% Mid-Market


#### Pros & Cons

**Pros:**

- Ease of Use (2 reviews)
- Performance Efficiency (2 reviews)
- Alert Notifications (1 reviews)
- Customer Support (1 reviews)
- Dashboard Usability (1 reviews)

**Cons:**

- Performance Issues (3 reviews)
- Insufficient Training (2 reviews)
- Authentication Issues (1 reviews)
- Complexity (1 reviews)
- Limited Features (1 reviews)

  ### 3. [Portnox](https://www.g2.com/products/portnox/reviews)
  Portnox offers cloud-native zero trust access control and cybersecurity essentials that enable agile, resource-constrained IT teams to proactively address today’s most pressing security challenges: the rapid expansion of enterprise networks, the proliferation of connected device types, the increased sophistication of cyberattacks, and the shift to zero trust. Hundreds of companies have leveraged Portnox’s award-winning security products to enforce powerful network access, endpoint risk monitoring, and remediation policies to strengthen their organizational security posture. By eliminating the need for any on-premises footprint common among traditional information security systems, Portnox allows companies - no matter their size, geo-distribution, or networking architecture - to deploy, scale, enforce and maintain these critical zero trust security policies with unprecedented ease. Portnox has offices in the U.S. and Israel. For information visit www.portnox.com.


  **Average Rating:** 4.4/5.0
  **Total Reviews:** 108

**User Satisfaction Scores:**

- **Has the product been a good partner in doing business?:** 8.6/10 (Category avg: 8.9/10)
- **Security:** 8.9/10 (Category avg: 9.1/10)
- **Data Protection:** 8.2/10 (Category avg: 9.0/10)
- **Processes:** 7.9/10 (Category avg: 8.9/10)


**Seller Details:**

- **Seller:** [Portnox](https://www.g2.com/sellers/portnox)
- **Company Website:** https://www.portnox.com
- **Year Founded:** 2007
- **HQ Location:** Austin, Texas
- **Twitter:** @portnox (827 Twitter followers)
- **LinkedIn® Page:** https://www.linkedin.com/company/portnox/ (99 employees on LinkedIn®)

**Reviewer Demographics:**
  - **Who Uses This:** Network Engineer
  - **Top Industries:** Information Technology and Services, Financial Services
  - **Company Size:** 39% Mid-Market, 37% Enterprise


#### Pros & Cons

**Pros:**

- Ease of Use (24 reviews)
- Setup Ease (16 reviews)
- Implementation Ease (13 reviews)
- Customer Support (11 reviews)
- Cloud Services (10 reviews)

**Cons:**

- Performance Issues (13 reviews)
- Poor Interface Design (6 reviews)
- Connection Issues (5 reviews)
- Not Intuitive (5 reviews)
- Authentication Issues (4 reviews)

  ### 4. [Google Cloud Identity-Aware Proxy](https://www.g2.com/products/google-cloud-identity-aware-proxy/reviews)
  Use identity to guard access for applications deployed on GCP


  **Average Rating:** 4.4/5.0
  **Total Reviews:** 54

**User Satisfaction Scores:**

- **Has the product been a good partner in doing business?:** 9.3/10 (Category avg: 8.9/10)
- **Security:** 9.2/10 (Category avg: 9.1/10)
- **Data Protection:** 9.1/10 (Category avg: 9.0/10)
- **Processes:** 8.6/10 (Category avg: 8.9/10)


**Seller Details:**

- **Seller:** [Google](https://www.g2.com/sellers/google)
- **Year Founded:** 1998
- **HQ Location:** Mountain View, CA
- **Twitter:** @google (31,840,340 Twitter followers)
- **LinkedIn® Page:** https://www.linkedin.com/company/1441/ (336,169 employees on LinkedIn®)
- **Ownership:** NASDAQ:GOOG

**Reviewer Demographics:**
  - **Top Industries:** Computer Software, Information Technology and Services
  - **Company Size:** 44% Small-Business, 30% Enterprise


  ### 5. [Cisco Identity Services Engine (ISE)](https://www.g2.com/products/cisco-identity-services-engine-ise/reviews)
  Cisco Identity Services Engine (ISE) is a comprehensive network access control (NAC) solution that serves as the cornerstone of a zero-trust security framework. It enables organizations to enforce security policies, manage endpoints, and ensure that only trusted users and devices can access network resources. By integrating intelligence from across the network stack, ISE provides real-time contextual information, allowing for precise control over who and what connects to the network. Key Features and Functionality: - Context-Aware Access Control: ISE gathers detailed information about users, devices, locations, and access methods to enforce policies that grant or restrict network access based on comprehensive contextual data. - Endpoint Compliance: The platform continuously assesses device posture to ensure compliance with security policies, preventing unpatched or non-compliant devices from posing risks to the network. - Automated Threat Containment: ISE can automatically identify and contain threats by leveraging network intelligence, effectively turning the network into a proactive defense mechanism. - Flexible Deployment Options: Supporting both on-premises and multi-cloud environments, ISE offers deployment flexibility to meet diverse organizational needs. - Integration with Security Ecosystem: ISE integrates seamlessly with other security solutions, enhancing overall security posture through coordinated policy enforcement and threat response. Primary Value and Problem Solved: Cisco ISE addresses the critical need for secure and efficient network access control in today's complex IT environments. By providing a centralized platform for policy enforcement and endpoint management, it reduces the risk of unauthorized access and potential security breaches. Organizations benefit from enhanced visibility into network activities, streamlined compliance with security policies, and the agility to adapt to evolving security threats. Ultimately, ISE empowers businesses to maintain a resilient security posture while supporting operational continuity and growth.


  **Average Rating:** 4.5/5.0
  **Total Reviews:** 40

**User Satisfaction Scores:**

- **Has the product been a good partner in doing business?:** 9.6/10 (Category avg: 8.9/10)
- **Security:** 9.2/10 (Category avg: 9.1/10)
- **Data Protection:** 8.9/10 (Category avg: 9.0/10)
- **Processes:** 8.7/10 (Category avg: 8.9/10)


**Seller Details:**

- **Seller:** [Cisco](https://www.g2.com/sellers/cisco)
- **Year Founded:** 1984
- **HQ Location:** San Jose, CA
- **Twitter:** @Cisco (720,884 Twitter followers)
- **LinkedIn® Page:** https://www.linkedin.com/company/cisco/ (95,742 employees on LinkedIn®)
- **Ownership:** NASDAQ:CSCO

**Reviewer Demographics:**
  - **Top Industries:** Computer & Network Security
  - **Company Size:** 55% Enterprise, 35% Mid-Market


  ### 6. [Foxpass by Splashtop](https://www.g2.com/products/foxpass-by-splashtop/reviews)
  Foxpass Cloud RADIUS by Splashtop is a fully managed, cloud-hosted RADIUS authentication service designed to provide secure, passwordless access to Wi-Fi networks, VPNs, and various network infrastructures. This solution is particularly tailored for IT teams that prioritize security, control, and operational simplicity. By employing certificate-based and identity-based authentication protocols, Foxpass ensures that every device and user connection is validated, enhancing the overall security posture of an organization. The product is especially beneficial for organizations looking to eliminate the vulnerabilities associated with shared passwords. By utilizing X.509 certificate authentication (EAP-TLS) and identity-driven policies (EAP-TTLS), Foxpass facilitates the implementation of Zero Trust principles. This approach allows organizations to assign role-based access controls and maintain comprehensive audit visibility without the need for on-premises servers or complex Public Key Infrastructure (PKI). Such features make Foxpass an appealing choice for enterprises, educational institutions, and global teams seeking to streamline their authentication processes. Foxpass seamlessly integrates with various identity providers, including Microsoft Entra ID (Azure), Google, OKTA, and OneLogin. This integration is complemented by automated certificate management capabilities through leading Mobile Device Management (MDM) solutions such as Microsoft Intune, Jamf, Kandji, and Addigy. Additionally, the built-in Bring Your Own Device (BYOD) workflows enable secure enrollment of unmanaged or personal devices, ensuring that organizations can maintain security standards while accommodating diverse device types. Compliance with industry standards is another critical aspect of Foxpass. The service is designed to meet regulations such as GDPR, SOC 2, ISO 27001, HIPAA, FERPA, and CIPA, making it suitable for organizations with stringent compliance requirements. Furthermore, Foxpass offers regional hosting and data residency options, which are essential for organizations that must adhere to specific sovereignty or privacy mandates. This flexibility ensures that users can implement Foxpass in a manner that aligns with their operational and regulatory needs. Overall, Foxpass Cloud RADIUS by Splashtop stands out in the authentication service category by providing a robust, cloud-based solution that enhances security, simplifies management, and supports compliance across various industries. Its focus on passwordless access and seamless integration with existing identity systems positions it as a valuable tool for organizations aiming to enhance their network security infrastructure.


  **Average Rating:** 4.6/5.0
  **Total Reviews:** 59

**User Satisfaction Scores:**

- **Has the product been a good partner in doing business?:** 9.4/10 (Category avg: 8.9/10)
- **Security:** 9.5/10 (Category avg: 9.1/10)
- **Data Protection:** 9.0/10 (Category avg: 9.0/10)
- **Processes:** 7.6/10 (Category avg: 8.9/10)


**Seller Details:**

- **Seller:** [Splashtop Inc.](https://www.g2.com/sellers/splashtop-inc)
- **Company Website:** https://www.splashtop.com
- **Year Founded:** 2006
- **HQ Location:** Cupertino, CA
- **Twitter:** @splashtop (5,215 Twitter followers)
- **LinkedIn® Page:** https://www.linkedin.com/company/1944335/ (341 employees on LinkedIn®)

**Reviewer Demographics:**
  - **Who Uses This:** IT Manager
  - **Top Industries:** Computer Software, Internet
  - **Company Size:** 70% Mid-Market, 23% Small-Business


#### Pros & Cons

**Pros:**

- Ease of Use (4 reviews)
- Performance Efficiency (4 reviews)
- Reliability (4 reviews)
- Setup Ease (4 reviews)
- Customer Support (3 reviews)

**Cons:**

- Expensive (1 reviews)
- Limited OS Compatibility (1 reviews)
- Poor Interface Design (1 reviews)
- Poor Navigation (1 reviews)
- UX Improvement (1 reviews)

  ### 7. [AWS Resource Access Manager (RAM)](https://www.g2.com/products/aws-resource-access-manager-ram/reviews)
  AWS Resource Access Manager is a service that enables you to securely share your AWS resources across multiple AWS accounts or within your AWS Organization. By allowing centralized creation and management of resources, RAM eliminates the need to duplicate resources in each account, thereby reducing operational overhead and costs. It leverages existing AWS Identity and Access Management policies and Service Control Policies to govern access, ensuring consistent security and compliance across shared resources. Key Features and Functionality: - Simplified Resource Sharing: Easily share resources such as Amazon VPC subnets, AWS Transit Gateways, and Amazon Route 53 Resolver rules across AWS accounts without duplication. - Centralized Management: Manage shared resources from a central account, streamlining operations and maintaining consistent configurations. - Fine-Grained Permissions: Utilize AWS-managed and customer-managed permissions to grant precise access rights, adhering to the principle of least privilege. - Integration with AWS Organizations: Share resources seamlessly within your AWS Organization or Organizational Units , enhancing collaboration and resource utilization. - Comprehensive Visibility: Monitor shared resources and access activities through integration with Amazon CloudWatch and AWS CloudTrail, ensuring transparency and auditability. Primary Value and Problem Solved: AWS RAM addresses the challenges of managing and sharing resources in multi-account AWS environments. By enabling centralized resource creation and secure sharing, it reduces the need for redundant resources, thereby lowering costs and operational complexity. The service ensures that access controls are consistently applied across shared resources, enhancing security and compliance. Additionally, RAM's integration with AWS Organizations and IAM allows for streamlined governance and management, facilitating efficient collaboration across teams and accounts.


  **Average Rating:** 4.5/5.0
  **Total Reviews:** 25

**User Satisfaction Scores:**

- **Has the product been a good partner in doing business?:** 8.7/10 (Category avg: 8.9/10)
- **Security:** 9.6/10 (Category avg: 9.1/10)
- **Data Protection:** 9.1/10 (Category avg: 9.0/10)
- **Processes:** 9.1/10 (Category avg: 8.9/10)


**Seller Details:**

- **Seller:** [Amazon Web Services (AWS)](https://www.g2.com/sellers/amazon-web-services-aws-3e93cc28-2e9b-4961-b258-c6ce0feec7dd)
- **Year Founded:** 2006
- **HQ Location:** Seattle, WA
- **Twitter:** @awscloud (2,220,862 Twitter followers)
- **LinkedIn® Page:** https://www.linkedin.com/company/amazon-web-services/ (156,424 employees on LinkedIn®)
- **Ownership:** NASDAQ: AMZN

**Reviewer Demographics:**
  - **Top Industries:** Information Technology and Services, Computer Software
  - **Company Size:** 38% Enterprise, 38% Mid-Market


  ### 8. [FortiNAC](https://www.g2.com/products/fortinac/reviews)
  FortiNAC provides the network visibility to see everything connected to the network, as well as the ability to control those devices and users, including dynamic, automated responses.


  **Average Rating:** 4.4/5.0
  **Total Reviews:** 20

**User Satisfaction Scores:**

- **Has the product been a good partner in doing business?:** 8.3/10 (Category avg: 8.9/10)
- **Security:** 8.6/10 (Category avg: 9.1/10)
- **Data Protection:** 8.8/10 (Category avg: 9.0/10)
- **Processes:** 8.6/10 (Category avg: 8.9/10)


**Seller Details:**

- **Seller:** [Fortinet](https://www.g2.com/sellers/fortinet)
- **Year Founded:** 2000
- **HQ Location:** Sunnyvale, CA
- **Twitter:** @Fortinet (151,247 Twitter followers)
- **LinkedIn® Page:** https://www.linkedin.com/company/6460/ (16,112 employees on LinkedIn®)
- **Ownership:** NASDAQ: FTNT

**Reviewer Demographics:**
  - **Top Industries:** Computer & Network Security
  - **Company Size:** 55% Mid-Market, 35% Enterprise


  ### 9. [Forescout Platform](https://www.g2.com/products/forescout-platform/reviews)
  Based in Silicon Valley, Forescout is your zero-trust partner. With 1000s of customers and decades of cyber leadership including threat research, Forescout has your back. Your journey to Universal Zero Trust Network Access starts with the Forescout 4D platform™: the only platform for UZTNA powered by agentic AI. Continuously identify, protect, and ensure the compliance of all assets – IT, IoT, IoMT and OT – regardless of location, automatically. Deliver cloud-native network security intelligence boosted by agentic workflows from the pioneer of traditional NAC. Shift from reactive firefighting to proactive risk management. Get continuous visibility into what’s actually exposed across every connected asset — managed or not, physical or virtual — then take control and automate compliance. The result? Priorities managed. Peace of mind.


  **Average Rating:** 4.5/5.0
  **Total Reviews:** 15

**User Satisfaction Scores:**

- **Has the product been a good partner in doing business?:** 8.6/10 (Category avg: 8.9/10)
- **Security:** 8.6/10 (Category avg: 9.1/10)
- **Data Protection:** 8.7/10 (Category avg: 9.0/10)
- **Processes:** 9.6/10 (Category avg: 8.9/10)


**Seller Details:**

- **Seller:** [Forescout Technologies](https://www.g2.com/sellers/forescout-technologies)
- **Year Founded:** 2000
- **HQ Location:** San Jose, CA
- **Twitter:** @ForeScout (23,137 Twitter followers)
- **LinkedIn® Page:** https://www.linkedin.com/company/forescout-technologies (1,215 employees on LinkedIn®)

**Reviewer Demographics:**
  - **Top Industries:** Computer & Network Security
  - **Company Size:** 56% Enterprise, 31% Mid-Market


#### Pros & Cons

**Pros:**

- Security (4 reviews)
- Internet Security (3 reviews)
- IP Addressing (3 reviews)
- Monitoring (3 reviews)
- Customization (2 reviews)

**Cons:**

- Complex Implementation (2 reviews)
- Dependency Issues (2 reviews)
- Integration Issues (2 reviews)
- Performance Issues (2 reviews)
- Poor Customer Support (2 reviews)

  ### 10. [Citrix Gateway](https://www.g2.com/products/citrix-gateway/reviews)
  Citrix Gateway is a customer-managed solution that can be deployed on premises or on any public cloud, such as AWS, Azure, or Google Cloud Platform.


  **Average Rating:** 4.1/5.0
  **Total Reviews:** 67

**User Satisfaction Scores:**

- **Has the product been a good partner in doing business?:** 8.3/10 (Category avg: 8.9/10)
- **Security:** 9.2/10 (Category avg: 9.1/10)
- **Data Protection:** 8.7/10 (Category avg: 9.0/10)
- **Processes:** 9.1/10 (Category avg: 8.9/10)


**Seller Details:**

- **Seller:** [Citrix](https://www.g2.com/sellers/citrix)
- **Year Founded:** 1989
- **HQ Location:** Fort Lauderdale, FL
- **Twitter:** @citrix (198,243 Twitter followers)
- **LinkedIn® Page:** https://www.linkedin.com/company/2641/ (4,262 employees on LinkedIn®)
- **Ownership:** NASDAQ:CTXS

**Reviewer Demographics:**
  - **Top Industries:** Information Technology and Services, Hospital & Health Care
  - **Company Size:** 56% Enterprise, 37% Mid-Market


#### Pros & Cons

**Pros:**

- Easy to Access (1 reviews)
- Security Focus (1 reviews)

**Cons:**

- Setup Difficulties (1 reviews)

  ### 11. [Coro Cybersecurity](https://www.g2.com/products/coro-cybersecurity/reviews)
  Coro is the easy cybersecurity company. We designed an all-in-one platform that every lean IT team will master. While other solutions scare people into buying complicated, confusing products, we lead with elegant simplicity. Coro is fast to deploy, easy to use, and designed not to waste your time. Once you install Coro, you’ll hardly think about us. That’s the point. Coro automatically detects and fixes security problems, so IT teams don’t have to spend time investigating or troubleshooting. We’re also one of the fastest-growing tech companies in North America, just ask Deloitte. Designed primarily for lean IT teams, Coro’s platform is particularly beneficial for organizations that may lack extensive IT resources or dedicated cybersecurity teams. With the increasing complexity of cyber threats, these businesses often find it challenging to maintain adequate security measures. Coro addresses this gap by automating the detection and remediation of security threats, allowing businesses to focus on their core operations without the constant worry of potential breaches or security incidents. One of Coro's key benefits is its intuitive, user-friendly interface, which simplifies the management of cybersecurity protocols. This ease of use is particularly advantageous for organizations with limited IT expertise, as it minimizes the need for extensive training or technical knowledge. Additionally, Coro’s continuous monitoring and reporting features provide businesses with valuable insights into their security posture, enabling them to make informed decisions about their cybersecurity strategies. Another impressive features is how comprehensive, yet powerful, it's all-in-one platform is. Using advanced AI technology, it detects and remediates over 92% of threats automatically, ensuring potential vulnerabilities are identified and addressed in real-time, significantly reducing the risk of data breaches and other cyber incidents. Their impressive performance has been recognised by G2 with a 94% approval rating from users and SE Labs, who awarded them three AAA ratings for their EDR, Email and Cloud modules. Overall, Coro’s cybersecurity platform represents a significant advancement in the field of cybersecurity. By automating threat detection and remediation, offering customizable solutions, and providing a user-friendly experience, Coro empowers organizations to effectively defend against the evolving landscape of cyber threats. Its recognition as one of the fastest-growing cybersecurity companies in North America further underscores its commitment to delivering innovative and effective security solutions.


  **Average Rating:** 4.7/5.0
  **Total Reviews:** 231

**User Satisfaction Scores:**

- **Has the product been a good partner in doing business?:** 9.6/10 (Category avg: 8.9/10)
- **Security:** 8.3/10 (Category avg: 9.1/10)
- **Data Protection:** 9.2/10 (Category avg: 9.0/10)
- **Processes:** 10.0/10 (Category avg: 8.9/10)


**Seller Details:**

- **Seller:** [Coronet](https://www.g2.com/sellers/coronet)
- **Company Website:** https://www.coro.net
- **Year Founded:** 2014
- **HQ Location:** Chicago, IL
- **Twitter:** @coro_cyber (1,839 Twitter followers)
- **LinkedIn® Page:** https://www.linkedin.com/company/coronet (295 employees on LinkedIn®)

**Reviewer Demographics:**
  - **Who Uses This:** IT Manager, IT Director
  - **Top Industries:** Non-Profit Organization Management, Financial Services
  - **Company Size:** 57% Mid-Market, 36% Small-Business


#### Pros & Cons

**Pros:**

- Ease of Use (99 reviews)
- Security (68 reviews)
- Customer Support (67 reviews)
- Protection (55 reviews)
- Easy Setup (49 reviews)

**Cons:**

- Performance Issues (32 reviews)
- Improvements Needed (20 reviews)
- False Positives (19 reviews)
- Inaccuracy (19 reviews)
- Limited Features (16 reviews)

  ### 12. [SonicWall Secure Mobile Access](https://www.g2.com/products/sonicwall-secure-mobile-access/reviews)
  SonicWall Secure Mobile Access (SMA) is a unified secure access gateway that enables organization to provide anytime, anywhere and any device access to any application. SMA’s granular access control policy engine, context-aware device authorization, application-level VPN and advanced authentication with single sign-on enable organizations to move to the cloud with ease, and embrace BYOD and mobility in a hybrid IT environment.


  **Average Rating:** 4.4/5.0
  **Total Reviews:** 31

**User Satisfaction Scores:**

- **Has the product been a good partner in doing business?:** 9.0/10 (Category avg: 8.9/10)
- **Security:** 9.6/10 (Category avg: 9.1/10)
- **Data Protection:** 9.8/10 (Category avg: 9.0/10)
- **Processes:** 9.6/10 (Category avg: 8.9/10)


**Seller Details:**

- **Seller:** [SonicWall](https://www.g2.com/sellers/sonicwall)
- **Year Founded:** 1991
- **HQ Location:** Milpitas, CA
- **Twitter:** @SonicWall (29,307 Twitter followers)
- **LinkedIn® Page:** https://www.linkedin.com/company/4926/ (1,951 employees on LinkedIn®)

**Reviewer Demographics:**
  - **Top Industries:** Computer & Network Security
  - **Company Size:** 55% Mid-Market, 24% Enterprise


  ### 13. [Twingate](https://www.g2.com/products/twingate/reviews)
  Twingate is a secure remote access solution for an organization’s private applications, data, and environments, whether they are on-premise or in the cloud. Built to make the lives of DevOps teams, IT/infrastructure teams, and end users easier, it replaces outdated business VPNs which were not built to handle a world in which "work from anywhere" and cloud-based assets are increasingly the norm. Twingate’s modern zero trust-based approach to securing remote access focuses on improving security, while not compromising on usability and maintainability. Twingate distinguishes itself from other solutions in the following ways: - Software-only solution can be deployed alongside existing solutions in minutes, without requiring changes to existing infrastructure. - Enables least privilege access at the application level without requiring networks to be re-architected. - Centralized admin console, coupled with extensive logging capabilities, provides control and visibility over an enterprise’s entire network. - Scales up to support more users and resources without burdening IT teams with network segmentation projects or buying new hardware. - Client agents can be set up by users without IT support, are always on, and do not require user interaction once enabled. - User internet connectivity is improved due to split tunneling, no backhauling, and an intelligent client agent that handles authorization and routing activities on device.


  **Average Rating:** 4.7/5.0
  **Total Reviews:** 73

**User Satisfaction Scores:**

- **Has the product been a good partner in doing business?:** 9.3/10 (Category avg: 8.9/10)
- **Security:** 9.3/10 (Category avg: 9.1/10)
- **Data Protection:** 9.0/10 (Category avg: 9.0/10)
- **Processes:** 8.5/10 (Category avg: 8.9/10)


**Seller Details:**

- **Seller:** [Twingate Inc.](https://www.g2.com/sellers/twingate-inc)
- **Company Website:** https://www.twingate.com
- **HQ Location:** Redwood City, California
- **Twitter:** @TwingateHQ (2,386 Twitter followers)
- **LinkedIn® Page:** https://www.linkedin.com/company/twingate/about (78 employees on LinkedIn®)

**Reviewer Demographics:**
  - **Top Industries:** Information Technology and Services, Computer Software
  - **Company Size:** 53% Mid-Market, 42% Small-Business


#### Pros & Cons

**Pros:**

- Security (9 reviews)
- Ease of Use (8 reviews)
- Secure Access (7 reviews)
- Access Management (6 reviews)
- Implementation Ease (6 reviews)

**Cons:**

- Performance Issues (9 reviews)
- Complex Configuration (3 reviews)
- Complex Implementation (3 reviews)
- Limited Customization (3 reviews)
- Update Issues (3 reviews)

  ### 14. [NordLayer](https://www.g2.com/products/nordlayer/reviews)
  NordLayer is a toggle-ready network security platform that helps businesses connect, protect, detect, and respond to cyber threats. Built on NordVPN standards, it ensures a secure and reliable connection to the internet and private company resources. NordLayer is designed for modern businesses of all sizes, offering cutting-edge business VPN, Zero Trust Network Access (ZTNA), advanced threat protection, and threat intelligence. It helps companies meet regulatory compliance requirements and enhance cyber resilience while remaining hardware-free, scalable, and adaptable to any work model. With user-centered security and intuitive deployment, NordLayer integrates easily into any existing infrastructure, ensuring best-in-the-market protection for remote, hybrid, and on-premises teams. -- Looking for a partnership? The NordLayer Partner Program helps MSPs, resellers, and agents grow their businesses with high profit margins, dedicated training, 24/7 technical support, and no upfront investment. Learn more: nordlayer.com/partner-program


  **Average Rating:** 4.3/5.0
  **Total Reviews:** 126

**User Satisfaction Scores:**

- **Has the product been a good partner in doing business?:** 8.5/10 (Category avg: 8.9/10)
- **Security:** 9.4/10 (Category avg: 9.1/10)
- **Data Protection:** 9.7/10 (Category avg: 9.0/10)
- **Processes:** 8.3/10 (Category avg: 8.9/10)


**Seller Details:**

- **Seller:** [Nord Security](https://www.g2.com/sellers/nord-security)
- **Company Website:** https://nordsecurity.com/
- **Year Founded:** 2012
- **HQ Location:** Global
- **Twitter:** @NordPass (9,474 Twitter followers)
- **LinkedIn® Page:** https://www.linkedin.com/company/nordsecurity/ (1,883 employees on LinkedIn®)

**Reviewer Demographics:**
  - **Who Uses This:** CTO
  - **Top Industries:** Computer Software, Information Technology and Services
  - **Company Size:** 56% Small-Business, 35% Mid-Market


#### Pros & Cons

**Pros:**

- Ease of Use (6 reviews)
- Setup Ease (4 reviews)
- Easy Access (3 reviews)
- Easy Management (3 reviews)
- Easy Setup (3 reviews)

**Cons:**

- Performance Issues (5 reviews)
- Limited Features (4 reviews)
- Connection Issues (3 reviews)
- Complex Configuration (2 reviews)
- Complex Setup (2 reviews)

  ### 15. [Avigilon Alta](https://www.g2.com/products/avigilon-alta/reviews)
  Go beyond traditional physical security technology. Maximize operational flexibility with our 100% serverless cloud-based solution, enabling fully remote management of your entire physical security system, with open architecture for unlimited integration support. Avigilon Alta (formerly Ava Security and Openpath) uses powerful AI analytics and integrated machine learning capabilities to help teams proactively manage security across any number of sites, from anywhere in the world. Connect your existing cameras, sensors, dashboards, communication systems and apps for a 360-degree overview across your security ecosystem, complete with real-time intelligent alerts right to your mobile device. Build a safer environment and make your teams more efficient with Avigilon Alta end-to-end cloud security.


  **Average Rating:** 4.6/5.0
  **Total Reviews:** 33

**User Satisfaction Scores:**

- **Has the product been a good partner in doing business?:** 9.5/10 (Category avg: 8.9/10)
- **Security:** 9.7/10 (Category avg: 9.1/10)
- **Data Protection:** 8.0/10 (Category avg: 9.0/10)
- **Processes:** 9.3/10 (Category avg: 8.9/10)


**Seller Details:**

- **Seller:** [Avigilon](https://www.g2.com/sellers/avigilon-088fb6fb-0bc3-424d-859b-a241c8f0612e)
- **Year Founded:** 2004
- **HQ Location:** Vancouver, BC
- **Twitter:** @Avigilon (8,126 Twitter followers)
- **LinkedIn® Page:** https://www.linkedin.com/company/avigilon/ (393 employees on LinkedIn®)

**Reviewer Demographics:**
  - **Company Size:** 56% Mid-Market, 35% Small-Business


#### Pros & Cons

**Pros:**

- Ease of Use (3 reviews)
- Customer Support (2 reviews)
- Implementation Ease (2 reviews)
- Installation Ease (2 reviews)
- Reliability (2 reviews)

**Cons:**

- Performance Issues (2 reviews)
- Expensive (1 reviews)
- Outdated Technology (1 reviews)

  ### 16. [Check Point Capsule Mobile Secure Workspace](https://www.g2.com/products/check-point-capsule-mobile-secure-workspace/reviews)
  Check Point Capsule Mobile Secure Workspace is a mobile security solution that establishes a secure, isolated corporate environment on personal devices, ensuring the protection of corporate data both within and beyond the corporate network. By creating an encrypted container, it allows employees to access business resources securely without compromising personal data, thereby supporting a balanced approach to Bring Your Own Device (BYOD) policies. Key Features and Functionality: - Secure Access Control: Implements robust authentication methods, including Active Directory, LDAP, RADIUS, and RSA SecureID, to ensure that only authorized users can access corporate resources. - Data Encryption: Utilizes AES256-bit encryption to safeguard data at rest and in transit, maintaining the confidentiality and integrity of corporate information. - Remote Wipe Capability: Enables administrators to remotely erase corporate data from lost or stolen devices, mitigating potential data breaches. - Root and Jailbreak Detection: Identifies compromised devices and restricts their access to corporate resources, preventing security vulnerabilities. - Seamless User Experience: Provides intuitive access to essential business applications such as email, calendar, contacts, and corporate intranets, enhancing productivity without sacrificing security. - Platform Compatibility: Supports both iOS and Android devices, ensuring broad accessibility across various mobile platforms. Primary Value and User Solutions: Check Point Capsule Mobile Secure Workspace addresses the critical need for secure mobile access to corporate data in today's increasingly mobile workforce. By segregating corporate and personal data, it upholds user privacy while enforcing stringent security measures. This solution empowers organizations to implement effective BYOD strategies, boosting employee productivity without compromising data security. Additionally, its simplified management reduces the time, effort, and cost associated with securing mobile devices and data, offering a comprehensive and efficient approach to mobile security.


  **Average Rating:** 4.4/5.0
  **Total Reviews:** 20

**User Satisfaction Scores:**

- **Has the product been a good partner in doing business?:** 8.3/10 (Category avg: 8.9/10)
- **Security:** 8.3/10 (Category avg: 9.1/10)
- **Data Protection:** 9.2/10 (Category avg: 9.0/10)
- **Processes:** 9.2/10 (Category avg: 8.9/10)


**Seller Details:**

- **Seller:** [Check Point Software Technologies](https://www.g2.com/sellers/check-point-software-technologies)
- **Year Founded:** 1993
- **HQ Location:** Redwood City, CA
- **Twitter:** @CheckPointSW (70,927 Twitter followers)
- **LinkedIn® Page:** https://www.linkedin.com/company/check-point-software-technologies/ (8,356 employees on LinkedIn®)
- **Ownership:** NASDAQ:CHKP

**Reviewer Demographics:**
  - **Top Industries:** Information Technology and Services
  - **Company Size:** 48% Enterprise, 29% Mid-Market


#### Pros & Cons

**Pros:**

- Security (2 reviews)
- Easy Integrations (1 reviews)
- Malware Protection (1 reviews)
- Online Security (1 reviews)
- Performance Efficiency (1 reviews)

**Cons:**

- Performance Issues (2 reviews)
- Expensive (1 reviews)

  ### 17. [Genea Security](https://www.g2.com/products/genea-security/reviews)
  Genea Security is a cloud-native access control solution designed to provide IT and security teams with comprehensive oversight of access activities across global enterprises or building portfolios. This innovative technology combines advanced software capabilities with non-proprietary Mercury-based hardware, allowing administrators to monitor and manage access in real-time. With Genea Security, organizations can streamline their security processes while ensuring the safety and convenience of their users. Targeted at businesses of all sizes, Genea Security caters to a diverse audience, including facility managers, IT professionals, and security teams. Its versatile features make it suitable for various use cases, from managing access in large corporate offices to securing multi-building complexes. The platform's Custom Dashboard allows users to focus on specific access alerts, providing a clear view of who is entering and exiting facilities. This level of oversight is crucial for organizations looking to enhance security protocols and maintain a safe environment for employees and visitors alike. One of the standout features of Genea Security is its ability to integrate seamlessly with third-party software, including video management systems and identity management platforms. This integration enables organizations to automate user management processes, such as adding and removing users, which can significantly reduce administrative burdens. The provision of mobile keys further enhances security, allowing employees to access doors, gates, and elevators using their smartphones. This flexibility not only improves user experience but also minimizes the need for physical access cards and fobs. Genea Security also emphasizes health and safety through features like Safe Workplace, Building Sync, and Touchless Visitor Management. These tools help organizations navigate the complexities of maintaining a secure environment, especially in light of evolving health guidelines. Additionally, the self-service tenant portals streamline user management for building teams, making it easier to maintain accurate access records and respond to tenant needs efficiently. With a commitment to customer support, Genea Security offers 24/7 assistance, ensuring that users can access help whenever they need it. This dedication to service enhances the overall user experience, reinforcing the platform's reliability as a comprehensive access control solution. By combining advanced technology with robust support, Genea Security stands out as a valuable asset for organizations seeking to enhance their security infrastructure.


  **Average Rating:** 4.3/5.0
  **Total Reviews:** 97

**User Satisfaction Scores:**

- **Has the product been a good partner in doing business?:** 9.2/10 (Category avg: 8.9/10)
- **Security:** 9.3/10 (Category avg: 9.1/10)
- **Data Protection:** 8.9/10 (Category avg: 9.0/10)
- **Processes:** 8.8/10 (Category avg: 8.9/10)


**Seller Details:**

- **Seller:** [Genea](https://www.g2.com/sellers/genea)
- **Company Website:** https://www.getgenea.com/
- **Year Founded:** 2006
- **HQ Location:** Irvine, CA
- **Twitter:** @GetGenea (780 Twitter followers)
- **LinkedIn® Page:** https://www.linkedin.com/company/getgenea/ (195 employees on LinkedIn®)

**Reviewer Demographics:**
  - **Top Industries:** Computer Software, Information Technology and Services
  - **Company Size:** 58% Mid-Market, 22% Small-Business


#### Pros & Cons

**Pros:**

- Ease of Use (6 reviews)
- Remote Access (4 reviews)
- Access (3 reviews)
- Simple (3 reviews)
- Access Control (2 reviews)

**Cons:**

- Performance Issues (6 reviews)
- Limited Features (3 reviews)
- Poor Customer Support (2 reviews)
- Access Issues (1 reviews)
- Communication Issues (1 reviews)

  ### 18. [F5 BIG-IP Access Policy Manager (APM)](https://www.g2.com/products/f5-big-ip-access-policy-manager-apm/reviews)
  F5® BIG-IP® Access Policy Manager® (APM) is an access management proxy solution managing global access to user's network, cloud providers, applications, and application programming interfaces (APIs). F5 BIG-IP APM consolidates authentication for remote users and systems, mobile devices, distributed networks, virtual environments, and web access. BIG-IP APM also bridges modern and classic authentication and authorization protocols and methods. Applications which are unable to support modern authentication and authorization protocols, like SAML and OAuth with OIDC, BIG-IP APM converts user credentials to the appropriate authentication standard supported by the application.


  **Average Rating:** 4.1/5.0
  **Total Reviews:** 18

**User Satisfaction Scores:**

- **Has the product been a good partner in doing business?:** 10.0/10 (Category avg: 8.9/10)
- **Security:** 10.0/10 (Category avg: 9.1/10)
- **Data Protection:** 10.0/10 (Category avg: 9.0/10)
- **Processes:** 10.0/10 (Category avg: 8.9/10)


**Seller Details:**

- **Seller:** [F5](https://www.g2.com/sellers/f5-f6451ada-8c47-43f5-b017-58663a045bc5)
- **HQ Location:** Seattle, Washington
- **Twitter:** @F5Networks (1,386 Twitter followers)
- **LinkedIn® Page:** https://www.linkedin.com/company/4841/ (6,133 employees on LinkedIn®)

**Reviewer Demographics:**
  - **Company Size:** 72% Enterprise, 22% Mid-Market


  ### 19. [UTunnel VPN and ZTNA](https://www.g2.com/products/utunnel-vpn-and-ztna/reviews)
  UTunnel offers scalable Cloud VPN and Zero-Trust Network Access (ZTNA) solutions that enable secure connectivity and seamless remote access to your business network resources. With automated deployment options for both cloud and on-premise environments, UTunnel simplifies the setup process, allowing you to configure organization-wide ZTNA and VPN services in just minutes using its Access Gateway (VPNaaS) and MeshConnect (ZTNA and Mesh Networking) solutions. What sets UTunnel apart is its combination of versatility, affordability, and robust support, ensuring that your business's network security is handled with ease, giving you peace of mind as you focus on what matters most—growing your business.


  **Average Rating:** 4.8/5.0
  **Total Reviews:** 24

**User Satisfaction Scores:**

- **Has the product been a good partner in doing business?:** 9.8/10 (Category avg: 8.9/10)
- **Security:** 9.8/10 (Category avg: 9.1/10)
- **Data Protection:** 9.4/10 (Category avg: 9.0/10)
- **Processes:** 9.4/10 (Category avg: 8.9/10)


**Seller Details:**

- **Seller:** [Secubytes LLC](https://www.g2.com/sellers/secubytes-llc)
- **Year Founded:** 2019
- **HQ Location:** West Chester, Pennsylvania
- **LinkedIn® Page:** https://www.linkedin.com/company/30253428 (5 employees on LinkedIn®)

**Reviewer Demographics:**
  - **Top Industries:** Information Technology and Services
  - **Company Size:** 71% Small-Business, 25% Mid-Market


#### Pros & Cons

**Pros:**

- Ease of Use (3 reviews)
- Secure Access (3 reviews)
- Access Management (2 reviews)
- Affordable (2 reviews)
- Easy Setup (2 reviews)

**Cons:**

- Expensive (1 reviews)
- Firewall Issues (1 reviews)
- Installation Issues (1 reviews)
- Lack of Guidance (1 reviews)
- Poor Documentation (1 reviews)

  ### 20. [Ivanti NAC](https://www.g2.com/products/ivanti-nac/reviews)
  Endpoint visibility into on-premise and remote connection via PCS. Fingerprinting Methods: DHCP Fingerprinting (Helper Address or RSPAN port), MAC OUI, SNMP/SNMP Traps, CDP/LLDP, HTTP User Agent, Nmap, WMI and MDM. Device Discovery Reporting & Dashboard with advanced filters and historical data


  **Average Rating:** 4.4/5.0
  **Total Reviews:** 24

**User Satisfaction Scores:**

- **Has the product been a good partner in doing business?:** 8.8/10 (Category avg: 8.9/10)
- **Security:** 8.9/10 (Category avg: 9.1/10)
- **Data Protection:** 8.7/10 (Category avg: 9.0/10)
- **Processes:** 8.8/10 (Category avg: 8.9/10)


**Seller Details:**

- **Seller:** [Ivanti](https://www.g2.com/sellers/ivanti)
- **Year Founded:** 1985
- **HQ Location:** South Jordan, UT
- **Twitter:** @GoIvanti (6,774 Twitter followers)
- **LinkedIn® Page:** https://www.linkedin.com/company/15224185/ (2,968 employees on LinkedIn®)

**Reviewer Demographics:**
  - **Top Industries:** Information Technology and Services
  - **Company Size:** 76% Enterprise, 21% Mid-Market


  ### 21. [threatER](https://www.g2.com/products/threater/reviews)
  threatER is the leading preemptive cybersecurity platform for building and maintaining trust at scale. Our SaaS solution continuously learns from all available data, allowing you to gain better insights and extract more value from your security stack. threatER transforms your security stack into a smart, adaptive and automated prevention engine. With threatER you reduce risk, get more value from your security investments and reinforce trust across every connection without slowing down your business. Learn more at www.threater.com.


  **Average Rating:** 4.8/5.0
  **Total Reviews:** 33

**User Satisfaction Scores:**

- **Has the product been a good partner in doing business?:** 9.5/10 (Category avg: 8.9/10)
- **Security:** 9.7/10 (Category avg: 9.1/10)
- **Data Protection:** 9.7/10 (Category avg: 9.0/10)
- **Processes:** 8.8/10 (Category avg: 8.9/10)


**Seller Details:**

- **Seller:** [threatER](https://www.g2.com/sellers/threater)
- **Company Website:** https://www.threater.com/
- **HQ Location:** Tysons, Virginia
- **LinkedIn® Page:** https://www.linkedin.com/company/threater/ (28 employees on LinkedIn®)

**Reviewer Demographics:**
  - **Company Size:** 56% Mid-Market, 32% Enterprise


#### Pros & Cons

**Pros:**

- Ease of Use (7 reviews)
- Performance Efficiency (3 reviews)
- Security (3 reviews)
- Setup Ease (3 reviews)
- Threat Protection (3 reviews)

**Cons:**

- Performance Issues (3 reviews)
- Compatibility Issues (2 reviews)
- False Positives (2 reviews)
- Access Control (1 reviews)
- Access Issues (1 reviews)

  ### 22. [MetaAccess](https://www.g2.com/products/opswat-metaaccess/reviews)
  Zero-Trust Access (ZTA), an approach that considers all entities untrusted by default, is rapidly becoming the industry standard and being mandated by regulatory bodies including governments. Leveraging the latest ZTA technologies, OPSWAT’s MetaAccess Zero-Trust Access Platform is a unified platform cloud solution for providing deep endpoint compliance, advanced endpoint protection, identity authorization, and secure access without hindering workflows. MetaAccess delivers security compliance, visibility, and control to every device and user accessing enterprise resources. Based upon the Software Defined Perimeter Technology (SDP), it examines devices to make sure that they are secure, with the required security controls installed. It then goes much deeper by doing the most comprehensive device posture check in the industry. The MetaAccess Vulnerability Management Module enables the MetaAccess Platform to detect and report vulnerabilities in installed software on the device including 3rd party applications and critical OS security patches. MetaAccess detects more than 27,000 CVEs and displays the Known Exploited Vulnerabilities (KEV) as posted by CISA that are relevant to the specific endpoint. The MetaAccess Patch Management module enables the MetaAccess Platform to provide a remediation process for required vulnerability patches. MetaAccess detects vulnerabilities on more than 700 third party applications, auto-patching more than 150 of these. On the security side, MetaAccess provides removable media protection and executes a multi-scan of more than 20 Anti-Virus engines as well as protects against keyloggers, screen capture and copy and paste. Only once MetaAccess has ensured that the endpoint device is both compliant and secure, will the user be authorized through an integrated IAM (identity authorization management) solution and be given access to corporate resources based on a policy of least-privilege access, that is only to those resources to which the user is entitled.


  **Average Rating:** 3.9/5.0
  **Total Reviews:** 14

**User Satisfaction Scores:**

- **Has the product been a good partner in doing business?:** 5.8/10 (Category avg: 8.9/10)
- **Security:** 7.1/10 (Category avg: 9.1/10)
- **Data Protection:** 7.8/10 (Category avg: 9.0/10)
- **Processes:** 7.8/10 (Category avg: 8.9/10)


**Seller Details:**

- **Seller:** [OPSWAT](https://www.g2.com/sellers/opswat)
- **Year Founded:** 2002
- **HQ Location:** Tampa, Florida
- **Twitter:** @OPSWAT (7,227 Twitter followers)
- **LinkedIn® Page:** https://www.linkedin.com/company/opswat/ (1,124 employees on LinkedIn®)

**Reviewer Demographics:**
  - **Top Industries:** Information Technology and Services
  - **Company Size:** 43% Mid-Market, 36% Enterprise


  ### 23. [Lit Protocol](https://www.g2.com/products/lit-protocol/reviews)
  Lit Protocol is a decentralized key management network designed to provide secure, programmable signing and encryption capabilities for developers. By leveraging threshold cryptography and trusted execution environments, Lit enables the creation of decentralized applications that manage crypto assets, private data, and user authority seamlessly across various platforms. This infrastructure allows for the development of immutable, interoperable, and user-owned applications without relying on centralized custodians. Key Features and Functionality: - Decentralized Key Management: Lit Protocol utilizes a network of independent nodes operating within sealed Trusted Execution Environments . These nodes collectively manage cryptographic key pairs, ensuring that private keys are never fully exposed to any single entity. - Programmable Signing and Encryption: Developers can create immutable JavaScript functions, known as Lit Actions, which dictate how keys are used for signing and encryption operations. This enables complex transaction automations, access control rules, and other programmable functionalities. - Universal Accounts: Lit Protocol supports the creation of universal accounts that operate seamlessly across multiple blockchain networks, including Bitcoin, Ethereum, Solana, and Cosmos. These non-custodial wallets are fully programmable and can be used to orchestrate liquidity, enable transaction automations, and more. - Access Control and Encryption: The protocol allows for the encryption of data with flexible access control conditions, enabling private data storage on the open web. Access rights can be managed using on-chain or off-chain boolean logic rules, ensuring that only authorized parties can decrypt the data. Primary Value and Problem Solved: Lit Protocol addresses the critical need for secure and decentralized key management in the Web3 ecosystem. By eliminating the reliance on centralized custodians, it enhances the security and autonomy of digital interactions and data. The protocol facilitates greater interoperability between on-chain and off-chain systems, enabling developers to build applications that are both secure and user-controlled. This empowers users with true ownership over their data and assets, fostering a more decentralized and trustless internet.


  **Average Rating:** 4.1/5.0
  **Total Reviews:** 12

**User Satisfaction Scores:**

- **Has the product been a good partner in doing business?:** 8.3/10 (Category avg: 8.9/10)
- **Security:** 9.2/10 (Category avg: 9.1/10)
- **Data Protection:** 10.0/10 (Category avg: 9.0/10)
- **Processes:** 7.5/10 (Category avg: 8.9/10)


**Seller Details:**

- **Seller:** [Lit Protocol](https://www.g2.com/sellers/lit-protocol)
- **HQ Location:** N/A
- **Twitter:** @LitProtocol (89,274 Twitter followers)
- **LinkedIn® Page:** https://www.linkedin.com/company/74277555 (11 employees on LinkedIn®)

**Reviewer Demographics:**
  - **Company Size:** 100% Small-Business


  ### 24. [Appgate SDP](https://www.g2.com/products/appgate-sdp/reviews)
  Appgate SDP is a leading Zero Trust Network Access solution that simplifies and strengthens access controls for all users, devices, and workloads. We deliver secure access for complex and hybrid enterprises by thwarting complex threats, reducing costs, and boosting operational efficiency. The full suite of Appgate solutions and services protects more than 650 organizations across the government, fortune 50, and global enterprises.


  **Average Rating:** 4.8/5.0
  **Total Reviews:** 35

**User Satisfaction Scores:**

- **Has the product been a good partner in doing business?:** 9.8/10 (Category avg: 8.9/10)
- **Security:** 10.0/10 (Category avg: 9.1/10)
- **Data Protection:** 8.6/10 (Category avg: 9.0/10)
- **Processes:** 7.5/10 (Category avg: 8.9/10)


**Seller Details:**

- **Seller:** [Appgate](https://www.g2.com/sellers/appgate)
- **Year Founded:** 2020
- **HQ Location:** Coral Gables, US
- **Twitter:** @AppgateSecurity (1,162 Twitter followers)
- **LinkedIn® Page:** https://www.linkedin.com/company/appgate-security (377 employees on LinkedIn®)
- **Ownership:** OTC: APGT

**Reviewer Demographics:**
  - **Top Industries:** Information Technology and Services, Computer & Network Security
  - **Company Size:** 54% Enterprise, 31% Mid-Market


#### Pros & Cons

**Pros:**

- Security (10 reviews)
- Customer Support (7 reviews)
- Ease of Use (6 reviews)
- Network Security (6 reviews)
- Reliability (6 reviews)

**Cons:**

- Performance Issues (6 reviews)
- Complex Setup (4 reviews)
- Connection Issues (2 reviews)
- Connectivity Issues (2 reviews)
- Difficult Configuration (2 reviews)

  ### 25. [Avigilon Unity](https://www.g2.com/products/avigilon-unity/reviews)
  This is the next generation of on-premise security. Give your teams full oversight and control through a centralized, browser-based video security and access control management platform, complete with powerful AI analytics. Avigilon Unity Video (formerly Avigilon Control Center) seamlessly merges intelligent, on-premise video management software and advanced cloud-managed capabilities with enterprise-class Avigilon Unity Access (formerly Access Control Manager) to elevate your situational awareness across any number of sites. Delivering a unified, end-to-end security management experience, Avigilon Unity helps you solve your most important security challenges, connecting you to the Motorola Solutions Safety and Security Ecosystem.


  **Average Rating:** 4.4/5.0
  **Total Reviews:** 20

**User Satisfaction Scores:**

- **Has the product been a good partner in doing business?:** 8.3/10 (Category avg: 8.9/10)


**Seller Details:**

- **Seller:** [Avigilon](https://www.g2.com/sellers/avigilon-088fb6fb-0bc3-424d-859b-a241c8f0612e)
- **Year Founded:** 2004
- **HQ Location:** Vancouver, BC
- **Twitter:** @Avigilon (8,126 Twitter followers)
- **LinkedIn® Page:** https://www.linkedin.com/company/avigilon/ (393 employees on LinkedIn®)

**Reviewer Demographics:**
  - **Who Uses This:** Associate
  - **Top Industries:** Retail
  - **Company Size:** 50% Mid-Market, 25% Enterprise




## Parent Category

[Network Security Software](https://www.g2.com/categories/network-security)



## Related Categories

- [Zero Trust Networking Software](https://www.g2.com/categories/zero-trust-networking)



---

## Buyer Guide

### What You Should Know About Network Access Control (NAC) Software

### What is Network Access Control (NAC) Software?

Network access control (NAC) software, as the name suggests, enables organizations to enforce policies and ultimately control access to their corporate networks. It’s also referred to as network admission control software or NAC software.

NAC systems strengthen network infrastructure security and reduce the risks associated with the exponentially growing number of endpoint devices. By enforcing policies on endpoint devices, NAC solutions can restrict access to enterprise networks and, at the same time, offer real-time network visibility.

One of the most common ways NAC software prevents insecure devices from infecting a network is by restricting access. NAC tools deny access to non-compliant devices to the network and, in most cases, place them in a quarantined network segment. In some cases, such non-compliant devices are offered restricted access to computing resources, thus reducing the chance of infiltration. NAC platforms can enhance network performance as well. Companies can also use them to create role-specific bandwidth rules.

NAC solutions can be viewed as a bouncer that decides who enters a business’ network. It does it by making sure the user is on the list, adheres to the network security policies of the company, etc. Different users are treated differently based on their level of access. The company can also restrict users who receive access to the network from accessing specific network resources or areas.

In other words, NAC solutions can help safeguard a private or proprietary network and protect its resources and user data. Companies can also use NAC systems as a discovery tool that lists all users, devices, and their access levels. Businesses can use it further to uncover previously unknown or non-compliant devices that have access to the network.

### What are the Common Features of Network Access Control (NAC) Software?

Manually configuring all the devices in use is a herculean task, especially for larger organizations with thousands or millions of users and devices. This has become even more troublesome with the widespread adoption of policies like bring your own device (BYOD) and the increasing use of internet of things (IoT) devices. The features offered by network access control tools can help companies adapt to such innovations or changes and stay secure. The following are some standard features of NAC systems.

**Policy lifecycle management:** NAC solutions can help enforce policies for all end-users and devices across an organization. The policy management feature of these tools allows companies to adjust policies based on changes to the business and in endpoint devices or users.

**Profiling:** This feature allows companies to scan and profile end users’ devices to ensure they aren’t potential threats. The software denies access to any unauthorized user or device. This is useful to forestall malicious actors from causing any damage to the network infrastructure.

**Security check:** NAC systems usually include a policy that assesses and authenticates end-users and devices. This security check can be in the form of verifying login credentials. If an endpoint device follows the security policy, it’s granted network access; otherwise, it’s viewed as a threat.

**Visibility:** NAC solutions offer features that allow IT administrators to view the type of devices being connected to the network. Administrators can view whether a device is wireless or wired or where it’s connecting from.

**Guest network access:** Not all non-compliant devices are threats; some could belong to guest users. The guest access feature makes it effortless to manage guest devices, including registration and authentication. The best NAC software will help provide guests with safe and controlled access to network resources, the internet, or other components like printers, without exposing other parts of the network. Some solutions also offer self-service device onboarding for automated device provisioning and profiling.

### What are the Benefits of Network Access Control (NAC) Software?

Network access control tools can make it easier to authenticate users and determine whether their devices are safe and compliant. These software solutions reduce the time and cost associated with authentication and authorization and make cybersecurity approachable. The following are some of the common benefits of using NAC software:

**Have ease of control:** NAC solutions make it possible to monitor and authenticate endpoint users and devices from a single, centralized security management system. The centralized admin console also streamlines detecting suspicious network activity and initiating remediation measures. Businesses can easily regulate the limit to which any user can use the network resources. NAC tools also allow large enterprises to segment their employees into groups based on their job functions and set up role-based access policies.

**Automate incident response:** Incident response, or IR for short, is a set of security policies and procedures that can be utilized to identify, isolate, and eliminate cyberattacks. NAC tools can help automate IR and significantly reduce the intensity of cyberattacks.

**Improve security:** An obvious benefit of NAC software is that it enhances the security posture of organizations by preventing unauthorized access and malware threats, or in other words, by enforcing zero-trust security postures. Since the solutions authenticate every network device, there’s improved visibility. NAC solutions are also typically capable of improving endpoint security against known vulnerabilities.

**Save costs and time:** Cyber threats can cost companies millions of dollars. Adding to this is the cost associated with reduced confidence by customers and loss of opportunities. With the increasing number of cyberattacks, companies need to establish NAC to protect their data and stakeholders. Along with saving costs, NAC tools save time by eliminating the need for manual configuration of devices.

**Provide a better user experience:** Along with freeing up IT administrators, NAC software enhances the end-user experience. With a NAC solution in place, users are more likely to trust an organization’s network and feel secure. Guest users will have a better, frictionless experience as well as they don’t have to engage with the IT department to connect to the network.

**Centralize access control:** NAC platforms can elevate user experience by offering centralized access control. As the name suggests, this feature allows users to access all IT assets, including applications, websites, and computing systems, with a single set of credentials.

**Generate reports:** NAC software empowers IT administrators to generate reports about attempted access throughout the organization. Such reports could help understand what authentication mechanisms work the best and, at the same time, can help detect malicious actors.

### Who Uses Network Access Control (NAC) Software?

**IT administrators:** Network access or security policies are typically set by IT administrators, which helps limit network access and the availability of network resources to end users.

#### Software Related to Network Access Control (NAC) Software

Related solutions that can be used together with network access control software include:

[Virtual private network (VPN) software](https://www.g2.com/categories/virtual-private-network-vpn) **:** VPN software enables organizations to offer their employees secure and remote access to the internal (private) network. It often contains firewalls to prevent cyber threats and ensure that only authorized devices can access the private networks.

[Multi-factor authentication (MFA) software](https://www.g2.com/categories/multi-factor-authentication-mfa) **:** MFA software protects end-users and prevents internal data theft by mandating them to prove their identity in two or more ways before granting them access to applications, systems, or sensitive information. IT administrators can choose MFA as a method by which NAC software authenticates users.

[Network monitoring software](https://www.g2.com/categories/network-monitoring) **:** As the name suggests, network monitoring software monitors and tracks the performance of a computer network. It detects problems by comparing live network performance against a predetermined performance baseline. It also alerts IT administrators if the network performance varies from the baseline or if it crashes.

[Antivirus software](https://www.g2.com/categories/antivirus) **:** Antivirus, or endpoint antivirus software, detects the presence of malicious software applications within an endpoint device. These tools typically include features to assess a device’s health and alert IT administrators of any infection. Antivirus software has removal features and may also include some form of firewall along with malware detection features.

[Firewall software](https://www.g2.com/categories/firewall-software) **:** Firewalls assess and filter user access to secure networks from attackers and hackers. It’s present as both hardware and software and creates barriers between networks and the internet.

[Incident response software](https://www.g2.com/categories/incident-response) **:** Incident response software automates the remediation of security breaches. It monitors IT systems for anomalies and alerts administrators of abnormal activity or malware. The tool may also allow teams to develop workflows and optimize response times to minimize the impact of security breaches.

[Cloud access security broker (CASB) software](https://www.g2.com/categories/cloud-access-security-broker-casb) **:** CASB software secures the connections between users and cloud-based software. It acts as a gateway through which organizations can enforce security requirements beyond on-premises software while simultaneously monitoring user behavior and action.

[Mobile device management (MDM) software](https://www.g2.com/categories/mobile-device-management-mdm): MDM software enables businesses to optimize the security and functionality of their mobile devices while simultaneously protecting the corporate network. It offers remote configuration, wiping, locking, and encryption of devices.

### Challenges with Network Access Control (NAC) Software

Software solutions can come with their own set of challenges. The following are some of the challenges associated with NAC software products.

**Low visibility into unmanaged devices:** NAC tools are effective only in managing security risks for known devices that are tied to human users. Using NAC software, it’s challenging to manage an unknown device, like a sensor or IoT device that has no specific user (or a group of users) associated with it.

**Inability to monitor for threats post access:** Since NAC tools are primed to control network access, they’re effective only for protection against external threats. They’re incapable of detecting (insider) threats from already authenticated devices.

**Inability to control wired networks:** NAC management tools may use protocols like Wi-Fi protected access (WPA) to secure access to wireless networks. However, wired networks usually don’t have such protocols for protection. Any device that’s physically plugged in gets full connectivity. Organizations may assume that the security risks associated with wired networks are low because an individual would need physical access to the network infrastructure to plug in devices. Unfortunately, there could be several internal malicious actors that may cause harm to the organization.

### How to Buy Network Access Control (NAC) Software

#### Requirements Gathering (RFI/RFP) for Network Access Control (NAC) Software

As the first step toward purchasing a network access control solution, buyers should perform an internal assessment to determine the company’s requirements. This initial stage of the software purchasing process is called requirements gathering and can make or break the software purchase decision.

Requirements gathering helps to list the most crucial functionality of the software. At the same time, it’s a valuable exercise to determine the nice-to-have features and features that may be prevalent in the software market but not very useful to the organization.

To state the obvious, buyers should consider the organization’s budget and try to stick to the same. Buyers can also look at the product’s pricing page to understand available purchase options. Most software products will follow a monthly subscription model.

Buyers should also consider several factors before purchasing the software. This includes understanding the maturity of the business’s current security strategy, which can significantly affect the type of NAC software bought and utilized. Here, the type of software refers to the kind of features and the level of security it offers.

#### Compare Network Access Control (NAC) Software Products

**Create a long list**

After performing the requirements gathering process, buyers should create a long list of potential NAC software products. This list can contain any product that meets the basic criteria.

Instead of finding the right product right away, buyers should aim to consider multiple products and eliminate those that don’t offer critical functionality. For instance, if a NAC product can effectively block unauthorized devices, it’s sensible to add it to this list, irrespective of its other features. It’s also logical to check the “complete” cost of the NAC software and remove products that go beyond the budget.

Buyers can visit G2’s [Network Access Control Software](https://www.g2.com/categories/network-access-control-nac) category, read reviews about NAC products, and determine which products fit their businesses’ specific needs. They can then create a long list of software products based on these findings.

**Create a short list**

The easiest way to create a short list is by removing products from the long list that don’t have the essential features. It’s logical to remove products that don’t have nice-to-have features.

The software should be able to scale up to support more users and protect more network resources without needing to invest in new hardware or burdening the IT department. If a software product lacks such capabilities, it’s better to remove it from the list.

Similarly, the software should have the ability to be deployed alongside the company’s existing security solutions. At the same time, it should be deployed without requiring changes to the existing infrastructure.

Some software products let users set network-level access policies, whereas, for some others, it’s resource-level access policies or both. Likewise, some products have agent implementation, whereas some have agentless implementation. Buyers can further refine the list by considering their requirements around such policies.

The level of support offered by the NAC software vendors can also be used as a parameter for eliminating products. Buyers can also check whether the software has network analytics and necessary integration features.

Buyers can further shorten the list by looking at the granularity of policy enforcement. They can check how easy it is to establish and enforce policies and also check whether the tool will fulfill the company’s compliance needs.

Ideally, the short list should contain five to seven products.

**Conduct demos**

Product demos are useful to understand a product’s usability and functionality. By requesting demos from software vendors, buyers can effectively compare the products in the short list and make a better purchase decision. Buyers should ensure they use the same use cases across all products.

#### Selection of Network Access Control (NAC) Software

**Choose a selection team**

To make the best software purchase decision, buyers should select a team responsible for implementing and managing the software. In most cases, such a team will include IT administrators and managers, security team professionals, and key decision makers from the financial team.

**Negotiation**

Typically, a software product’s pricing isn’t fixed. Having an open conversation with the vendor may help buyers gain substantial discounts. Buyers can also request to remove certain features and lower the price. Opting for an annual subscription may also convince the vendor to offer discounts or extra seats.

Vendors usually try to convince buyers to purchase extra licenses or features, but organizations may never use them. Therefore, buyers should always try to start small in terms of functionality and licensing.

**Final decision**

To make the final software purchase decision, it’s advisable to implement the NAC software on a small scale and ask what the IT administrators and other users feel about it. Most software products offer free trials, and buyers can utilize this facility to review software.

If the software doesn’t fit the needs or doesn’t offer the expected level of satisfaction, buyers may have to go back to the short list and try out other products. If the software lives up to the expectations, buyers can proceed with the purchasing and contracting process.