Akamai
Akamai acquires LayerX, delivering end-to-end security and real-time AI usage control to any browser. Get details
Akamai
Log in
Log in Close
Cloud Manager
Manage your cloud computing services
Log in Close
Control Center
Manage your security and delivery services
Background

PacketFence Cloud: Enterprise Network Access Control, Now a Managed Service

August 20, 2026 by Andrei Petrus

Share

Key takeaways

PacketFence Cloud delivers enterprise network access control as a cloud-managed service, removing complex on-premises server overhead.

You can deploy PacketFence Cloud in minutes using a lightweight container (the Connector) with no inbound firewall rule changes required.

Local authentication caching ensures that your connected devices keep working seamlessly during internet outages.

Integrated Fingerbank technology automatically profiles more than 110,000 unique device types without manual effort.

Native integration with Akamai Guardicore Segmentation stops threats directly at the port level.

Every device that connects to your network requires a decision: Trust, restrict, or block. Making that choice correctly, thousands of times a day, across global offices, campuses, and remote sites, is what network access control (NAC) does. Getting it wrong is how ransomware spreads from a compromised Internet of Things (IoT) sensor to your core production systems.

For 20 years, PacketFence has been making that decision and helping secure some of the world’s most demanding networks across healthcare, finance, education, and government. Introduced as an open source project in 2004 and part of Akamai since our acquisition of Inverse in 2021, PacketFence protects organizations and is a trusted platform for managed service providers worldwide.

Now, we’re introducing PacketFence Cloud: the same enterprise-proven NAC engine, delivered as a fully managed service.

The NAC deployment problem

NAC has earned a reputation problem. Traditional deployments demand dedicated servers, capacity planning, high-availability clustering, database administration, and consistent patching. For many organizations, projects stall before authenticating a single device.

That operational weight leaves many networks underprotected with minimal access control, even as unmanaged and IoT devices multiply. The risk is understood; the resources to address it usually are not.

PacketFence Cloud removes that barrier. We run the infrastructure — you define the policy.

How it works

PacketFence Cloud is built around the Connector — a lightweight container you deploy on your network in minutes (Figure).

PacketFence Cloud is built around the Connector — a lightweight container you deploy on your network in minutes (Figure).
How the connection works — on-premises networks, the Connector relay, and the cloud NAC engine
PacketFence Cloud is built around the Connector — a lightweight container you deploy on your network in minutes (Figure).

  • Single outbound connection: The Connector establishes one outbound TLS tunnel to PacketFence Cloud, requiring no inbound firewall rules, VPN, or network re-architecture.

  • Full RADIUS support: Your switches and access points authenticate through to the Connector for 802.1X, EAP-TLS, and MAC authentication. Policy decisions happen in the cloud; enforcement happens on your network.

  • Built-in offline resilience: The Connector maintains a local authentication cache that ensures that previously authenticated devices keep working during internet connection drops. Outages won’t trigger network lockouts.

  • Automatic device intelligence included: Fingerbank, our device fingerprinting technology, instantly identifies more than 110,000 unique device types to distinguish laptops, security cameras, and printers without manual classification.

  • Vendor-agnostic by design: PacketFence supports more than 200 switch and wireless vendors; if it’s on your network, we speak its language. And we continue to invest in extending native integrations.

From sign-up to secured in hours, not months

We designed the onboarding experience for self-service: Sign up, deploy the Connector, connect your first switch, and authenticate your first device — no professional services required.

  • Enjoy zero friction operations: Every plan includes automatic updates, 24/7 infrastructure monitoring, and a 99.99% uptime service-level agreement (SLA) for cloud RADIUS. 

  • Gain unified multisite control: Scale globally by deploying additional Connectors into new locations, each managed from the same console. 

  • Avoid lock-in: Because PacketFence Cloud shares its codebase with the self-hosted PacketFence, you can seamlessly switch deployment models as requirements evolve without having to start over.

Backed by Akamai infrastructure

PacketFence Cloud runs on enterprise-grade cloud infrastructure built for global scale. Our benchmarks show sustained authentication rates that comfortably absorb the Monday morning surge of a 1,000-device network reconnecting in seconds — from anywhere in the world.

PacketFence Cloud is also part of a bigger story. NAC determines which devices belong on your network, while Akamai Guardicore Segmentation dictates what those devices can reach once inside. 

Together, they close the loop on east-west risk. Native integration between PacketFence and Akamai Guardicore Segmentation enforces segmentation directly at the network layer — containing devices that can't run security software. A compromised IoT sensor is stopped at the port before reaching production. From initial access to microsegmentation, it’s one vendor.

This is NAC as it should be: proven technology, operational simplicity, and the reliability standards you expect from Akamai.

Learn more

PacketFence Cloud is available now. Get plans and pricing or start a free evaluation.

Start free trial

About the Author(s)

Andrei Petrus

Andrei Petrus

Andrei Petrus is Director of Product Management at Enterprise Inverse, Akamai.

See Author bio

Tags

Security

Related Blogs

The transition to a quantum-safe internet is a marathon, not a sprint.
The transition to a quantum-safe internet is a marathon, not a sprint.
Security

Future-Proofing the Internet: Akamai Achieves End-to-End PQC

August 19, 2026Tim Daffron

Akamai announces end-to-end post-quantum cryptography across its Enhanced TLS network, delivering quantum-resistant protection for global data. Learn more.

Read more
Akamai was named a Leader in The Forrester Wave™: Microsegmentation Solutions.
Akamai was named a Leader in The Forrester Wave™: Microsegmentation Solutions.
Security

Akamai Named a Leader in The Forrester Wave™: Microsegmentation Solutions, Q3 2026

August 18, 2026Jacob Abrams

Akamai was named a Leader in The Forrester Wave™: Microsegmentation Solutions. Read why.

Read more
Understanding how deeply AI models are embedded in workflows is becoming critical.
Understanding how deeply AI models are embedded in workflows is becoming critical.
Security

Shadow AI, Rogue Agents, and Data Leaks: A Special Report on Navigating AI Risk

August 05, 2026Kimberly Gomez

Discover top enterprise AI risks — from shadow AI to rogue agents and data leaks — plus practical CISO strategies in the new Akamai SOTI special report.

Read more