Traditionally, enterprises have enabled network auth via usernames and passwords. As we now know today, this method of network authentication can be easily compromised by bad actors, making it no longer sufficiently secure for enforcing network access control. As a means of elevating and strengthening network auth, Portnox has introduced several new and powerful certificate authority services within Portnox Cloud, our cloud-delivered network access control solution.

Types of Network Auth with Portnox Cloud

Self-Onboarding (Agent-Based)

When an endpoint enrolls using AgentP, Portnox Cloud will automatically generate a supplicant certificate for the endpoint. This is true for all supported operating systems (Windows, OSX, Linux, etc.), and for all AgentP enrollment methods.

Self-Onboarding (Agentless)

For those not using AgentP, Portnox Cloud generates an organizational root certificate upon org creation in the system and adds the root certificate to its list of trusted root certificates.

Simple Certificate Enrollment Protocol (SCEP)

To make certificate issuance easier for our customers, Portnox Cloud also supports SCEP, the open-source protocol, which issues a one-time password to the user transmitted out-of-band.

Microsoft InTune

Portnox Cloud customers utilizing our MS InTune integration can use InTune to authenticate devices to the network as an alternative to Portnox’s agent-based or agentless options.

EAP-TLS 802.1X

EAP-TLS is considered by many to be the gold standard when it comes to network auth. EAP-TLS 802.1X authentication is available with Portnox Cloud out of the box.

Simple, Secure Certificate Authority Services

With Portnox’s ability to offer companies an easy and secure certificate authority services, each customer can leverage its own certificate authority in the cloud, allowing for simpler, more seamless and secure user onboarding. Once configured, Portnox Cloud will issue every user an identity certificate for self-enrollment via the portal. Once the user has a certificate, he/she will then be granted password-less authentication.