Cloud RADIUS
Lightweight, CLOUD-NATIVE NETWORK AUTHENTICATION ESSENTIALS THAT PACK A HEAVYWEIGHT PUNCH.
If standing up a cloud RADIUS for network authentication in 30 minutes or less is what you’re looking for...you’ve come to the right place.
- Fully cloud-native
- No hardware
- Zero maintenance
- Covers wired, WiFi & VPN
- Directory integrations
- Passwordless

Knock, knock. Who's there?
Portnox's RADIUS service can help you answer just that and more. Stare through the proverbial peep hole and see who’s requesting access to your network, as well as the access layer they’re using, their location, device type, and more.
Our cloud-native RADIUS is provided through a cloud-based cluster of fully redundant RADIUS servers and is used for authentication of users accessing the enterprise. Integrate with your existing identity provider, use ours, or set up passwordless authentication with ease.


No connection? No problem.
Internet outages can affect your colleagues' ability to work, duh. But have no fear! To solve this issue, Portnox offers a local RADIUS instance that works overtime - when there is connectivity with the cloud, it acts as a proxy in a chain, forwarding communications to and from the cloud RADIUS service.
If our cloud RADIUS authentication service cannot connect to the cloud, the local RADIUS assumes the role of the cloud RADIUS until connectivity is restored!
Let us upgrade you
Sure, Beyonce can “upgrade ya,” but here at Portnox we can offer you network authentication and a whole lot more. Take your network security up a notch with our cloud-native zero trust NAC for full access control coverage.
With Portnox zero trust NAC, gain real-time visibility of endpoints trying to connect to your network, plus additional context such as their location, device type, and requested access layer for authentication. This applies to managed company devices, BYOD and IoT / OT alike, no matter if they're authenticating via wired ports, Wi-Fi or VPN.

Portnox in Action
Get up and running in no time at all. See how easy it is to get RADIUS authentication rolling with Portnox.
There's RADIUS. Then there's Portnox cloud RADIUS.

This will be the most productive 30 minutes of your IT career.
Create RADIUS Instance
Select Access Layers
Integrate Directory Service
Define Security Groups
Onboard Users / Devices
Feature-rich like a Ferrari. Utilitarian like a VW. Either way, it's cherry.
Core RADIUS Capabilities
Cloud RADIUS
The fully cloud-hosted RADIUS service.
RADIUS Proxy
Enables forwarding of RADIUS requests to on-premise or cloud RADIUS servers.
RADIUS Forwarding
Granular control over how RADIUS requests are relayed based on policy.
RadSec Support
Secure RADIUS over TLS encryption for modern, encrypted deployments.
Authentication Methods
802.1X Authentication
Standards-based network authentication for managed devices.
MAC Authentication Bypass (MAB)
Fallback for unmanaged or IoT devices lacking 802.1X support.
Role-Based Authentication
User or device authentication based on directory roles or attributes.
Passwordless Authentication
Modern credential-less access using device identity or certificates.
Access Policy Enforcement
Dynamic VLAN / ACL Assignment
Assign network segmentation or permissions dynamically based on policy.
Post-Connect Authorization
Enforce additional checks or revalidate compliance after initial connection.
Role-Based Access Policies
Granular policies based on user or device roles for network access.
Location-Based Access Policies
Restrict access by geography, office, or site — helpful for Zero Trust enforcement.
Integrations & Infrastructure
Active Directory
Seamless support for authenticating against on-prem or cloud-hosted AD.
Account Lifecycle Synchronization
Auto-sync user status from the identity provider (e.g., deprovisioning).
Anti-Flood Protection
Defense against RADIUS denial-of-service (DoS) attacks or rogue devices.
TACACS+ / AAA Services
Infrastructure device administration and command-level authorization.
Global availability & redundancy
Portnox Cloud RADIUS is deployed globally with high availability and low latency in mind. RADIUS servers are available across multiple continents, ensuring optimal performance and compliance for organizations worldwide.
Server regions include:
- United States
- Europe
- Asia/Pacific
This geographic distribution supports compliance with data residency requirements and delivers high-speed authentication responses regardless of user or device location.

We threw in TACACS+ / AAA Services...because why not?
This is your chance to unite the two pillars of access control under one roof. Keep the IT riff raff out and your precious network devices under lock and key with cloud-native TACACS+ from Portnox.
Enjoy TACACS+ / AAA services for 1 admin and up to 100 network devices as part of Portnox’s RADIUS-as-a-Service package.
