Netgraph Cloud Services

Go covers the essentials for guest Wi-Fi: the captive and administration portals, Click-to-Connect, self-provisioning by email (guest) and SMS, username & password, whitelisting and blacklisting, verified email with bounce check, basic DHCP (10 scopes), audit log, and multi-language UI. Enterprise adds the self-service portal, Meeting Host, Conference ID, Event Access, BYOD email and SAML self-provisioning, password subscription, multi-Service-Gateway support (up to 10), DNS service, walled garden, statistics & exports, data retention, and DHCP with full audit logging.

Two deployment options. With the Cisco Service Gateway you license per Mbps of throughput (plug-and-play on any network, with built-in DHCP). With Cisco Meraki you license per activated MR access point. Pick whichever matches how your network is built.

Per endpoint. Every device that authenticates through EntryPoint counts toward one shared endpoint license: 802.1X, iPSK, MAC Authentication Bypass, RADIUS Proxy, and EasyPSK via RADIUS (EntryPoint 2.0) all draw on the same pool, whether the device is a laptop, phone, printer, or IoT sensor.

Yes. Microsoft Entra ID (formerly Azure AD) is supported natively as the identity source for both 802.1X EAP-TLS (user certificates matched to Entra group membership) and EAP-PEAP (username & password). EduRoam is available as an optional add-on for institutions that need to federate with the global EduRoam network.

EasyPSK turns a single SSID into thousands of private "personal" networks, one per resident, student, or guest, using per-user PSK. Devices on the same network are isolated from each other, giving each user a home-like experience. Onboarding is fully self-service via QR code or portal. It comes in two delivery variants under one umbrella: Meraki WPN (Cisco Meraki, via the Dashboard API) and EasyPSK via RADIUS (Cisco Meraki and Catalyst 9800, run as the EntryPoint 2.0 (EasyPSK) context).

It depends on the variant. Meraki WPN is licensed as the EasyPSK module plus AP licenses on Cisco Meraki; an AP license already bought with Sign In can be reused on a separate SSID. EasyPSK via RADIUS is the module plus Unit licenses, where a Unit covers a group of up to 30 devices and the per-Unit price drops as the count grows. If you run EasyPSK via RADIUS inside EntryPoint, it draws on your shared EntryPoint endpoint pool instead, alongside 802.1X, iPSK, and MAB. Your partner sizes whichever fits your deployment.

Per Cisco ISE installation, not per endpoint. The full feature set is included regardless of how many endpoints or services you manage through ISE.

Yes — modules share the same admin portal, self-service portal, audit logging, and multi-language UI. Common combinations: Sign In + EntryPoint (guest Wi-Fi + 802.1X for employees and IoT), Sign In + EasyPSK (public guest portal + private resident networks), Sign In + Endpoint Manager for ISE (offload guest Wi-Fi from ISE while delegating MAC management).

Standard (8/5 web & email tickets, maintenance notices) covers most deployments. Premium adds priority handling, quarterly reviews, and evening/weekend coverage. Exclusive is 24×7×365 with P1/P2 SLA targets, a named contact, and phone support — for critical or revenue-impacting operations.

Pricing is handled via authorized partners (Conscia, Telia, Tele2, Telenor, Atea, Advania, and others). They size your deployment, validate the technical fit, bundle services to match your contract preferences, and provide local first-line support.

Click "Get in touch" and tell us a bit about your environment and use case. We'll connect you with the right partner based on geography, infrastructure (Cisco Catalyst, Meraki, or mixed), and the modules you're interested in.