EasyNAC
What it is
EasyNAC provides network visibility and Zero Trust access control for devices on wired and wireless networks. Typical deployments discover and profile devices without agents. It uses out-of-band ARP enforcement to restrict devices, with inline enforcement available for remote access VPN protection. Security systems can send event-based syslog messages or email alerts that prompt EasyNAC to restrict an affected device. Integrations listed include Microsoft Active Directory and Entra ID, Defender, Intune, CrowdStrike Falcon, SentinelOne, and Sophos Central. Organizations can provide BYOD self-registration and guest registration through a captive portal with configurable policies. Hardware and virtual appliances are available; virtual appliances can run on-premises or in the cloud, and Enforcer Sensors extend visibility and enforcement to remote sites. Appliance models list maximum capacities from 300 to 10,000 devices, depending on network conditions and enabled features. Licensing counts concurrent unique MAC addresses seen in the previous five minutes. Perpetual licenses and software subscriptions are available, agents are purchased separately, and pricing is available on request. IPv6 endpoints are supported in dual-stack environments, but IPv4 is required for management and most key features.
For and against
For
- Typical deployments discover devices without agents
- Can restrict devices in response to security alerts
- Supports guest and BYOD registration through a captive portal
- Virtual appliances can run on-premises or in the cloud
Against
- Agents are purchased separately
- IPv4 is required for management and most key features
- Enforcement for trusted devices above the 10% grace amount is disabled
- Pricing is available on request
The verdict
EasyNAC combines device discovery, network enforcement, and integrations with security systems. Check device capacity, licensing counts, and the IPv4 requirement against the intended deployment before requesting pricing.
Who it suits
EasyNAC is suited to organizations seeking visibility and access controls across wired, wireless, and remote networks. Its hardware, virtual appliance, and sensor options address deployments with different sites and device counts.
Plans and prices
EasyNAC hardware or virtual appliance
Perpetual license typically; subscription options available · licensed by concurrent devices and remote offices · agents purchased separately
Read 8 Oct 2026 · easynac.com
On the record
- Access enforcement
- It uses out-of-band ARP enforcement, with inline enforcement available for remote access VPN protection.easynac.com · read 8 Oct 2026
- Agentless discovery
- It discovers and profiles devices without requiring agents for typical deployments.easynac.com · read 8 Oct 2026
- Automated response
- It can receive event-based syslog messages or email alerts from security solutions and restrict an affected device.easynac.com · read 8 Oct 2026
- Branch sensors
- Enforcer Sensors extend visibility and enforcement to remote sites and support Windows, Linux, and Raspberry Pi systems.easynac.com · read 8 Oct 2026
- Capacity limits
- Appliance models list maximum capacities from 300 to 10,000 devices; capacity depends on VLANs, endpoints, and enabled features.easynac.com · read 8 Oct 2026
- Company
- The company identifies InfoExpress as the maker of EasyNAC and describes itself as a Silicon Valley-based cybersecurity company.easynac.com · read 8 Oct 2026
- Compliance checks
- It can check endpoint antivirus and patch status through integrations, with optional agents for more in-depth checks.easynac.com · read 8 Oct 2026
- Deployment
- The product line includes hardware and virtual appliances; virtual appliances can be deployed on-premises or in the cloud.easynac.com · read 8 Oct 2026
- Deployment options
- Server appliances are offered as hardware or virtual appliances; the virtual Central Visibility Manager can be deployed on-premises or in the cloud.easynac.com · read 8 Oct 2026
- Enforcement
- It uses ARP enforcement to restrict unauthorized devices without requiring changes to existing network infrastructure.easynac.com · read 8 Oct 2026
- Guest and BYOD
- It offers BYOD self-registration and guest registration through a captive portal, with configurable access policies.easynac.com · read 8 Oct 2026
- Guest and BYOD access
- It provides self-registration for BYOD and guest access with configurable approvals, expiration times, and access policies.easynac.com · read 8 Oct 2026
- Integrations
- The FAQ lists integrations including Microsoft Active Directory and Entra ID, Defender, Intune, CrowdStrike Falcon, SentinelOne, and Sophos Central.easynac.com · read 8 Oct 2026
- IPv6 limitation
- IPv6 endpoints are supported in dual-stack environments, but IPv4 is required for management and most key features.easynac.com · read 8 Oct 2026
- License model
- Licensing is based on concurrent unique MAC addresses seen in the past five minutes; perpetual licenses and software subscriptions are available, and agents are purchased separately.easynac.com · read 8 Oct 2026
- License overage
- The FAQ says protection continues when a license is exceeded, but enforcement for trusted devices above a 10% grace amount is disabled.easynac.com · read 8 Oct 2026
- Licensing limit
- The concurrent-device license counts unique MAC addresses seen in the past five minutes; if usage exceeds the license by more than 10%, protection is disabled for trusted devices above that grace amount.easynac.com · read 8 Oct 2026
- Network compatibility
- The FAQ says EasyNAC works with managed or unmanaged switches and does not require switch, endpoint, or spanning-port configuration.easynac.com · read 8 Oct 2026
