Discovery & profiling
Every laptop, phone, printer, camera and IoT sensor on the network is found, classified and kept in one live inventory.
- Agent and agentless discovery
- Device type and OS fingerprinting
- Rogue and unknown device alerts
Network access control
Nothing connects unseen.
Quedra NAC is the enterprise network access control platform for Zero Trust. It identifies every user and device that connects, checks its posture, and grants only the access its identity allows, on the network you already run.
Access decision · wired 802.1Xexample
- Device
- Corporate laptop · Windows 11
- User
- e.kaya · Finance
- Location
- HQ · floor 3 switch, port 14
- Posture
- Encryption on · EDR running · OS updates missing
AllowLimitQuarantineDeny
Placed on the Finance segment with access to the update server only, until the device is patched.
Core capabilities
See it, verify it, give it only what it needs.
Identity-based access
Users and devices are authenticated against your directory, and each gets the network segment its role calls for.
- 802.1X, MAC and web authentication
- Dynamic VLAN and ACL assignment
- Active Directory and LDAP integration
Posture & remediation
Devices are checked before and after they connect. Non-compliant ones are isolated and guided back to health.
- OS, patch, antivirus and encryption checks
- Automatic quarantine
- Self-service remediation portal
How it works
Trust is checked at the port, and checked again.
Discover
Find every device as it appears on a switch port, access point or VPN.
Identify
Tie the device to a user, an owner or a known device class.
Assess
Check its posture against the policy for its role.
Enforce
Allow, limit, quarantine or deny through the network itself.
Re-check
Keep watching, and change access the moment posture changes.
Built for real networks
No rip and replace.
Quedra NAC overlays the switches, wireless controllers and firewalls you already own, from any vendor.
Vendor-agnostic
Standards-based enforcement across mixed wired and wireless estates.
IoT and OT ready
Devices that cannot run an agent are profiled and segmented without one.
BYOD and guests
Personal devices onboard themselves; visitors are handed to Quedra HotSpot.
Monitor first
Start with visibility only, then enforce site by site when you are ready.
Questions
What teams ask before they deploy.
Do we need new switches?
No. Quedra NAC works with the network equipment you already run.
Is an agent required?
No. An agent adds deeper posture checks on managed devices; everything else is handled agentless.
What does it integrate with?
Directories, SIEM, firewalls and endpoint tools, plus the rest of the Quedra stack.
Where does it run?
On-premises as virtual or physical appliances, with high availability across sites.
One stack
Works with the rest of the Quedra stack
See every device on your network.
Run Quedra NAC in monitor mode on one site and get a full device inventory before you enforce anything.