Netgraph Cloud Services
Pricing & Licensing
Choose the right module, understand the licensing model, and see what’s included. Pricing is handled via our authorized partners.
Sign In
Deploy Sign In on any network via a Cisco Router (Service Gateway) metered by Throughput or on Cisco Meraki metered by AP count. Choose Go or Enterprise based on required features.
Metered by: Throughput (Mbps)
Any network via Cisco Service Gateway (Cisco Router)
- Plug-and-play on any network
- Built-in DHCP/DNS services
- Popular for telco IP-VPN & Cisco SD-WAN
NC-PL-GL / SENC-xx-Mbps
Metered by: AP count
Cisco Meraki (MR)
- AP-based license per activated MR
- Native Meraki integration
- Can be combined with WPN
NC-PL-GL / SENC-M-AP
| Feature | Go | Enterprise |
|---|---|---|
| Captive Portal | ||
| Administration Portal | ||
| Self-Service Portal |
| Method | Go | Enterprise |
|---|---|---|
| Click-to-Connect | ||
| Meeting Host | ||
| Conference ID | ||
| Self-Provisioning by Email (Guest) | ||
| Self-Provisioning by Email (Guest, BYOD) | ||
| Self-Provisioning by SMS (Require SMS Gateway) | ||
| Self-Provisioning by SAML | ||
| Event Access | ||
| Username & Password | ||
| Username & Password API | ||
| Password Subscription | ||
| Whitelisting | ||
| Blacklisting |
| Capability | Go | Enterprise |
|---|---|---|
| SaaS delivery – Global | ||
| SaaS delivery – Sweden | ||
| Multiple Service Gateways (up to 10) | ||
| Verified Email with Bounce Check | ||
| Basic DHCP service (Service Gateway only, limited number of scoopes (10)) | ||
| DHCP service with log & audit (Service Gateway only, unlimited number of scoopes) | ||
| DNS Service (Service Gateway only) | ||
| Captive Portal Bypass (Walled Garden) | ||
| Data Retention | ||
| Terms & Conditions | ||
| Statistics & Exports | ||
| Application Visibility (Service Gateway only) | ||
| Language Support | ||
| Site-based Redirect | ||
| Audit Log |
| Item | Go | Enterprise |
|---|---|---|
| Additional Instance |
| Level | Coverage | Notes |
|---|---|---|
| Basic (Go) | 8/5 | Email tickets, KB access |
| Standard | 8/5 | Web & email, maintenance notices |
| Premium | Extended | Priority handling, evenings/weekends |
| Exclusive | 24×7×365 | P1/P2 targets, Named contact, Phone |
EntryPoint (RADIUSaaS)
Endpoint-based RADIUS-as-a-Service with 802.1X (EAP-TLS/PEAP), iPSK and MAB. Licensed by number of endpoints.
Metered by: Endpoints
What’s included
- 802.1X (EAP-TLS with Entra ID, PEAP)
- Identity PSK (iPSK)
- MAC Authentication Bypass (MAB)
- RADIUS Proxy, EduRoam (optional)
- Admin & Self-Service Portals
- Audit Log, Statistics, Multi-language
| Capability | Status |
|---|---|
| 802.1X (EAP-TLS with Entra ID) | |
| 802.1X (PEAP) | |
| Identity PSK (iPSK) (Cisco and Cisco Meraki only) | |
| MAC Authentication Bypass (MAB) | |
| RADIUS Proxy | |
| EduRoam (optional) | |
| Admin & Self-Service Portals | |
| Audit Log, Statistics, Languages |
| Item | Details |
|---|---|
| License metric | Per endpoint (Read more) |
| SLA – Standard | 8/5 • Web & email • Maintenance notices |
| SLA – Premium | Extended coverage • Priority handling • Quarterly reviews |
| SLA – Exclusive | 24×7×365 • P1/P2 targets • Named contact, phone |
Meraki WPN
Wi-Fi Personal Network for Cisco Meraki MR — licensed by WPN module + number of APs where WPN is enabled.
Metered by: Module + APs
What’s included
- Per-user PSK (private, home-like Wi-Fi)
- User isolation & security
- Self-Service onboarding
| Capability | Status |
|---|---|
| Per-user PSK (iPSK) | |
| Private “home-like” Wi-Fi | |
| Isolation between users/devices | |
| Self-Service onboarding |
| Item | Details |
|---|---|
| WPN Module license | required |
| AP count | Number of Meraki MR APs with WPN enabled |
| Level | Coverage | Notes |
|---|---|---|
| Standard | 8/5 | Web & email • Maintenance notices |
| Premium | Extended | Priority handling • Evenings/weekends |
| Exclusive | 24×7×365 | P1/P2 targets • Named contact, Phone |
ISE Device Management
Module for Cisco ISE environments — licensed per ISE installation. Provides orchestration, iPSK key mgmt and delegated self-service.
Metered by: Per ISE installation
What’s included
- ISE API integration
- Unmanaged device handling & MAC orchestration
- iPSK & key management for IoT
- Delegated administration (Self-Service)
- Audit Log, Statistics, Multi-language
| Capability | Status |
|---|---|
| ISE API integration | |
| MAC orchestration / unmanaged devices | |
| iPSK & key management (IoT) | |
| Delegated administration (Self-Service) | |
| Audit Log & Statistics | |
| Multi-language support |
| Item | Details |
|---|---|
| Module license | Per Cisco ISE installation |
| Level | Coverage | Notes |
|---|---|---|
| Standard | 8/5 | Web & email • Maintenance notices |
| Premium | Extended | Priority handling • Evenings/weekends |
| Exclusive | 24×7×365 | P1/P2 targets • Named contact, Phone |
Questions about pricing?
Talk to a product specialist about features, sizing, support plans, and finding the right partner for your project.
Licensing FAQ
Answers to common questions about Sign In, EntryPoint, Meraki WPN, and ISE Device Management.
Sign In can be licensed in two ways: by throughput (Mbps) when deployed on Cisco Routers (Service Gateway), or by number of Cisco Meraki MR access points.
Go is aimed at simple guest access with a limited feature set. Enterprise unlocks full guest & BYOD onboarding, self-service portals, audit/logging, and advanced integrations.
Yes. Enterprise supports both guest onboarding and BYOD use cases, while Go focuses on straightforward guest access.
Absolutely. You can start with Go and upgrade to Enterprise at any time—no platform migration required.
EntryPoint is licensed per endpoint. Devices authenticated via 802.1X, iPSK or MAB count towards your license.
Yes. EntryPoint supports EduRoam and common identity providers such as Microsoft Entra ID.
Meraki WPN requires a WPN module license plus the number of Meraki MR APs where WPN is enabled.
Each user gets a private, home-like Wi-Fi (per-user PSK/iPSK) with isolation from other users on the same infrastructure.
The ISE Device Management module is licensed per Cisco ISE installation.
Unmanaged device handling, MAC orchestration, iPSK key management for IoT, and delegated self-service via Cisco ISE APIs.
Basic support is included. You can upgrade to Standard, Premium, or Exclusive for extended coverage and stricter response targets.
Yes. SLA levels can be tailored per service and adjusted as your requirements evolve.
Yes. You can deploy Sign In, EntryPoint, Meraki WPN, and ISE Device Management together or separately.
Definitely. Our specialists help estimate throughput, endpoint counts, AP numbers, or ISE deployments for accurate sizing.
Yes—beyond product guidance we’ll help you find the right partner to deliver, deploy, and manage your solution.