IP management built on IEEE 802.1X standards-based authentication. It does not stop at granting access: every user, device and IP connected right now is known from live connections, not from a spreadsheet.
If, after granting access, you do not know who is using which IP on which device, or whether that list is still accurate, it is hard to say you are managing the network.
Devices in the register that are not connected, devices connected that are not in the register. Reconciling the list takes weeks, and it drifts again from the day you finish.
Access logs only record an IP. When something goes wrong, the first job is finding out who used that IP and on which device.
Accounts and device registrations of former employees and contractors whose contracts have ended remain in place, leaving access rights nobody uses open on the internal network.
Even within the same site, moving to another building or floor changes the IP and drops business applications, and every new device has to be configured and approved by an administrator one by one.
The goal of NPass goes beyond wired and wireless authentication. It puts a name on every connection on the network and keeps that inventory matching reality without anyone touching it.
User ID, device (MAC) and IP are bound together and authenticated as one. Access logs are kept per person and device, not per IP.
Only users and devices that have passed authentication and are connected right now are in the inventory. Unregistered devices are filtered out at connection time.
Integrated with your HR system and identity provider, NPass blocks access for former employees, contractors whose contracts have ended and visitors whose period has expired. Long-unused accounts are deleted automatically.
With no agent, users register a device in the self-service portal and the certificate and connection settings install automatically. Administrators never fix the inventory by hand.
Move to another building or floor and authentication happens again on the spot, but the IP address does not change. When visiting another site, an IP from a restricted roaming range is assigned.
Authentication, IP management, device onboarding and operations management, all in one product. The authentication server, the IP management server and the certificate issuance function were all developed in-house by Netcube.
Authenticates wired and wireless connections together, based on IEEE 802.1X and EAP-TLS.
Users register their own devices and install the certificate and connection profile themselves.
Assigns IPs directly over DHCP and tracks them together with the user.
System status, access logs and policies managed on one screen.
Users verify their identity with their corporate account. NPass integrates with identity providers such as Google, Microsoft and Okta and with the HR policy database, and applies two-factor authentication.
The device information needed for access is collected automatically and a certificate is issued. Users also change and remove their registered devices themselves.
The 802.1X profile and certificate install automatically. No additional agent is installed; the features built into the OS are used.
When an unregistered device connects, it is placed in a quarantine range and the onboarding portal opens automatically. The user simply follows the prompts to complete registration.
The device joins the corporate Wi-Fi automatically, or a cable is plugged into a wired port.
The installed certificate verifies the user and the device together (EAP-TLS).
On success, the VLAN matching the policy is assigned. On failure, the device is separated into the quarantine range.
The policy IP defined for the user and device is issued.
A lifetime IP is determined by policy when the device is registered.
When the location changes, authentication happens again on the spot. The IP address does not change.
The device is authenticated at the visited site as well, and receives an IP from the roaming range, a restricted zone.
Every use of an IP is recorded together with the user and the device.
| Criterion | Examples |
|---|---|
| User group | Employees, contractor staff, external visitors |
| Device type | PC, mobile, shared devices and IoT |
| Connection type | Wired, wireless |
| Location | Headquarters, branch |
| IP assignment policy | Lifetime IP, standard IP, temporary IP (onboarding only) |
These are examples. The actual policy is designed together with the customer.
Conventional high-availability (HA) configurations such as Active-Standby redundancy come standard. On top of that, NPass adds technology that monitors and recovers itself so the authentication service never goes down. References from customers with demanding standards, running without incident for more than 15 years, demonstrate this reliability.
The authentication, statistics and redundancy processes are monitored continuously to prevent service interruptions.
If a process terminates abnormally it restarts immediately, and if it stops responding for more than 20 seconds it is force-restarted.
CPU load is monitored continuously, and authentication requests are throttled so the configured limit is never exceeded.
| Area | Conventional authentication solutions | NPass |
|---|---|---|
| Core goal | Deciding whether to grant access (authentication-centric) | IP accountability built on authentication (management‑centric) |
| Asset inventory | A separate register maintained by hand, out of step with actual connections | The inventory is built from authenticated connections and maintains itself |
| Account cleanup | Access remains possible after departure or contract end until someone deletes it | Identity integration automatically blocks access for people who have left |
| IP assignment | Depends on an external DHCP server | Assigned and managed directly by its own engine |
| Mobility | Moving changes the IP and can interrupt work | The same IP is kept when moving within the home site |
| Operations | Administrators configure and approve every device | Zero-touch environment where users register themselves |
| Failure recovery | Manual recovery on server failure | Real-time monitoring and automatic recovery |
You know the owner of every IP on the network. Unregistered devices and people who have left are blocked from the start.
Within the home site, the same IP is kept across buildings and floors. Business applications are far less likely to drop because an IP changed.
Users handle device registration and certificate installation themselves, reducing the operational burden.
Because it follows international standards, it runs reliably even in environments that mix equipment from several vendors.
| Identity and authentication | SAML and OIDC based identity providers such as Active Directory, Microsoft Entra ID, Google Workspace and Okta, plus the HR policy database |
|---|---|
| Network equipment | Wired switches and wireless APs that support IEEE 802.1X. Works on both conventional and SDN-based networks |
| Network equipment partners | Extreme Networks, Cisco, HPE Aruba |
| User devices | Windows, macOS, iOS, Android. IoT devices that cannot authenticate with an account are accommodated through MAC authentication |
| External security systems | Real-time integration with a wide range of security solutions, including sensor-based Layer 3+ NAC, endpoint protection and SIEM. Authentication results and connection details provided to WIPS, logging and audit systems |
| Deployment | Customer data center or private cloud |
NPass has run wired and wireless authentication and IP mobility across the headquarters and global R&D campuses for 15 years.
Unified wired and wireless authentication and IP mobility across all 220 sites worldwide, including headquarters.
Authentication solutions supplied to the Ministry of Science and ICT, Ministry of the Interior and Safety, Ministry of Economy and Finance, Board of Audit and Inspection, KIPO, Korea AeroSpace Administration, K-water and Korea Coast Guard.
A free IP visibility assessment is not a big project. We agree the scope and timeframe, and you get numbers you can report to management.
Request a consultation and we will get back to you within 24 hours.