Only Compliant Devices Get on Your Network
Check device posture in real time before granting WiFi access. Non-compliant devices get quarantined automatically — no exceptions, no manual review.
Device trust verifies endpoint compliance — including encryption status, OS version, and antivirus presence — before granting WiFi network access. IronWiFi checks device posture in real time during RADIUS authentication, automatically quarantining non-compliant devices into restricted VLANs without manual IT intervention or additional endpoint agents.
Enforce Device Compliance at the WiFi Layer
Six capabilities that keep untrusted endpoints off your network
Real-Time Posture Checks
Verify device encryption, OS version, and antivirus status on every connection. Posture is evaluated at authentication time — not just once at enrollment.
MDM Integration
Pull compliance data live from Intune, Jamf, and Workspace ONE. Access decisions reflect your MDM's real-time view of each device's security posture.
Quarantine VLAN
Non-compliant devices are automatically routed to a remediation network with restricted access. Users see instructions to fix issues — no IT ticket required.
MFA Step-Up
Trigger multi-factor authentication via Okta, Microsoft Entra ID, or Duo for sensitive networks. Unmanaged devices or high-security VLANs require an additional verification step.
Compliance Dashboard
Real-time view of fleet compliance status with drill-down by device, OS, or department. See which devices are compliant, which are quarantined, and why.
Remediation Workflows
Guide users to fix compliance issues before granting full access. Quarantined devices see step-by-step instructions specific to their failure reason.
How Device Trust Works
Every connection is evaluated against your security policy in real time
What We Check
- Disk encryption enabled (BitLocker, FileVault, LUKS)
- OS patch level meets minimum version
- Antivirus / EDR agent running and up to date
- Jailbreak and root detection
- MDM enrollment status confirmed
What Happens Next
- Compliant — Full network access granted
- Partially compliant — Limited VLAN + notification to remediate
- Non-compliant — Quarantine VLAN + remediation instructions
Zero Trust Starts at the WiFi Layer
If you can't trust the device, you can't trust the connection. Device Trust ensures every endpoint meets your security bar before it touches your network.
Frequently Asked Questions
What is device trust?
Device trust will verify that every device connecting to your WiFi meets your organization's security requirements — encryption enabled, OS patched, antivirus running — before granting network access.
Which MDM platforms will you integrate with?
When launched, we'll support Microsoft Intune, Jamf Pro, and VMware Workspace ONE. We'll pull real-time compliance data directly from your MDM to make access decisions.
What will happen to non-compliant devices?
Non-compliant devices will be automatically quarantined to a remediation VLAN with limited internet access and instructions on how to become compliant. No manual intervention needed.
How will MFA step-up work?
When a user connects from an unmanaged device or accesses a sensitive VLAN, IronWiFi will trigger an MFA challenge via your existing provider (Okta, Microsoft Entra ID, Duo). The MFA result will be cached to avoid repeated prompts on reconnection.
Talk to a WiFi Identity Specialist
- See IronWiFi working with your hardware
- Get a deployment plan for your network
- 30-minute call — no pitch deck
Set up in under 15 minutes — no credit card required