What happens if Passbeam is down?

Authentication runs on two separate servers in two locations. Both are live, both answer RADIUS and RADSec, and neither needs the other to keep working.

The site's Connect tab gives you a primary and a secondary server, in the order your equipment needs them. Your access points, switches and VPN gateways switch between them automatically. If one goes down, devices carry on connecting through the other. Add both servers everywhere. A profile with only one server has no failover.

Devices that are already connected stay connected. The certificate is checked when a device connects, so people already working carry on. Only new connections and reconnections would be affected.

Your equipment also has its own setting for when it can't reach any RADIUS server. It can keep existing sessions, put new devices on a guest VLAN, or use a critical-authentication VLAN. Which one is right depends on the site, so we point it out when you turn a transport on.

We monitor both servers. Each is tested every five minutes with a real TLS handshake over the same internet path your equipment uses, and we're alerted as soon as one stops answering.