Product · Network management

intSignal Network Portal

Vendor-neutral network management & unification.

One portal to run every vendor’s network gear — routers, switches, firewalls, and access points — through a secure on-site edge device that pushes and pulls configuration. Like a single controller for your whole network, but vendor-neutral, with management access firewall-locked to the portal.

Live, interactive demo — click around to explore.
One portal, every vendorOn-site edge devicePush & pull configLocked to the portal IPConfig backup & driftZero-touch provisioning
intSignal Network PortalLIVE
142Devices
6Vendors
140/142In sync
12Edge sites
AP-HQ-01UniFiIn sync
SW-Core-2CiscoIn sync
RTR-Branch3MikroTikIn sync
FW-EdgeFortinetDrift
AP-WarehouseArubaIn sync

Unify

One controller for every vendor

Stop logging into UniFi in one tab, Cisco in another, and MikroTik in a third. intSignal Network Portal inventories and manages routers, switches, firewalls, and access points from any vendor in a single place — with one consistent workflow.

Multi-vendorUniFi, Cisco, MikroTik, Fortinet, Aruba, Juniper, and more.
Unified inventoryEvery device, model, firmware, and site in one list.
One workflowConfigure and monitor without per-vendor consoles.
No lock-inMix vendors freely — the portal is the constant.
One inventory · every vendor
DeviceVendorConfig
UpAP-HQ-01UniFiIn sync
UpSW-Core-2CiscoIn sync
Degr.RTR-Branch3MikroTikIn sync
UpFW-EdgeFortinetDrift
UpAP-WarehouseArubaIn sync
unifyUniFi, Cisco, MikroTik, Fortinet, Aruba, Juniper — one portal, no per-vendor console.

The edge device

A secure connector that pushes and pulls config

A small on-site edge appliance links your local gear to the portal. It pushes new configuration down and pulls current state back up over an outbound-only tunnel — so there are no inbound ports to expose, and no VPN to each device.

Push configurationRoll out changes to any device from the portal.
Pull stateContinuously read config and status back up.
Outbound-only tunnelNo inbound ports opened on your firewall.
One connector per siteReach every local device without per-device access.
The edge device
intSignal Portalcloud control plane
push ⇄ pull
Edge applianceon-site connector
config
Your networkany vendor
edgeAn on-site appliance pushes and pulls config over an outbound-only tunnel — no ports exposed.

Secure by design

Management access locked to the portal

Device management is firewall-locked so gear only accepts SSH/API from the portal’s IP — every other source is denied. Credentials are vaulted per device, and every change is approved and audited. It’s the convenience of a cloud controller with tighter access control than most in-house setups.

Access locked to portal IPDevices reject management from anywhere else.
No exposed management planesNothing to find or brute-force from the internet.
Vaulted credentialsPer-device secrets, rotated and never shared.
Approved & audited changesEvery push is logged with who, what, and when.
Secure by design
Management access locked to the portal
Devices accept SSH/API only from 203.0.113.10 — everything else is denied.
Access routeFirewall-locked to portal IP
TunnelOutbound-only · no inbound ports
CredentialsPer-device, vaulted
ChangesApproved & fully audited

Control

Every config versioned — and drift caught

The portal keeps a versioned backup of every device’s configuration, restores with one click, and flags out-of-band changes the moment they happen — so an on-site edit or a bad change never becomes a mystery outage.

Versioned backupsPoint-in-time config for every device.
One-click rollbackRevert a device to a known-good state instantly.
Drift detectionAlert on unauthorized or out-of-band changes.
Templates & bulk changeApply standards across the fleet at once.
Config backup & drift
v148AP-HQ-01 · pushed2m ago
v147SW-Core-2 · pushed1h ago
driftFW-Edge · out-of-band changeflagged
backupNightly · all devicesauto
controlVersioned config, one-click rollback, and alerts on unauthorized changes.

Operate

Provision, monitor, and see the whole fleet

Zero-touch provisioning brings new sites online fast, and the portal shows reachability, firmware currency, compliance, and topology across every vendor — run it yourself or add intSignal-managed operations.

Zero-touch provisioningShip, plug in, and the site self-registers.
Health & topologyReachability, performance, and a live map.
Firmware & complianceTrack currency and standards across the fleet.
Managed optionRun it yourself, or let the intSignal NOC operate it.
Fleet health & compliance
Reachability99%
Config compliance96%
Firmware current88%
Backup coverage100%
monitorHealth, topology, and compliance across the whole fleet — every vendor.

Full platform

Everything in the Network Portal

Management, the edge device, security, and operations — grouped. Expand any area for the full list.

Vendor-neutral management11
UniFiCiscoMikroTikFortinetArubaJuniperOther vendorsUnified inventoryRouters / switches / firewalls / APsSingle workflowFirmware & model tracking
Edge device8
On-site edge appliancePush configurationPull config & stateOutbound-only tunnelNo inbound portsOne connector per siteSSH / API / NETCONF / SNMPFor gear without a controller
Secure access8
Management locked to portal IPFirewall-locked access routesNo exposed management planesVaulted per-device credentialsCredential rotationRole-based adminApproved & audited changesAdditional access hardening
Config & change control8
Versioned config backupOne-click rollbackConfiguration drift detectionOut-of-band change alertsTemplatesBulk changeChange approval workflowsFull audit history
Provisioning & monitoring9
Zero-touch provisioningSite templatesReachability & healthPerformance monitoringFirmware complianceTopology mapAlertingReportingOptional intSignal-managed operations

One portal for a network you didn’t buy all at once

Tell us what vendors and sites you run — we’ll connect an edge device and unify it, with access locked down.

Request a demo  ⟶

Frequently asked questions

How is this different from UniFi or another vendor controller?

A vendor controller only manages that vendor’s gear. intSignal Network Portal is vendor-neutral — it manages UniFi, Cisco, MikroTik, Fortinet, Aruba, Juniper, and more from one portal, using an on-site edge device to reach each device. You get the single-pane experience of a controller without being locked to one brand.

How does the edge device work?

It’s a small on-site appliance that connects your local network gear to the portal over an outbound-only tunnel. It pushes new configuration down and pulls current config and state back up — so there are no inbound ports to open and no VPN to each device.

What does “management locked to the portal IP” mean?

Device management (SSH/API) is firewall-locked so the gear only accepts management traffic from the portal’s IP address — every other source is denied. Combined with vaulted per-device credentials and audited changes, it means there’s no exposed management plane for attackers to find.

Does it back up configuration and catch changes?

Yes. The portal keeps a versioned backup of every device’s config, supports one-click rollback, and detects drift — alerting you the moment an out-of-band or unauthorized change happens.

Can intSignal run it for us?

Yes. You can operate the portal yourself, or add intSignal-managed operations (our NOC) for monitoring, changes, and incident handling.