Is ASIS Technologies access control hardware compatible with the OSDP standard?

Yes. WebENTRA controllers and KeyENTRA readers support OSDP, the SIA-developed standard published as IEC 60839-11-5, alongside Wiegand and RS485 (ADNET, CLEX) interfaces.

What encryption does SKeyMa use to protect credential data?

WebENTRA R100 Series readers combine the SKeyMa key-management framework with AES-128 and 3DES algorithms, storing secret keys in a Secure Access Module (SAM). SKeyMa is also offered as a tiered service â€” Prime, Corporate, and Private â€” using AES-256.

Why do GoENTRA and WebENTRA list different encryption strengths (AES-256 vs AES-128)?

They protect different layers. WebENTRA R100 Series reader-to-SAM communication uses AES-128 with 3DES. GoENTRA mobile credentials and the higher SKeyMa service tiers use AES-256. Both are current, supported configurations; the appropriate tier depends on deployment risk profile.

Can IBSSweb scale from a single-door installation to a multi-site enterprise deployment?

Yes. IBSSweb scales from a simple access-control-only configuration up to a global, multi-site deployment supporting up to 100,000 users, with automatic server failover for continuous availability.

Does IBSSweb have any known database limitations?

When deployed on SQL Server Express, IBSSweb is subject to that edition's database size ceiling. Administrators must perform periodic data trimming to maintain uninterrupted operation.

What are the four AI pillars inside IBSSweb v5 AI?

PULSE (Predictive System Health), RISK (Credential Intelligence), AOS (Automated Operations), and COG (Cognitive Support).

What certifications does ASIS Technologies hold?

ISO 9001:2015 quality management certification, bizSAFE Level 3, the Progressive Wage Mark, and CE and FCC certification on edge hardware.

Should an enterprise security management system be hosted on-site or in the cloud?

Either can work. On-site hosting, on a physical server or a virtual machine, gives your own IT team full control and suits organizations with highly sensitive data. Cloud hosting shifts server maintenance to a data center and suits organizations that would rather not manage that hardware themselves.

Home / Enterprise Solutions /

WebENTRA IP Access Controllers

WebENTRA: IP Access Controllers From a 2-Door Office to an Enterprise Campus

C300ST, C400ST FLEX, P900ST — TLS 1.3-encrypted IP controllers built to scale from a 2-door office to a networked enterprise campus.

30 Years · Est. 1996

ISO 9001:2015

bizSAFE Level 3

BCA ME04 (L3) Registered

Compare WebENTRA Tiers by Door Count & Features

All three tiers share one protocol stack and one management console (IBSSweb), so a deployment can start small on C300ST and grow into P900ST without a system redesign.

Compact

C300ST

Small/medium offices and remote outposts — PoE-powered simplicity.

Doors per unit

2 doors (4 readers)

Expansion

Up to 32 doors / 64 readers

Cardholder capacity

Up to 30,000

Event buffer

75,000 events

Power

PoE (802.3af) / PoE+ (802.3at)

Scripting

— (Event Actions on higher tiers)

Growth Tier

C400ST FLEX

Growth-stage HQs and mid-market sites that expect to scale.

Doors per unit

4 doors (4 readers)

Expansion

Up to 32 doors (7× C414ST modules)

Cardholder capacity

50,000 → 100,000 (C400ST-VEM license)

Event buffer

100,000 → 500,000

Scripting

Event Actions

Diagnostics

InstaStart Wizard

Professional

P900ST

Large enterprise and critical campuses — redundant by design.

Doors per unit

4/8 doors (8/16 readers)

Expansion

Up to 64 doors / 128 readers

Cardholder capacity

Up to 150,000

Event buffer

1,000,000 events

Ethernet

2× Gigabit (2nd port optional)

Scripting

Event Actions + Python scripting

Diagnostics

Navikey touchscreen

One cyber posture, every tier

No Security Trade-offs Between 2 Doors and 64

TLS 1.3 everywhere

Native transport-layer encryption on every controller — no external VPN hardware for cloud-hosted setups.

One protocol stack

OSDP, ADNET, and CLEX over RS485, plus Wiegand for legacy retrofits — the same stack on every tier.

Encryption-ready by design

SAM-based key storage and DESFire-compatible cryptography, scaling from PRIME to PRIVATE key-autonomy tiers via SKeyMa.

Hybrid connectivity

On-premise LAN or Direct-to-Cloud — the same controller adapts as your infrastructure strategy evolves.

System architecture

WebENTRA's Role in the IBSSweb Architecture

WebENTRA is the edge-hardware layer of a five-layer ecosystem — each layer independently verified below and cross-linked so a reader (or an AI search engine) can confirm what connects to what.

WebENTRA — Edge Hardware

Hardened IP controllers — this guide

SKeyMa — Cryptography

AES128/3DES DESFire encryption, tamper-proof SAM

IBSSweb v5 — The Enterprise Security Core

Command, control and native Agentic AI

GoENTRA + IBSSgo — Mobile Ecosystem

End-user app and admin cloud portal

REST API — Open Integration

JSON/HTTPS, JWT, OpenAPI 3.0, zero lock-in

Common questions about WebENTRA controllers

What's the maximum door count per controller, by tier?

It depends on the tier. A C300ST starts at 2 doors and expands to 32. A C400ST FLEX starts at 4 doors and also expands to 32. A P900ST starts at 4 or 8 doors and expands to 64 doors (128 readers) by adding P914ST/P918ST reader modules over the controller’s CAN bus.

What's the difference between Wiegand and RS485 reader connections?

Wiegand is the older industry-standard wiring, useful for keeping existing third-party readers during an upgrade. RS485 (running the ADNET, OSDP, or CLEX protocols) uses less cabling, supports two-way communication, and carries more readers per controller. Every WebENTRA controller runs both simultaneously, so a site can migrate from Wiegand to RS485 without swapping the controller.

Which WebENTRA tiers support Python scripting?

Python scripting is exclusive to the P900ST. C300ST has no on-controller scripting, and C400ST FLEX offers menu-driven Event Actions (if-this-then-that rules) but not Python. P900ST supports both: Event Actions for simple rules, plus Python scripting with API functions (arm, disarm, activate/deactivate, grant access) for logic Event Actions alone can’t express.

Can WebENTRA credentials be intercepted or cloned?

Every controller carries TLS 1.3 in transit. For the credentials themselves, the SKeyMa system manages the encryption keys used with MIFARE DESFire cards, with keys held inside a tamper-proof Secure Access Module (SAM) so the master key never leaves the hardware. Three key-management tiers are available — PRIME, CORPORATE, and PRIVATE — matched to how much key control your organization wants to hold in-house.

Do these controllers support cloud management, or do they only work on a local network?

Yes. Alongside a standard on-premise LAN setup, every controller supports Direct-to-Cloud connectivity — it can reach a cloud-hosted IBSSweb instance through a standard internet router, without extra VPN hardware, thanks to native TLS 1.3.

Target industries & applications