Factual Architecture Breakdown

How MikroWizard Compares to
Traditional Network Management

Explore how MikroWizard bridges the critical gap between raw router utilities (Winbox/SSH), generic monitoring tools (LibreNMS, Zabbix), and costly legacy PAM suites.

Capability & Operational LayerMikroWizard (Pro / Free)Winbox / SSH DirectGeneric NMS (LibreNMS/Zabbix)Traditional PAM suites
Centralized Web Console✓ Unified Web UI (Angular 18)× Desktop App / Individual CLI✓ Web Dashboard✓ Web Portal
Zero-Port Exposure (WireGuard Mesh) ✓ Built-In WireGuard Server × Requires Port 8291 / SSH Publicly Open× Requires Open SNMP / Agent PortsRequires Complex Jump Boxes
In-Browser Zero-Client Terminal ✓ xterm.js WebSockets Gateway (Pro only) × Local Putty / Terminal Emulator× NoneRDP Jump Host Session
Kernel ptrace Command Blocking ✓ Real-Time Interception × None (Commands Execute Immediately)× NonePost-Execution Regex Logging
Keystroke & Session Recording ✓ Lightweight Asciinema Player × None× None✓ Video Screen Recording (Heavy)
Winbox Desktop 2FA via RADIUS ✓ Built-in RADIUS Server (MS-CHAPv2 + OTP) × Not Native to RouterOS× None× No Winbox RADIUS Proxy
Browser RDP & VNC (Clientless) ✓ HTML5 RDP & VNC, any Windows/Linux host (Pro) × Desktop Client Required—Varies
WebBox: WinBox in the Browser ✓ WinBox 4 Streamed to Browser (Pro, MikroTik) Local WinBox Install——
Session DLP (Clipboard, File Transfer, Watermark) ✓ Per-Policy DLP + Forensic Recording (Pro) × No—Varies
Visual Side-by-Side Config Diffing ✓ Color-Coded ngx-diff × Manual File Export & CompareBasic Oxidized/RANCID diff× None
1-Click Disaster Recovery Rollback✓ Automated Rollback Pipeline× Manual CLI Paste× None× None
Logic-Aware Sequences Flowcharts ✓ Visual Drag-and-Drop + Regex × Raw RouterOS Scripts× None× None
Network Map with Root Cause Analysis ✓ Map v2 Problems Drawer (Pro) × NoVaries—
Safe MikroTik Firmware Upgrades (SHA256 Check; Pro: v6 → 7.12.1 → 7.13+ Path) ✓ Free + Pro Manual——
Live Config Sync & Clone (MikroTik) ✓ Minimal-Patch Sync, Scheduled or Live (Pro) Manual——
Rust Bandwidth Testing (MikroSpeed) ✓ Multi-Threaded btest-rs Single-Threaded RouterOS BTest× None (Only SNMP Counters)× None
White-Label Subscriber Self-Service ✓ Branded Portal + Safe NAT × None× None× None
Deployment & Data Sovereignty✓ 100% Self-Hosted On-Premise Docker✓ Local✓ Self-Hosted× Heavy Cloud / Enterprise Infrastructure
Complete Functional Audit

Free (Community) vs Pro Feature Matrix

An exhaustive breakdown of every operational feature across all 8 architectural domains.

Feature & Platform CapabilityCommunity Edition (Free)Pro Edition (Enterprise)
📡 Centralized Fleet & Topology Management
Managed Device Capacity✓ Unlimited Routers✓ Unlimited Routers (Tiered)
User Accounts & Multi-Site Groups✓ Unlimited Users✓ Unlimited Users + RBAC (19 RouterOS User Policies)
Live NOC Wallboard TilesBasic Status Grids ✓ 24/7 Color-Coded Health Tiles
Dynamic Layer-2 Topology Auto-DiscoveryNeighbor List ✓ Interactive Graph via LLDP/MNDP/CDP
Network Map with Root Cause Analysis× No✓ Map v2: Root Cause, Tree Layouts, NOC Mode
Multi-Vendor Support (Cisco, Linux, MikroTik)✓ Yes✓ Yes
🔐 Zero-Trust Remote Access & Security (PAM)
In-Browser SSH/CLI Terminal Gateway× No ✓ xterm.js WebSockets CLI Gateway
Kernel ptrace System-Call Command Blocking× No ✓ Real-Time Policy Interception
Asciinema Keystroke & Session Forensics× No ✓ Keystroke Playback & Speed Controls
Winbox Desktop 2FA via Built-in RADIUS Server× No ✓ Dual OTP MFA on Port 1812/1813
Zero-Port Exposure Reverse WebFig ProxyDirect Port Forward✓ Tunnel-Proxied WebFig
Browser RDP & VNC (Clientless)× No✓ HTML5 RDP & VNC for Any Windows/Linux Host
WebBox: WinBox in the Browser (MikroTik)× No✓ WinBox 4 Streamed to the Browser, Recorded as MP4
Session DLP (Clipboard, File Transfer, Watermark)× No✓ Per-Policy DLP + Forensic Recording
Envelope-Encrypted Credential InjectionBasic Encryption✓ Per-Credential Envelope Encryption
⚙️ Configuration & Network Automation
Nightly Scheduled Backups (.rsc & .backup)Manual / Basic Daily✓ Automated Multi-Generation Scheduler
Side-by-Side Visual Diffing (ngx-diff)× No (Raw Files) ✓ Visual Color-Coded Comparison
1-Click Configuration Disaster Rollback× Manual CLI✓ 1-Click Rollback Action
Logic-Aware Sequences Flowchart Builder× No ✓ Visual Flowcharts with Regex Branching
Golden Master CPE Cloner× Manual✓ 1-Click Bulk Template Provisioning
Offline NPK Firmware Repository✓ Local NPK Repository✓ Local Repository + Latest Cloud Channel
Safe MikroTik Firmware Upgrades (SHA256 Check, Update Modes, Retries)✓ Yes✓ Yes + Multi-Step v6 → 7.12.1 → 7.13+ Path, Latest Cloud Channel & PtP Safe Ordering
Live Config Sync & Clone (MikroTik)× No✓ Master or Two-Way, On Demand, Scheduled or Live
🌐 Network Services & Performance
Native WireGuard VPN Server & Mobile QR CodesManual WireGuard ✓ 1-Click Server & QR Peer Generator
Rust-Compiled btest-rs Speed Testing Engine× Single-Thread BTest ✓ Throughput Limited Only by Your Test Server, Router & Link
Curve25519 EC-SRP5 Encrypted Handshake× Standard✓ Hardened RouterOS v7 Handshake
🛡️ Auditing, Compliance & Alerting
5-Tier Unified Compliance Audit TrailBasic Local Logs✓ Full 5-Tier Centralised, Searchable Audit Trail
Centralized Regex Syslog Classifier× Raw Syslog ✓ Pattern Extraction & Categorization
Multi-Channel Apprise Alert DispatcherEmail Only✓ 11 Built-in Channels plus Any Apprise URL
👥 Subscriber Self-Service Portal (ISPs & WISPs)
White-Label Subscriber Portal & Custom Domain× No ✓ Fully Brandable ISP Portal
1-Click Ping, DNS & Gateway Diagnostics× No✓ Automated Customer Self-Triage
Customer-Safe NAT Port Forwarding & Presets× No✓ Isolated Port Forwarding Rules
🤖 Network AI Copilot & Diagnostics
13 Sandboxed RouterOS AI Tools× No✓ Multi-Provider AI (Gemini, OpenAI, Claude, DeepSeek, OpenRouter)
Complete Tool Execution Compliance Trail× No✓ Centralised, Searchable AI Session Audit Trail
🏢 Enterprise Support & SLA
Community Forums & GitHub Discussions✓ Community Support✓ Priority Community Support
Direct Engineering SLA & Architecture Reviews× No✓ Guaranteed Business SLA & Dedicated Engineer