WiFi Captive Portal: Enterprise Deployment and Configuration

Enterprise WiFi captive portal deployment for guests, conferences, retail locations, and hotels. Options: native FortiGate, Aruba ClearPass, Cisco ISE, and SaaS solutions (Cloud4Wi, Purple). LCEN/GDPR compliance. 2026 guide.

How It Works

• The client connects to an open or PSK-protected SSID
• The browser is redirected to an HTTPS portal
• Terms of Use acceptance and authentication
• Session authorization (typically 1h-24h)
• MAC tracking for fast reauthentication

Authentication Methods

• Terms of Use acceptance only
• Email and SMS verification
• Voucher codes (distributed at reception)
• Social login (Facebook, Google, Microsoft)
• Corporate SSO (Azure AD, Okta)
• Payment (paid hotspot)

Solutions

Native FortiGate

• Captive portal configuration in FortiOS
• Included with the FortiGate license
• Limitations: basic look and feel
• Customizable templates

Aruba ClearPass Guest

• Excellent look and feel
• Self-registration workflows
• Sponsor approval
• License: approximately €5-10/user

Cisco ISE Guest

• Integrated with ISE
• Advanced workflows
• Optional certificates

SaaS (Cloud4Wi, Purple, Tanaza)

• Cloud hosting
• Integrated marketing analytics
• Social login and retargeting
• Price: €1-5/AP/month, depending on the plan

LCEN (France)

• Law for Confidence in the Digital Economy
• Requirement: retain logs for at least 1 year
• Data: MAC, IP, timestamp, and volume
• Data may be subject to judicial requests
• Non-compliance: €75,000 fine

GDPR

• Clear Terms of Use covering data collection
• Specified retention period
• Right to erasure
• Cookies: consent is mandatory

Order from OPTINOC

FortiGate, ClearPass, and SaaS captive portal deployment. LCEN/GDPR compliance. Branding and analytics. Quote within 48h.