You can configure the guest network on your Firebox or XTM device as a hotspot to give Internet connectivity to your visitors or customers. When you enable the hotspot feature, you have more control over connections to your guest network. You can configure the hotspot feature for connections to either a wireless or a wired guest network on your Firebox or XTM device. You can also configure the hotspot feature for connections through a WatchGuard Access Point (AP) device.
When you configure your Firebox or XTM device as a hotspot, you can customize:
If you configure the hotspot for connections through a WatchGuard AP device, the interface you select for the hotspot depends on the interface configuration on the AP device.
For more information about how to configure an SSID for a WatchGuard AP device, see Configure WatchGuard AP Device SSIDs.
If you enable a hotspot on a wireless Firebox or XTM device, you can select one of these interfaces:
When you enable the hotspot feature, the Allow Hotspot-Users policy is automatically created. This policy allows connections from the guest interface to your external interfaces. This gives hotspot users access to the Internet without access to computers on your trusted and optional networks.
If your hotspot is for a wireless network connection, before you set up a wireless hotspot, you must configure the settings for your wireless guest network as described in Enable a Wireless Guest Network (Fireware XTM OS v11.8.x and Lower).
To enable the hotspot:
If you disable the hotspot feature, or change the hotspot connection method, all current guest user accounts are removed.
You can configure timeout settings to limit the amount of time that users can continuously use your hotspot. When the timeout period expires, the user is disconnected. When users are disconnected, they lose all Internet connectivity, but are still connected to the network. The hotspot splash screen reappears and the users must accept the Terms and Conditions again before they can continue to use the hotspot. You can also specify the amount of time users are locked out of the hotspot after their sessions expire.
Select a hotspot type to specify how your Firebox or XTM device manages the initial user connection to your hotspot.
There are two hotspot types:
For a Custom Page hotspot, when a user connects to the hotspot URL, the Firebox or XTM device shows the hotspot splash screen that you configure on the Firebox or XTM device. The user must accept the terms and conditions you specify in order to use the hotspot. Custom Page is the most common hotspot type, and is the default type.
External Guest Authentication
For an External Guest Authentication hotspot, when a user connects to the hotspot URL, the Firebox or XTM device redirects the user to a URL on an external web server that you set up. You configure the page on the external web server to perform user authentication, or collect any user information you want from hotspot users. After the hotspot user attempts to authenticate on the external web server, the web server returns a result that tells the Firebox or XTM device whether to allow the user to use the hotspot.
To specify the type of hotspot:
Configure the Hotspot Custom Page
Connect to a Hotspot
See Hotspot Connections