Automatic login
Access opens without asking the user for anything; the captive portal is still shown and the session record is still kept.
Hotspot and Guest Network
XLOG Hotspot
Verify. Connect. Sign the record.
You can put your users online after verifying them with a username, a phone number (SMS), a one-time password or a corporate directory login; ready-made integrations are available for hotel software and corporate directories. That way your users' log records are captured and signed.
Why a Hotspot
Who identifies the guest joining your network, and how?
If you offer a publicly accessible network, identifying who the user is and keeping the access record is your responsibility. XLOG Hotspot does both on a single device: the user is verified at the captive portal, and the record produced during the session is signed and stored on the device.
No separate portal server, no separate log server and no extra license is required; every module on the device is active.
How It Works
From the moment the guest connects to the signed log
The user joins the network, meets the captive portal, is verified by the method you chose and gets access. The record produced during the session is signed in the background.
01
The user joins the network
The guest connects to your wireless network or your guest port. The network address is handed out by the device; no additional DHCP or DNS server is needed.
02
The captive portal opens
The user cannot reach the internet before being verified; their first request lands on the captive portal. The page can be designed, and your company logo and welcome message are published there.
03
The verification method runs
You decide the login method on the captive portal: automatic login, username, phone number (SMS) or a one-time password. With corporate directory login and ready-made integrations for hotel software, you can also use your existing user source.
04
Access opens and the rules apply
The verified user goes online. After login they can be redirected automatically to any site you choose; a speed limit and quota are defined per user or per MAC address, and access is cut off when the quota is exceeded.
05
The record is kept and signed
The access records produced during the session are signed with a time stamp and stored on the device. Login and logout times can be listed, and records can be reported in detail.
Verification Methods
You decide how to identify the user
You choose the login method used on the captive portal. Four login methods ship on the device; ready-made integrations for corporate directories and hotel software are added on top.
Login with a username
You can log in with your user credentials.
Login with a phone number
You can log in with the details sent by SMS.
Login with a one-time password
You can log in with your one-time password.
Ready-Made Integrations
Log in with your existing user source
The directory or hotel software already in use at your organization can be used directly as the verification source; you do not need to maintain a separate user list. Custom integrations are developed on request.
Corporate directory
Corporate login
You can log in with your corporate credentials.
Hotel
Absos Hotel integration
You can log in with your hotel details.
Hotel
Rmos Hotel integration
You can log in with your hotel details.
Hotel
Elektra Web Hotel integration
You can log in with your hotel details.
Captive Portal
The portal is your page, the rule is your rule
The hotspot captive portal can be designed; your logo or any welcome message you like is published on that page. Once the login is complete, the user is redirected automatically to any site you choose — the landing page can also redirect to https addresses.
For businesses that want to charge for internet access there is a timed billing module, one-time password generation for guests, and thermal printer integration that prints a slip.
What session management includes
The internet login and logout times of users who signed in through the hotspot are listed
Currently active users on the system and their quota usage are displayed
Download and upload speed is defined per user or per MAC address
A daily quota is defined; a user who exceeds the quota loses access
Devices generating excessive traffic appear at the top of the list
A timed billing module is used for venues that charge for internet access
Device Features
The whole guest network on a single device
Alongside verification and record keeping, filtering, quotas, line management and reporting all run on the same device. Every module ships active; you do not need to buy an extra license.
Advanced hotspot
The captive portal is designed and post-login redirection is defined; privileged users connect without seeing the portal, and timed billing and thermal printer slips are supported.
Speed limiting and quotas
Download and upload speed and daily quota defined per user or per MAC address; access is cut off automatically when the quota is exceeded.
Web filtering
Block the sites you do not want users to reach with the blacklists that ship on the device.
HTTPS filtering
Blocking of https addresses without installing a certificate or using a proxy; wildcards can be defined in the blacklists.
Application filtering
Allow or block the applications your clients use through ready-made application categories.
Port management and access rules
Opening, closing and forwarding ports; blocking port-based attacks from outside. Timed port opening prevents forgotten open ports.
XLOG VPN
Join networks at remote sites with site-to-site VPN; bring remote users onto the network in software with SSL VPN.
Line aggregation
Where the internet infrastructure falls short, up to five lines can be combined and used as a single line.
Line failover
When one of the lines in use drops, internet continuity is maintained over the active lines.
Logging and signing
All log records are signed with a time stamp and stored on the device.
Reporting
Login and logout times, currently active users and quota usage are listed; records can be searched by MAC address, IP, username, port, domain and date.
Backup and continuity
Records are copied to another device with FTP backup; with High Availability support a standby device takes over as Active–Passive on physical failure.
Management Interface
The guest network, filtering and records in one interface
The captive portal, the verification methods, the web filter and the access records are all managed from the device's own web interface; no separate server or client software is needed.
Deployment Scenarios
The same device, a different flow for your business
The verification method and the session rules change with the type of business; the modules on the device stay the same.
Hotels and hospitality
Guest login is verified against the record in the hotel management system; access stays open for the length of the stay.
Method used: Hotel management system integration
Cafés, restaurants and shops
Login by phone number for short-lived guest traffic. You can publish your own campaign content on the captive portal.
Method used: SMS verification + post-login redirect
Educational institutions
Login with the accounts in the institution's directory, and a separate method for visitors. Quotas and speed limits engage under heavy use.
Method used: LDAP + quota / speed limiting
Publicly accessible areas
At public access points, the user is identified by an SMS sent to their phone number and the record is signed.
Method used: Phone number (SMS) verification
Businesses charging for internet
Access sold through the timed billing module; the username and password are handed over as a slip from the thermal printer.
Method used: One-time password + thermal printer
Multi-location businesses
The same captive flow applied at every branch, with records kept signed at every site.
Method used: Shared portal and logging infrastructure
Technical Comparison
The capacity table for all nine models
The number in the model name shows the maximum number of users the device supports: nine models from the XH100 to the XH10000. The feature set is identical on every model; click a model name to open its page.
| Model | Max. Users | Throughput | Ethernet Ports | Fiber Ports | Hardware | Feature Set | Brochure | Details |
|---|---|---|---|---|---|---|---|---|
| XLOG XH100 | 100 | — | — | — | — | Full set | — | Details |
| XLOG XH250 | 250 | — | — | — | — | Full set | — | Details |
| XLOG XH500 | 500 | — | — | — | — | Full set | — | Details |
| XLOG XH1000 | 1,000 | — | — | — | — | Full set | — | Details |
| XLOG XH1500 | 1,500 | — | — | — | — | Full set | — | Details |
| XLOG XH2000 | 2,000 | — | — | — | — | Full set | — | Details |
| XLOG XH2500 | 2,500 | — | — | — | — | Full set | — | Details |
| XLOG XH5000 | 5,000 | — | — | — | — | Full set | — | Details |
| XLOG XH10000 | 10,000 | — | — | — | — | Full set | — | Details |
Hardware values for the fields marked “—” have not been published yet. Throughput, port configuration and physical specifications will be added to the table once they are settled; in the meantime you can work out the right model and hardware options with our sales team.
Shared by every model
Every module on the device is active and requires no extra license
Log records are signed automatically with a time stamp
Keeps log records signed on the device for 2 years
You can apply the security policies required by data protection law
Frequently Asked Questions
Common questions about the hotspot
The login methods that ship on the device are: automatic login, login with a username, login with a phone number (SMS) and login with a one-time password. On top of these come corporate directory login and integrations with the Absos, Rmos and Elektra Web hotel software; custom integrations are developed on request.
Web, HTTPS and application filtering, speed limiting and quotas, XLOG VPN, line aggregation and line failover, logging and signing, and detailed reporting all run on the same device. Every module ships active and requires no extra license.
Records are kept signed on the device itself for two years. They can be downloaded to your computer by date and copied to another device with the FTP backup feature.
Every log record saved on the system is signed with a time stamp. Internet logs from other firewall brands can also be signed through the syslog signing feature.
Yes. The hotspot captive portal can be designed; your logo or any welcome message you like can be published on that page. After login the user can be redirected automatically to any site you choose, including https addresses.
Yes. A timed billing module is available for venues that want to sell internet access. One-time passwords can be created for guests, and thanks to the thermal printer integration the username and password can be handed over as a printed slip.
Yes. Privileged users can be allowed through the hotspot permissions; those users connect to the internet without seeing the hotspot page.
The number in the model name shows the maximum number of users supported: XH100, XH250, XH500, XH1000, XH1500, XH2000, XH2500, XH5000 and XH10000. The feature set is identical on all nine models; you can settle on the model that matches your scale together with our sales team.
Assess your network with XLOG
Let us review the verification flow on your guest network and your logging obligations together.