FIREWALL INTEGRATIONS

Your firewall stays.
Your WiFi starts earning.

Useroam plugs into the network gear you already run. Guests land on a branded captive portal, verify in seconds and become permissioned marketing data — no hardware replacement, no network rebuild.

Captive portal settings screen

One architecture, every vendor

Redirect

A guest joins your WiFi and unverified traffic is redirected to your branded captive portal. Verification services are whitelisted through the firewall's walled garden.

Verify

Guests confirm who they are via SMS or WhatsApp in seconds — no app to install. The verified phone number becomes the identity of the session.

Authorize

The session is opened over RADIUS and authorized by your firewall's own policies, so guest traffic stays cleanly separated from your corporate network.

Log & measure

Session records are collected from the firewall and stored with compliant logging where required — and the same connection feeds your marketing analytics.

The welcome screen carries your brand

The captive portal is designed in the panel with your logo, colours and imagery, and published with a live per-device preview. The same screen doubles as a showcase for your campaigns and announcements.

Useroam captive portal settings with branded welcome page and live device preview

Supported firewalls

MikroTik

Built on the RouterOS hotspot with external login. A favourite of cafes, hotels and SMBs — the integration runs on the device you already own, from hEX to CCR and CHR.

FortiGate

Uses FortiGate's external captive portal. Physical models and FortiGate-VM are supported, including SSIDs served by FortiAP and FortiWiFi access points.

Sophos

Works with XGS and XG series firewalls on SFOS, including guest SSIDs broadcast by Sophos-managed APX access points.

Palo Alto

Integrates through the PAN-OS Authentication Portal on PA-Series and VM-Series firewalls — AP-vendor agnostic by design.

Zyxel

Uses the hotspot and Web Authentication features of the USG FLEX and ATP series, a popular choice for small and mid-size venues.

More vendors

Ruijie, SonicWall, WatchGuard and EnGenius deployments are also supported. The architecture is vendor-agnostic — if your device is not listed, talk to us.

The same network, a marketing engine

Once the integration is live, every guest who connects becomes permissioned data. Bumerang runs WhatsApp/SMS campaigns, smart surveys and the QR menu on top of it — from the same panel, with no extra setup.

Explore Bumerang →

Keep the firewall. Add the revenue.

Tell us your vendor and model — we will map the integration and open a demo environment for you.

Frequently asked questions

Do I need to replace my firewall or access points?
No. Useroam integrates with your existing firewall over captive portal and RADIUS, and guest SSIDs can be broadcast by your current wireless infrastructure.
How do guests sign in?
Through a branded, multilingual welcome page with SMS or WhatsApp verification — no app to install and no passwords to hand out at the counter.
Is guest logging compliant?
Yes. Session records are collected from the firewall and stored in an auditable format, with compliant logging applied where local regulations require it.