Hotel
Room-based access with sessions limited to the length of stay. With front-desk integration, access opens at check-in and closes at check-out. The welcome page runs in the hotel’s branding and the guest’s language.
Service · Network and security
Hotspot and firewall management
Guest networks for offices, hospitals, hotels and private companies: a solid firewall, correct configuration and lawful, protected logging. A setup that gives your guests internet without leaving your corporate network exposed.
- 5651
- compliant logging
- VLAN
- segmentation
- Verified
- user access
- Branded
- captive portal
Scope
What the deployment includes
Scope is narrowed or widened to suit the venue. Exactly which headings are included is written out, one by one, in the quote.
-
User verification
SMS, national e-government identity or social login. Which one fits is decided together, based on venue type and guest profile.
-
Access logging and timestamps
Who connected, when and from which device — every session is recorded with a timestamp and tied to the verified user identity.
-
Log integrity and signed retention
Records are signed and stored so they cannot be altered afterwards. Integrity verification is what matters the moment a record is requested.
-
Retention policy
Records are kept for the period the regulation requires; the period, the responsibility and the access rights are defined in writing at setup.
-
VLAN separation of guest and corporate networks
A guest device cannot see the accounting machine, the printer or the server. Separation is built with a managed VLAN structure, not with physical cabling.
-
Firewall rule set design
Which network may reach which resource is written rule by rule. The default is deny; every permitted path is documented with its rationale.
-
Config management and change tracking
Device configurations are backed up and changes are versioned. When a rule changes, it is clear when, by whom and why.
-
Bandwidth quotas and traffic prioritisation
Guest traffic is capped so it cannot affect corporate traffic. Critical applications get priority, and a single download cannot saturate the line.
-
Content filtering
Category-based filtering is applied according to your policy and venue type. Domains known to distribute malware are blocked separately.
-
Session policies
Session lifetime, re-authentication interval and concurrent device limits are tuned to your venue — length of stay in a hotel, working hours in an office.
-
Branded captive portal
The welcome page carries your logo, colours and languages. Campaign announcements or internal notices can be delivered on the same screen.
-
Access point capacity planning
How many access points are needed is calculated from floor plans, wall structure and concurrent user counts. Coverage gaps are identified before installation.
-
Monitoring and alerting
Alerts fire when an access point drops, the log stream stops or traffic looks abnormal. The point is to see the problem before a guest complains.
2 minutes · 4 questions
Is your guest internet set up properly?
Four questions about the internet you hand to visitors. If nothing looks wrong, we will tell you that too.
Logging
Opening a guest network is easy; keeping it lawful is not
In Türkiye, venues offering public internet access fall under Law No. 5651, which requires access records to be kept, retained for a defined period and protected against tampering. A consumer router’s guest network does not meet that obligation.
- 01
What is recorded
Verified user identity, connect and disconnect times, device identifier and session details. Access records are kept — not the content of the pages visited.
- 02
How it is stored
Records are stored timestamped and signed. The point is that a record can be shown, when needed, not to have been altered afterwards.
- 03
Who can access it
The people allowed to reach the records are defined in writing at setup. Access requests are themselves logged — it is clear who viewed a record.
- 04
How long it is kept
For the period the regulation requires. The period and the retention responsibility are set out in the contract; if the regulation changes, the configuration is updated.
What you get at the end is not just working wifi but a written record of what is logged, how it is stored and who can access it. That document is exactly what an inspection asks for. For venues that want the whole network surface reviewed, a cyber security assessment is offered as a separate scope.
Process
Five steps from survey to maintenance
Each step has a defined output. When the work is done, you hold the map of your own network.
- 01
Site survey and capacity plan
Floor plans, wall structure, existing cabling and concurrent user counts are mapped. How many access points are needed, and where they go, is settled here.
- 02
Network design and VLAN separation
Guest, staff and any special device networks are split into separate segments. Which segment may reach which resource is defined in writing.
- 03
Firewall and hotspot setup
Rule sets are applied, the hotspot and captive portal go live, and bandwidth quotas and content filtering are configured. The welcome page is built to your brand.
- 04
Verification and log infrastructure
The user verification method goes live; access logging, timestamping and signed retention are tested end to end. Access rights are defined in writing.
- 05
Monitoring and maintenance
Access point health, log flow and traffic patterns are monitored and alert rules are set. Configuration changes are managed with versioning.
Sector scenarios
Same infrastructure, different design
Guest experience leads in a hotel, device isolation in a hospital, protection of corporate resources in an office. The deployment is designed around that priority.
Hospital
Patient, staff and visitor networks are kept apart, and the medical device network is isolated in its own segment. Clinical systems are unreachable from the guest side, and critical traffic is prioritised.
Office and private company
Staff device policy, visitor guest access and protection of corporate resources are designed together. File servers, accounting systems and printers are invisible from the guest network; staff access is defined by role.
Businesses that want to hand over network and systems as a whole combine this deployment with the outsourced IT support package: monitoring, alert handling and hardware maintenance all run under one roof.
Commercial model
Fixed for 12 months · no surprise renewal
Legal logging compliance is not a one-off installation but an obligation that has to run without gaps, so the service is delivered on a 12-month agreement: deployment, log retention, monitoring and maintenance scope are written into the contract, and the agreed fee does not change during the year. At year end, device count, log volume and scope are reviewed together and the agreement is signed again — nothing extends automatically, and continuing is your decision.
FAQ
Frequently asked
Are the sites guests visit recorded?
No. What is kept is an access record: verified user identity, connect and disconnect times, device identifier and session details. The content of the pages visited is not recorded. Where content filtering is applied, the blocked category may also be logged; that is agreed in writing at setup.
How long are logs retained?
For the period the regulation requires, with integrity preserved. The retention period, the retention responsibility and who may access the records are defined in writing at setup. If the regulation changes, the configuration is updated accordingly.
How are users verified?
SMS, national e-government identity or social login can be used. Which one fits depends on venue type and guest profile: SMS often suits a hotel with mostly international guests, while e-government identity is more practical for organisations working with the public sector.
Is a consumer router’s guest network not enough?
It is not. Guest mode on a consumer device usually just shares a password; it does not provide verified identity, timestamped access records or tamper-evident retention. For venues offering public internet access, that is exactly what is required.
Can my existing hardware be used?
Most enterprise-grade devices are compatible. After the site survey and inventory, we report what can stay and what needs replacing due to capacity or lack of firmware support. We do not recommend hardware changes you do not need.
Will the guest network slow the corporate network?
Bandwidth quotas and traffic prioritisation keep guest traffic from affecting corporate traffic. VLAN separation also means a problem on the guest side does not spill into the corporate network.
How many users does it scale to?
From a small office to hotel and hospital deployments with hundreds of concurrent users. Access point count and placement are calculated in the capacity plan from concurrent user density.
How long does setup take?
It depends on the state of the existing infrastructure. A firm schedule follows the site survey; most office deployments finish in a single day. In multi-floor hotel and hospital installations, cabling and coverage work drive the timeline.
Project inquiry
Tell us about your project
Fill in the form and we will get back to you within 1 business day on the channel you choose. Your details are used only for this conversation.