FortiGate + CaptiveWiFi Integration

FortiGate firewall.
CaptiveWiFi guest data.

Configure your FortiGate as an external captive portal with RADIUS authentication. CaptiveWiFi handles the branded guest portal and data capture — FortiGate handles the network access control.

See it in action Setup guide
1
Configure the incoming interface
Enable captive portal on the internal interface. Set external portal URL to your CaptiveWiFi portal address.
2
Add the RADIUS server
Add CaptiveWiFi's RADIUS server (radius.captivewifi.io) under User & Authentication. Credentials provided by CaptiveWiFi support.
3
Create the firewall policy
Allow traffic from the internal interface to WAN1 with NAT enabled. Guests are redirected to the portal on first connection.
Why CaptiveWiFi + FortiGate

Everything FortiGate
was missing.

FortiGate handles your network security. CaptiveWiFi handles your guests. Together they turn every WiFi connection into a verified customer record.

Guest identity at the point of connection
Every device that connects to your FortiGate guest SSID is prompted to identify themselves. Name, email and marketing consent captured in seconds.
Fully branded portal
Replace the default FortiGate splash page with your own branded guest experience. Logo, colours, fonts and imagery — matched to your venue.
GDPR-compliant data capture
Every guest record includes a full consent audit trail — timestamp, IP address and the exact wording they agreed to. Built for UK and EU compliance.
Real-time visit intelligence
See who is in your venue right now. New guest or returning? CaptiveWiFi tracks visit frequency and behaviour across all your FortiGate locations.
Automatic marketing triggers
Connect to Klaviyo, Mailchimp or your CRM. First visit, return visit, lapsed guest — each connection triggers the right campaign automatically.
Works with all FortiOS versions
CaptiveWiFi's FortiGate integration works across all current FortiGate hardware models and FortiOS firmware versions.
Setup overview

Three phases.
Full setup support included.

FortiGate requires three configuration phases. Our team provides the RADIUS credentials and can walk you through the setup on a call.

1
Configure the incoming interface
Edit the internal interface in FortiGate
Set security mode to Captive Portal
Enter your CaptiveWiFi portal URL
Exempt the portal server URL from captive portal restrictions
2
Add the RADIUS server
Go to User & Authentication → RADIUS Server
Add radius.captivewifi.io as the server
Enter the RADIUS secret (contact CaptiveWiFi support)
Test connectivity — must show OK before proceeding
3
Create the firewall policy
Go to Policy & Objects → Firewall Policy
Allow traffic from Internal → WAN1
Enable NAT to translate private to public IPs
Guests will be redirected to the portal on first login
RADIUS Server Details
Server: radius.captivewifi.io
Port: 1812
Secret: # Contact support@captivewifi.io

Portal URL: https://getonline.captivewifi.io
           /guest/<your-site-id>

# Site ID available in your
# CaptiveWiFi dashboard under
# Manage Venue > WiFi Hardware
View the full setup guide →
FAQ

Common questions about
FortiGate + CaptiveWiFi.

Do I need a RADIUS server to integrate FortiGate with CaptiveWiFi?
Yes. The FortiGate integration uses RADIUS for user authentication. CaptiveWiFi operates a managed RADIUS server at radius.captivewifi.io. Contact our support team at support@captivewifi.io to obtain the RADIUS secret key required for configuration.
Which FortiGate models are supported?
CaptiveWiFi works with all current FortiGate hardware models and FortiOS firmware versions. The configuration steps are consistent across models — if you are working in a live environment, you may need to adjust some steps to fit your existing setup.
Is this GDPR compliant?
Yes. CaptiveWiFi is fully GDPR and UK GDPR compliant. Every guest record includes a consent timestamp, the exact consent wording displayed, IP address and opt-in status. A full DPIA is available on request.
Can I get help with the setup?
Yes. Book a free 15-minute call with our team and we will walk through the FortiGate configuration with you. We also provide the RADIUS credentials you need to complete the integration.
Other integrations

CaptiveWiFi connects to
your whole stack.

UniFi
WiFi Hardware
Cisco Meraki
WiFi Hardware
TP-Link Omada
WiFi Hardware
Ruckus One
WiFi Hardware
Get started

Ready to connect your
FortiGate firewall?

Full setup support available. Contact our team for RADIUS credentials.

See it in action