Skip to content
The XG Series hardware appliances will reach end-of-life (EOL) on March 31, 2025. Click here to see the XG to XGS migration documentation.

Page permalink

Always use the following permalink when referencing this page. It will remain unchanged in future help versions.

https://docs.sophos.com/nsg/sophos-firewall/19.5/Help/en-us/webhelp/onlinehelp/index.html?contextId=wireless-hotspot-add

Add a hotspot

To add a wireless hotspot, do as follows:

  1. Go to Wireless > Hotspots and click Add.
  2. Enter a name.
  3. In Interfaces, click Add new item and select the interfaces for the hotspot.

  4. Select policies as required.

    • Application filter policy: Control access to applications using the selected policy.
    • Web policy: Control access to web content using the selected policy.
    • IPS policy: Protect your network from attacks using the selected policy.
    • Traffic shaping policy: Control traffic using the selected policy.

  5. Turn on Redirect to HTTPS to redirect traffic over HTTPS using the default IP address or a custom hostname. Hostname isn't case-sensitive and can only contain letters, numbers, and hyphens.

  6. Select the hotspot type. Choose from the following hotspot types:

    • Terms of use acceptance: Allow hotspot users to access the internet after accepting the terms of use. You can define the following settings:

      • Session expires: Sets the session validity period. After expiration, users must accept the terms again.
      • Terms of use: Type the terms of use in the field provided.

    • Password of the day: Allow hotspot users to access the internet using a daily password. The current password is valid until a new password is generated at the selected creation time. After the new password is generated, current sessions are terminated, and users must sign in using the new password. You can define the following settings:

      • Password creation time: Sets the time the hotspot generates a new password daily.

      • Send password by email to: Enter the email addresses to which you want the password emailed.

        Tip

        Creating an email alias within your organization for the users receiving passwords reduces the number of email addresses you need to manage in the hotspot settings. Only Administrative users and users on this list can access the password.

      • Override wireless networks' passphrase: Synchronizes the password with the PSK of the wireless networks of the selected interfaces. All corresponding access points are reconfigured and restarted.

      • Administrative users: This setting determines the users who can view and change the password in the user portal. See Hotspots.
      • Users have to accept terms of use: Users must also accept the terms of use to connect to the network. Enter the Terms of use users must agree to in the field provided.

    • Voucher: Allow users to access the internet using the specified voucher definitions. You can define the following settings:

      • Voucher definitions: Sets the definitions available for the voucher. You can select predefined voucher definitions or customize the type and purpose according to your organization's policies. See Add a hotspot voucher definition.
      • Devices per voucher: Sets the number of devices that can connect using a single voucher.
      • Administrative users: Sets the users who can create, view, edit, and print the vouchers in the user portal. See Manage vouchers.
      • Users have to accept terms of use: Users must also accept the terms of use to connect to the network. Enter the Terms of use users must agree to in the field provided.

  7. Turn on Redirect to URL after login to redirect users to the specified page (for example, your organization's page) after logging on. Enter the URL in the field provided.

  8. If you want to provide a custom sign-in page or voucher, click Enable customization and select one of the following customization types:

    • Basic: Lets you choose a logo and specify custom text users will see. You can define the following settings:

      • Logo: Click Choose file and select the image file to show on the sign-in page. Supported image file types are jpg, jpeg, png, and gif. We recommend a maximum image width of 300 px and a height of 100 px.
      • Scale logo to recommended size: Scale the logo to the recommended size if it exceeds the recommended size.
      • Title: The main (banner) heading shown on the sign-in page.
      • Custom text: Additional text shown on the sign-in page, such as the network SSID. Simple HTML markup and hyperlinks are allowed.

    • Full: Lets you upload a custom sign-in page and stylesheet. You can download the login page and stylesheet templates at Wireless > Hotspot Settings > Download templates. See Login page template.

      • Login page template: Click Choose File and select the template you want.
      • Images/stylesheet: Click Choose File and select the stylesheet you want.

    • Voucher template: Upload a voucher template and style sheet. Click Choose File and select the voucher template you want to use. You can download the voucher template at Wireless > Hotspot Settings > Download templates. See Voucher template.

  9. Click Save.

A corresponding firewall rule is automatically created for the new hotspot. Review the rule position on the firewall rule list. Automatically created firewall rules, such as those for email MTA, IPsec connections, and hotspots, are placed at the top of the firewall rule list and are evaluated first. The policies and actions of the rule at the top apply, which may lead to unplanned outcomes when matching criteria for the new and existing rules overlap, such as failure in mail delivery or tunnels not being established.