INTEGRATION

Zyxel Captive Portal
Integration

Zyxel USG FLEX and ATP are a common choice for SMB and mid-market sites. Their built-in hotspot gets guests online; it does not identify them or feed a guest database. Useroam adds that on top of the Zyxel you already run.

Firewall captive portal settings screen

What the Zyxel integration does

Useroam Cloud takes the guest arriving through the Zyxel firewall's hotspot and web authentication features, presents a branded captive portal, verifies their identity and writes access records to signed, timestamped storage.

How the integration works

Web Authentication

The guest network and Web Authentication are configured on the Zyxel firewall; unauthenticated traffic is redirected to the Useroam Cloud portal.

Portal and walled garden

A branded welcome page is designed in Useroam Cloud; the portal and verification services are added to the walled garden so they stay reachable before login.

RADIUS authorisation

The guest verifies their identity over SMS or WhatsApp; the verified mobile number becomes the RADIUS username for the session and the firewall authorises access.

Syslog and signed logs

Access and NAT records are collected from the firewall over syslog, signed with a trusted timestamp and retained for a configurable period. Any record needed for an audit is served from the panel.

The welcome screen carries your brand

The captive portal is designed in the panel with your logo, colours and background image, and published with a live per-device preview. The same screen doubles as a placement for your campaigns and announcements.

Useroam captive portal settings screen: branded welcome page with live per-device preview

What to know on the Zyxel side

USG FLEXATP serisiWeb Authentication
  • Works with USG FLEX and ATP series firewalls that support hotspot and web authentication.
  • The guest SSID is broadcast by the existing wireless infrastructure behind the firewall — access point brand is irrelevant.
  • Scales from one location to many; signed logs live in the cloud, with no on-site server or maintenance overhead.

A marketing layer on the same network

The Zyxel integration is not only about getting guests online: every guest who connects becomes permissioned data. The Bumerang modules run from the same panel, with no additional deployment.

Campaigns

Welcome and win-back flows go out automatically over WhatsApp/SMS, and the return visit is measured in the panel.

Explore →

Surveys

Happy guests are routed to a Google review, unhappy feedback comes to you — your reputation is fed by the WiFi.

Explore →

QR Menu

Multilingual menu and order-from-table, with reporting on which item drew interest and when.

Explore →

Other integrations

Useroam is vendor-agnostic: even when sites run different devices, everything is managed from one panel.

Your hardware is ready. Let's open the guest network.

Send us your model and we will plan the integration steps together and open a demo environment the same day.

Frequently asked questions

Do I need extra hardware or a licence for Zyxel guest WiFi?
No extra hardware. Useroam runs with the Zyxel firewall you already own. Licensing depends on your device segment and the plan you choose.
How are access logs handled?
Access and NAT records are collected from the firewall over syslog, signed with a trusted timestamp from an accredited timestamping authority, and retained for a period you configure. Nothing is stored on site, and any record needed for an audit is exported from the panel.
Which Zyxel devices does it work with, and will my settings change?
USG FLEX and ATP series. The guest network is managed by its own policy, so your corporate traffic and existing Zyxel settings are unaffected.