Run the guest network on the hardware you already own.
Guest network management that works with all of your operational data inside Calisto Pro. Keep the equipment already on your wall, with nothing to buy and no vendor to switch to. The sign-in page turns a password request into a contact record.
The Network App for Guest WiFi
Captive portals, guest authentication, usage tracking, and a live client list. On the hardware you already own.
Networks
SSIDs, VLANs, bandwidth ceilings, and the site each one serves.
Devices
Access points in the shared device list.
Hardware
Nothing to buy, and nothing to rip out.
Sign-In
The one moment a stranger will tell you who they are.
Capture
Turn a password request into a contact.
Analytics
Footfall, dwell, and the returning share by location.
The network already knows who came back.
Captured guests with visit counts and dwell time, and the capture funnel above them. The ones who gave you an email flow to Contacts; the ones who did not are still counted honestly.
0
sign-in methods on the captive portal
One
device list for every access point
Zero
hardware to buy and no vendor to switch to
Four
VLAN purposes: guest, staff, IoT and management
Three
date ranges every insight reads against
0
days of sessions, capture and footfall to read back
Networks. SSIDs. VLANs.
Configure multiple SSIDs per network with custom security, VLAN routing, and bandwidth limits. Isolate guest, staff, or IoT traffic on dedicated VLAN subnets, generate instant join QR codes, and monitor connected devices seamlessly.
| Network | SSID | Devices | VLAN | Status |
|---|---|---|---|---|
| Guest WiFi | Guest | 47 | VLAN 10 | Active |
| Staff Network | Staff | 23 | VLAN 20 | Active |
| IoT Devices | IoT | 84 | VLAN 30 | Active |
| Management | Ops | 8 | VLAN 40 | Active |
| Events | Events | 0 | VLAN 50 | Inactive |
GuestSeparated from internal systems50 Mbps cap
StaffReaches internal resourcesUnlimited
IoTDevices kept to themselves10 Mbps cap
ManagementAdministrative access onlyUnlimited
Access points. Connected devices. A ban that sticks.
Every access point with its channel, uptime and client count, and every device on the network right now with its address and how long it has been on. Disconnect one, or block the hardware address for good.
A4:83:E7:2B:9C:01 · 10.10.1.42Guest WiFi1h 23m
F0:18:98:4D:E2:7A · 10.10.1.87Staff Network3h 05m
B8:27:EB:3F:A1:55 · 10.10.1.103Guest WiFiBlocked
DC:A6:32:1E:8B:C3 · 10.10.1.61Guest WiFi2h 18m
00:1A:2B:3C:4D:5E · 10.10.1.29IoT Devices0h 55m
Nothing to buy, and nothing to rip out.
A network here is a record of what you already run: its SSID, security, VLAN, ceiling and site. There is no controller to connect to and no equipment to replace. Access points register in Signal with the rest of your fleet, so nothing here disagrees with your hardware list.
Whatever is already on the wall
There is no appliance to buy and no vendor to move to. The equipment stays yours, and swapping it later does not mean rebuilding any of this.
Settings
Session length and device caps, per-guest download and upload ceilings, an alert when an access point drops, terms text, consent and contact-sync switches, and how long to keep logs. Each group saves on its own.
Sessions
Guest, method, device, network, start time, duration, data used and status, searchable across any of it. An active session can be ended with a confirmation.
Credentials
Shared keys, RADIUS users and vouchers, each with a label, type, username, expiry and use count. Secrets are masked before they leave the server.
The one moment a stranger will tell you who they are.
Six ways to let someone on. Whichever you pick, the address they type becomes a contact on the record your other apps already read.
The page a guest sees before they are online.
One screen: a rail of templates on the left, a live preview of what the guest gets in the middle, and the sign-in configuration underneath, all editing the same page. Print the QR beside it and a guest is on the network.
Free WiFi, on us
One tap and you are online
A guest gets online. You get someone you can reach again.
Free WiFi is not the product. The thirty seconds between wanting to be online and being online is, and so is the address someone leaves you for it. They sign in, they become a contact with consent and a timestamp, they enroll in the campaign and in loyalty, and the visit lands on their timeline.
One page. One date range. Everything underneath.
Seven, thirty or ninety days, scoped to a location. Footfall, dwell, the returning share and the hour you are busiest, on one page instead of a date picker per screen.
Where WiFi touches everything else.
4 of these 8 connections are in your plan today. The rest stay visible so you know the instrument is there before you need it.
Signal
Access point hardware is registered and provisioned in Signal; WiFi reads the fleet rather than managing it.
Automations
Guest captured, guest returned, and guest lapsed each fire as an automation trigger.
Bookings
Booking code sign-in checks the code against a real reservation before granting access.
Registry
Member number sign-in checks the number against a real membership before granting access.
Campaigns
A captured guest enrolls in the post-capture campaign, and a whole segment can be pushed into one.
Circle
A captured guest can be enrolled in loyalty at the moment they sign in.
Link
Each guest session publishes to the shared contact timeline against the contact it resolved.
Sync
The guest splash renders the offers switched on for the wifi surface, and renders without them when none exist.
No setup cost. Pay when you start using.
Guest WiFi for venues and public spaces.
Priced per location. Included with Calisto Ops.
Recommended for you
Works well together.
Calisto Signal
Calisto Automations
Calisto Bookings
Included with Commerce or Ops
Reservations, inventory, contacts, tickets, and scheduling
Learn more →Calisto Registry
Included with Commerce or Ops
Reservations, inventory, contacts, tickets, and scheduling
Learn more →Calisto Campaigns
Calisto Circle
Calisto Link
Calisto Sync
Everything included in Calisto WiFi.
- Networks active, devices online, guests this week, network health (each links to its screen)
- Live connection feed
- Guest sign-in URL as a printable QR code with copy button
- Location selector to scope the board to one site
- Template rail with live preview
- Brand (name, logo, colour) pulled from shared business profile
- Welcome message, terms URL, redirect URL, session length, bandwidth ceiling
- Primary and background colour configuration
- Separate page variant per location
- Preview updates as you type
- Email capture
- Booking code (checked against a real reservation in Bookings)
- Member number (checked against a real membership in Registry)
- Social login
- Voucher code (flips to redeemed on use)
- Open access (connected, uncaptured, still counted)
- Consent-gated contact creation on the shared record
- Post-capture campaign enrollment (automatic)
- Loyalty enrollment at sign-in (if enabled)
- Visit published to the contact timeline
- Returning-guest recognition by first name
- Win-back path when a captured guest goes quiet
- Guest directory with visits, dwell, and last seen (read-only view onto the shared contact record)
- Pre-built audience segments with live counts
- One-click segment push into a campaign
- Guests without an address skipped (not sent as broken enrollments)
- Consent decline still grants internet access
- Multiple SSIDs per network with independent security, VLAN, bandwidth ceiling, and visibility
- Network detail tabs: overview, SSIDs, VLANs, connected devices
- Join QR code per network
- Delete warns how many clients will be dropped
- VLAN ID, name, subnet, purpose (guest, staff, IoT, management)
- DHCP configuration per VLAN
- Guest traffic isolated from internal systems
- Access points: model, hardware address, IP, channel, client count, uptime, status
- Access points registered in the shared Signal device list
- Connected devices: name, hardware address, IP, type, network, signal, uptime
- Searchable and filterable by location
- Disconnect (drops client now, may reconnect)
- Block (durable ban by hardware address, kept in its own table so it outlives the device row)
- Blocked devices remain visible (a ban you cannot see is a ban you cannot lift)
- Three-step setup wizard (connect, configure, sign-in)
- Vendor-neutral network records: no controller to connect, no equipment to replace
- Per-network setup tier recorded: plug-and-play captive portal, or your own RADIUS overlay
- No Calisto hardware required, and no vendor lock-in
- Sessions: guest, method, device, network, start time, duration, data used, status
- Active session termination with confirmation
- Shared keys, RADIUS users, and vouchers
- Secrets masked server-side, never rendered in the clear
- Secret rotation by typing a new one (blank keeps current)
- One page over 7, 30, or 90 days, scoped by location
- Headline: total sessions, unique visitors, captured addresses, average session, peak hour, total data
- Traffic: peak day and hour, average dwell, returning share, hourly breakdown
- Bandwidth: heaviest consumers
- Capture: conversion rate, sync rate, funnel stage by stage
- Per-location breakdown
- No-data state renders cleanly instead of failing
- Bookings (booking code validated against real reservations)
- Registry (member number validated against real memberships)
- Purview (brand identity on the sign-in page)
- Signal (access point hardware fleet management)
- Contacts (shared contact record with consent)
- Link (visit published to contact timeline)
- Campaigns (post-capture enrollment, segment push)
- Circle (loyalty enrollment at sign-in)
- Sync (offers on the sign-in page)
- Automations (guest captured, returned, lapsed triggers)
- Today (guest traffic in the daily briefing)
Questions about Calisto WiFi
No. It runs on the access points you already own. Nothing to buy and no vendor to switch to is the point of the product.
The sign-in page turns a password request into a contact, with consent captured properly. That is a contact the rest of the account can then read.
Networks, SSIDs, VLANs, access points, credentials and who is connected right now. It is network administration rather than a captive portal alone.
Yes, as contacts with their consent state, which is the part that matters legally. Session history usually stays with the previous system.
The pricing section on this page reads the live catalogue and is the authority. There are no per-access-point licences, and WiFi works without the rest of Calisto Engage.
Yes, with consent state, exportable in standard formats.