Control network access across every site.

Manage guest, subscriber, staff and device access from one console, with access policy enforced on a Linux gateway at each site.

Start free trialSee how it works

Free URUFI Cloud trial for one gateway. No credit card.

  • Needs a Linux gateway at each site
  • Keeps your switches and access points
URUFI Console Overview with sites online, active access, items that need attention, and each site's connection and confirmed configuration
Overview in the URUFI Console, captured from a test workspace.

Used by multi-site IT teams, service providers, and guest and subscriber networks.See solutions

One policy, applied at the site.

You set access rules once in the Console. Each gateway receives them over an outbound encrypted link and enforces them locally.

  • Client traffic leaves through the site's own internet connection, not through URUFI.
  • Firewall, bandwidth limits and DHCP run on the gateway.
  • Your switches and access points stay in place.
How deployment works
Control linkClient traffic

Guest access with an expiry.

Guests sign in on your branded portal with a phone-number account. A prepaid card PIN or your free trial activates a plan, and access ends when the plan does.

  • Each plan sets a duration and the access it includes.
  • PIN cards are generated in batches for a plan.
  • The free trial is optional and limited per phone and device.
  • Speed comes from the service class your policy assigns.
Guest access in detail
Sign in
Your venueالعربية

Your access starts here

Phone numberContinue
After a card or trial is activated
Your venueالعربية
Plan active
Plan
Day pass
Time remaining
5 h 42 min
Expires
Today, 18:30
Available access
Portal access

When the plan ends, the device returns to the portal.

Based on the URUFI captive portal. Example values.

A certificate for each device.

Replace a shared Wi-Fi password with a certificate issued to one device. The gateway checks it locally, then your access policy decides what the device gets.

  1. 1Issue

    From the portal's Secure tab, or by an operator in the Console.

  2. 2Install

    The device user installs the profile or credential file.

  3. 3Connect

    The access point sends EAP-TLS to RADIUS on the site's gateway.

  4. 4Authorize

    Access policy allows or denies; the gateway enforces the result.

A revoked certificate is refused once the gateway receives the revocation.

Certificate access in detail

Cloud or self-hosted.

The same Console and Edge Agent either way. The difference is who runs the central platform.

Compare deployment optionsSee pricing

URUFI Cloud

We run the central platform.

  • We operate and update the platform
  • One workspace per plan, billed by gateways
  • Free trial for one gateway

Self-hosted

You run the central platform.

  • Runs on your infrastructure
  • Signed license, verified without a permanent connection
  • Several isolated workspaces per license

Start with one site.

Try URUFI Cloud free on one gateway, with no credit card. Prepare the gateway with the installation guide.

Start free trialRead the installation guide