Captive-portal guest WiFi
Branded captive portal, T&C capture, GDPR-compliant opt-in, time-limited tokens, bandwidth caps per device, isolation from back-of-house. Perfect for hotels and venues.
pfSense Consultant · Netgate Partner · Ireland & UK
Enterprise-grade firewalls — without the enterprise price tag.
Intellix is a Netgate partner. We design, deploy and manage pfSense firewalls for Irish & UK hotels, food producers, B2B distributors and equestrian operators. Multi-WAN failover, VLAN segmentation, captive-portal guest WiFi, site-to-site VPN and proper change management. Same engineers run the network and fix it when something breaks at 11pm on a bank holiday.
What we deliver
Six pfSense capabilities. Six recurring use cases.
We don't sell hardware-as-a-line-item. We deliver outcomes — guest WiFi that doesn't drop on a Saturday night, segmentation that contains a ransomware blast radius, VPN that lets your accountant work from a stud farm without a fight.
VLAN segmentation
Production VLAN ≠ guest ≠ CCTV ≠ POS ≠ admin. Inter-VLAN firewall rules tightened to least-privilege. Stops one compromised device taking the whole network with it.
Multi-WAN failover & load balancing
Fibre + 4G/5G failover with sub-second cut-over. Keep card terminals, PMS sync and bookings live during a primary-link outage. Per-VLAN WAN policy for QoS-critical traffic.
Site-to-site & remote VPN
OpenVPN, WireGuard or IPSec — your call. Multi-site mesh for distributed operations (multiple yards, regional offices). Per-user VPN with MFA via passkey or TOTP.
Reverse-proxy & IDS/IPS
HAProxy in front of internal services (PMS, ERP, booking). Suricata IDS/IPS with curated rule sets. Automated GeoIP blocking for known-bad regions and lookalike-domain monitoring.
Managed change & monitoring
Configuration in version control. Every change logged. Per-VLAN bandwidth dashboards. Quarterly health review. We notice the firewall hitting 80% CPU before you do.
Why pfSense vs the alternatives
Enterprise features. No per-seat licensing trap.
Fortinet, SonicWall and Cisco Meraki cost €4,000–€18,000 of license renewal per year for a typical SME — before you've added hardware or labour. pfSense on Netgate appliances delivers the same feature set (firewall, VPN, IDS/IPS, captive portal, multi-WAN, HA failover) with no per-seat tax and no surprise renewal hike when your headcount grows.
The trade-off is that pfSense needs an engineer who knows it. That's us — Netgate partner, multi-site deployments, change-controlled. You get the cost profile of open-source with the operational discipline of an enterprise vendor.
Common questions
pfSense + Netgate FAQs.
Are you a Netgate partner?+
Yes — Intellix is a Netgate partner. We deploy pfSense Plus on Netgate hardware (SG-1100 / 2100 / 4100 / 6100 / 8200 series depending on throughput) for Irish and UK clients. We can also deploy pfSense CE on bare metal where the use case warrants it.
Which hardware do you recommend for a typical hotel?+
For an independent hotel of 20–80 rooms with guest WiFi + PMS/POS + CCTV, the Netgate 4100 with two WAN ports (fibre + 4G failover) is the sweet spot. Larger groups or multi-property estates typically run the 6100 with HA failover. We size based on actual throughput, expected concurrent users and inter-VLAN bandwidth — not list-price.
Can pfSense handle multi-site / multi-property deployments?+
Yes — site-to-site VPN (IPSec or WireGuard) lets us mesh multiple pfSense devices into one logical network. Useful for hospitality groups with shared services across properties, food producers with regional warehouses, equestrian operators across yards. We've built five-site meshes; the design scales further.
What about captive portal for guest WiFi?+
pfSense Plus includes a captive-portal feature. We brand it with your logo/colour scheme, capture T&C consent with GDPR-compliant retention, optionally integrate with your PMS for room-number authentication, and apply bandwidth/time policies per session. Compliant with Irish & UK guest-WiFi data-retention obligations.
How do you handle change management?+
Configurations live in git. Every change is reviewed, tested in a staging device where stakes warrant, then deployed in a maintenance window with rollback ready. You see a written change-log monthly. No silent changes.
What's the typical engagement cost?+
Free on-site survey + written design. Hardware passed through at Netgate cost. Setup and commissioning typically €1,500–€4,500 depending on VLAN count and existing-network complexity. Ongoing managed pfSense from €350/month including monitoring, patching and 4-hour response SLA.
Talk to a Netgate partner.
Free on-site survey. Written design before you commit. Sized to your actual throughput, not a generic spec sheet.
Book a free site surveyWe use only strictly necessary cookies to keep this site working (e.g. your admin session, your consent choice). We do not run analytics or advertising trackers without your permission. See our privacy notice.