Walled Garden Domain Validator

Generate pre-authentication whitelists for Cisco Meraki, Ubiquiti UniFi, and other wireless hardware controllers.

1. Choose your integrations

Apple CNA bypassAllows iOS and macOS devices to auto-detect internet access without opening the Captive Network Assistant browser overlay.

Google AuthenticationRequired for guest login using Google accounts, Gmail verification, or Google Workspace SSO.

Facebook AuthenticationRequired for guest login using Facebook accounts or capturing profile data.

Stripe paymentsEnables pre-authentication credit card and Apple Pay processing for paid WiFi tiers.

PayPal paymentsEnables PayPal payments for paid WiFi access tiers.

Google FontsRequired if your splash design calls external Google Fonts styles.

AWS S3 and Cloudfront CDNRequired if your custom assets, logo, or background images are hosted on Amazon S3 or Cloudfront.

2. Select your hardware controller

Generated rules (14 domains)

*.apple-dns.net
*.apple.com
*.captive.apple.com
*.fonts.googleapis.com
*.fonts.gstatic.com
*.gsp1.apple.com
*.onboarding.purple.ai
*.purple.ai
*.www.apple-dns.net
*.www.apple.com
*.www.purple.ai

Important notes about Apple CNA bypass

Whitelisting Apple domains prevents the captive network browser from popping up automatically. While this creates a seamless login experience for repeat users, it requires guests to open a browser manually to see the splash page on their first connection. If you want to force the login screen to display immediately on connect, do not whitelist the Apple CNA domains.

Configure Walled Garden Access Lists Instantly

When setting up captive portals, guest networks require whitelisting third-party services (like Apple CNA, Google Fonts, Facebook, or payment gateways) pre-authentication. Select your integrations and controller type to generate complete copy-paste rules.

Supported Integrations & Platforms

Direct configuration format for Cisco Meraki, UniFi, Cisco Catalyst 9800, and Aruba Central.
Covers social logins, external fonts, payment processors, and Apple CNA bypass domains.
SSRF-safe DNS resolution and IP address lookup.

Need Enterprise Assistance?

Deploying secure guest networks at scale across dozens of sites requires precise controller configurations. Speak to our team for custom network engineering plans.

Contact Our Engineers