Walled Garden 網域驗證工具

為 Cisco Meraki、Ubiquiti UniFi 及其他無線硬體控制器生成驗證前的白名單。

1. Choose your integrations

Apple CNA bypassAllows iOS and macOS devices to auto-detect internet access without opening the Captive Network Assistant browser overlay.

Google AuthenticationRequired for guest login using Google accounts, Gmail verification, or Google Workspace SSO.

Facebook AuthenticationRequired for guest login using Facebook accounts or capturing profile data.

Stripe paymentsEnables pre-authentication credit card and Apple Pay processing for paid WiFi tiers.

PayPal paymentsEnables PayPal payments for paid WiFi access tiers.

Google FontsRequired if your splash design calls external Google Fonts styles.

AWS S3 and Cloudfront CDNRequired if your custom assets, logo, or background images are hosted on Amazon S3 or Cloudfront.

2. Select your hardware controller

Generated rules (14 domains)

*.apple-dns.net
*.apple.com
*.captive.apple.com
*.fonts.googleapis.com
*.fonts.gstatic.com
*.gsp1.apple.com
*.onboarding.purple.ai
*.purple.ai
*.www.apple-dns.net
*.www.apple.com
*.www.purple.ai

Important notes about Apple CNA bypass

Whitelisting Apple domains prevents the captive network browser from popping up automatically. While this creates a seamless login experience for repeat users, it requires guests to open a browser manually to see the splash page on their first connection. If you want to force the login screen to display immediately on connect, do not whitelist the Apple CNA domains.

立即設定 Walled Garden 存取清單

設定強制入口時，訪客網路需要在驗證前將第三方服務（例如 Apple CNA、Google Fonts、Facebook 或金流閘道）加入白名單。選擇您的整合項目與控制器類型，即可生成完整的複製貼上規則。

支援的整合項目與平台

適用於 Cisco Meraki、UniFi、Cisco Catalyst 9800 及 Aruba Central 的直接設定格式。
涵蓋社群登入、外部字型、金流處理器及 Apple CNA 繞過網域。
具備 SSRF 安全防護的 DNS 解析與 IP 位址查詢。

Need Enterprise Assistance?

Deploying secure guest networks at scale across dozens of sites requires precise controller configurations. Speak to our team for custom network engineering plans.

Contact Our Engineers