SECURITY SOLUTIONS · 5651

Identified Guest Wi-Fi, Access Records That Stand as Evidence

izgate is a cloud-based Wi-Fi authentication and Law 5651 record-keeping service for businesses that provide internet access. Everyone who joins your network is verified, every connection record of your firewall is matched to that person, and records are signed, time-stamped and kept unaltered for two years.

Explore on izgate.com How It Works

2 yearsRetention period for access records set by the regulation

DailyQualified time stamp from Kamu SM

6 brandsSupported firewalls

No setupReady-to-use service on the IzHost cloud

5651

Every Business Offering Wi-Fi Is a "Collective Use Provider"

Law No. 5651 places everyone who lets people use the internet at a given place under the same definition. The obligation is yours as soon as you open the internet to a guest, a customer or an employee — whether the access is free or paid does not change the definition.

“Collective use provider: anyone who provides people with the opportunity to use the internet at a certain place and for a certain period,”

Law No. 5651, article 2/1-i (unofficial translation)

“Regardless of whether they act for commercial purposes, all internet collective use providers are obliged to take the measures set by regulation on blocking access to content that constitutes a crime and on keeping access records of use.”

Law No. 5651, article 7/2 (unofficial translation)

What Does the Regulation Require?

Article 4/1 of the Regulation on Internet Collective Use Providers (Official Gazette 11.04.2017) imposes three measures on all collective use providers. izgate takes over the record-keeping and identification side.

Content filtering (4/1-a)

Filtering that prevents access to criminal content is done by your firewall's web filter. izgate records and reports the blocked access.

Access records (4/1-b)

Recording access records electronically on your own systems and keeping them for two years. izgate matches records to people and keeps them in a signed archive.

User identification (4/1-c)

In public spaces, setting up a system that identifies users via SMS or similar methods. The izgate login portal does exactly that.

2YRSArticle 3/1-e of the regulation defines the access record. izgate stores this information on every line together with the identity of the person who connected.

What Must an "Access Record" Contain?

IP address assigned on the internal network
Start and end time of use
MAC address of the device
Destination IP address
Real (NAT) IP assigned to the user
Port assigned to the user

Without Records, the Question Stays With the Business

When a post, threat or fraud made over your network is investigated, the trail first reaches the public IP address registered to your business. A business that cannot answer "who used this connection at that time?" with identity-matched records — and its managers — may become a party to statements, investigations and lawsuits. On a shared-password Wi-Fi, nobody knows who connected; and a record that can be altered later is weak as evidence.

For commercial collective use providers such as internet cafés, the Law (art. 7/4) authorises the local administrative authority to issue a warning, an administrative fine from 1,000 TL to 15,000 TL, or a suspension of activity for up to three days.

This page is for information only and does not constitute legal advice.

Identified Wi-Fi in Four Steps

izgate works with your existing firewall; no new hardware or server is needed.

Connects

The guest selects the Wi-Fi network; a login page with your brand opens on the phone.

Is verified

Identity is verified by SMS code, national ID, visitor code or another method you choose.

Goes online

izgate creates a personal user on your firewall; your session, device and speed rules apply.

Is recorded

Every connection record of the firewall is matched to that person, signed hourly and time-stamped daily.

Two Products, One Panel

Guest and staff Wi-Fi management and firewall log management work in the same panel, on the same records.

Wi-Fi Management

Flexible login methods

SMS code, national ID, visitor code, admin approval, registered device, pre-registration (e.g. hotel guest list), Active Directory / LDAP, RADIUS and your own web service. Chosen and ordered per network.

Shared SMS membership

The guest verifies the phone once; on later visits — and at other businesses using izgate — they connect with phone and password, without waiting for an SMS.

Portal with your brand

Logo, colours, background, layout and TR/EN language — or your own HTML design. Add menu links to the welcome page shown after connecting.

Ready privacy notice and terms

Privacy notice (KVKK) and Internet Use Service Agreement templates are filled with your company details; consent is requested per network.

Access rules

Session length, daily connection limit, concurrent devices per person and "remember device" period, set separately for each network.

Speed and quota profiles

Download and upload speed per person; daily, weekly or monthly quota. When the quota is used up, the connection is cut or slowed down.

Devices without a portal

Printers, smart TVs, cameras and robot vacuums that cannot open a login page are registered by MAC address, exempted on the firewall automatically and still linked to a person.

Fake Wi-Fi detection

Nearby wireless networks are scanned regularly; broadcasts imitating your network name or open networks with similar names are detected and alerted.

Firewall Log Management

Live logs

Real-time stream; search by person, IP, MAC, device and action in seconds. Choose any field your firewall sends as a column.

Signed archive

Verification, download, a signed export package for authority requests and making past records searchable again.

17 ready reports

Law 5651 compliance, user-IP matching, traffic and blocked connections. PDF, Excel and CSV; scheduled delivery by e-mail and Telegram.

Alarms and events

Attacks and blocked traffic, failed logins, configuration changes and device outages; notifications by e-mail, Telegram, webhook and SMS.

Firewall rules

View and edit FortiGate and MikroTik rules from the panel, with hit counts and change history.

Configuration backups

Scheduled backups of firewall settings; every version stored encrypted, changed lines shown side by side.

izgate for Your Sector

The law makes no distinction between guests, customers and employees — but needs differ by sector.

Hotels and guesthouses

Your hotel software can pre-register staying guests via API; reception creates visitor codes with limited rights, and registered devices are not asked to verify again at every login.

Cafés and restaurants

Fast SMS login, daily connection limit and speed profile keep guests from exhausting your line; show your menu on the welcome page.

Offices and business centres

Employees connect with their Active Directory account, visitors by SMS; no more handing out a shared Wi-Fi password.

Schools and dormitories

Device limit and quota per student; access blocked by your firewall's web filter is reported.

Hospitals and clinics

Admin-approved or SMS login for visitors; medical devices run uninterrupted with portal-free registration.

Retail and shopping malls

Short sessions for heavy visitor traffic; send visitors to your campaigns from the welcome page after connecting.

Prove Your Records Were Not Altered

Showing that a record was not changed later matters as much as having it.

Hourly signature chain

Records are packed every hour; each package is chained to the previous one with SHA-256 and digitally signed.

Qualified time stamp

A daily time stamp from Kamu SM independently proves that the record existed on that date (Law No. 5070 art. 3/h). The stamp fee is included in the service.

Nightly integrity check

The archive is verified automatically every night; any corruption or tampering raises a critical alarm immediately.

Separate disks, lossless collection

Live records and the archive sit on separate disks; no log leaves the queue before it is durably written. Records are not deleted even if a disk fills up.

Works With Your Existing Firewall

Log collection and person matching on all brands; on FortiGate and MikroTik, guest users and rules are managed automatically through the API.

FortiGate

MikroTik

pfSense

OPNsense

Sophos

Palo Alto

Why on the IzHost Cloud?

No server needed

No hardware, operating system or installation; connecting your firewall is enough.

We handle maintenance

Updates, monitoring and the daily time stamp are run by the IzHost team.

Isolation per company

Each company's records are stored with its own identity; companies cannot see each other's data.

Local support

Direct help with setup and use at +90 850 885 10 80 and destek@izhost.com.

Frequently Asked Questions

What is izgate?

izgate is a cloud service that authenticates users on your guest and staff Wi-Fi and stores your firewall access records — matched to the person who connected — signed and time-stamped under Turkish Law No. 5651 and its regulation.

Does a business offering free Wi-Fi also have to keep records?

Yes. Article 7/2 of Law No. 5651 imposes the obligation to keep access records on all collective use providers regardless of commercial purpose. Hotels, cafés, restaurants and offices are covered.

How long are records kept?

The regulation requires access records to be kept for two years (art. 4/1-b). In izgate the retention period is a company setting; two years is recommended by default.

Is a time stamp mandatory?

The legislation does not require the words "time stamp" for collective use providers. A time stamp from an authorised electronic certificate service provider, however, independently proves that a record existed on that date and was not altered later, strengthening its value as evidence.

How is guests' personal data protected?

The legal basis for Law 5651 records is the law itself (KVKK art. 5/2-a and ç). A privacy notice is shown on the login page; phone and ID numbers are stored encrypted and never written to the firewall or logs — a personal alias code is used instead.

Which firewalls does it work with?

FortiGate, MikroTik, pfSense, OPNsense, Sophos and Palo Alto. On FortiGate and MikroTik, guest users and rules are managed automatically through the API.

What do I need to set up?

You do not need to install a server. Point your firewall's log forwarding and guest network login page to izgate; the panel generates a step-by-step guide and ready commands for your device.

How do I buy it?

izgate is licensed yearly per firewall device, and you choose the record storage you need. Prices and purchase are on izgate.com; you sign in with your IzHost account.

Put Your Guest Internet on Record Today

Visit izgate.com for pricing, a demo and purchase, or talk to our team.

izgate.com Contact Us