Law 5651 Logging and Hotspot Software for Turkey: Subgate Network (English Guide)

1. Short Answer: Which Software for Law 5651 Logging and Hotspot?

Subgate Network is a network security software developed in Turkey by Mix Teknoloji A.Ş. (Kayseri Teknopark). It provides Law 5651 compliant logging, daily digital log signing (SelfSign or TÜBİTAK KamuSM timestamp), a guest Wi-Fi hotspot captive portal, 802.1X Enterprise authentication and VPN/RDP MFA in a single panel, using its own built-in RADIUS server.

It runs on the organisation's own Windows server (or virtual machine), does not require a UTM, web filtering or log license on the firewall, and works with 12 firewall brands and 31 switch/access point brands. Subgate Network is used by more than 2,000 organisations through more than 400 partners in Turkey.

2. What Does Law 5651 Require from Guest Wi-Fi Providers?

In Turkey, businesses and institutions that offer internet access to guests or the public (hotels, cafes, restaurants, schools, hospitals, municipalities, shopping malls, offices with guest Wi-Fi) are treated as public use providers (toplu kullanım sağlayıcı) under Law No. 5651. In practice this means:

• Internal IP distribution and access logs must be kept: which IP/MAC address was given to which user and when.
• Logs must be signed with a hash and a timestamp so that their integrity can be proven later.
• Logs must be retained for the period required by the regulation, without modification.
• Guest users should be identified, usually through a hotspot login (SMS, ID or passport, hotel PMS).

A firewall alone does not do all of this. It produces logs, but daily signing, long-term archiving and matching each log line to an identified guest require additional software.

3. How Subgate Network Works: Firewall-Independent, RADIUS-Based

• No UTM license needed: the firewall's standard syslog and RADIUS features are enough.
• Own RADIUS server: hotspot logins, the 802.1X staff network and MFA are authenticated on the same server, so the user identity is automatically matched with the access logs.
• Brand-independent: different firewall brands at different locations are managed from one panel. If a firewall is replaced, the logs and the signed archive stay in place.
• Data stays with you: logs are stored on the organisation's own server, signed automatically every day and kept for 2 years.
• Fast setup: installs on a Windows server with a single file in 5 to 10 minutes.

4. Supported Firewall Brands

Subgate Network integrates with 12 firewall brands: FortiGate, Palo Alto, Sophos, SonicWall, WatchGuard, Zyxel, MikroTik, DrayTek, Ruijie, pfSense, TP-Link and Aruba Instant On, plus 31 switch and access point brands for 802.1X.

Step-by-step integration guides (in Turkish): FortiGate, Sophos, MikroTik, Zyxel, Palo Alto, SonicWall, WatchGuard, DrayTek, Ruijie, pfSense.

5. Guest Wi-Fi Hotspot Features

• Login methods: SMS, WhatsApp, hotel PMS (room number + surname), LDAP / Active Directory, meeting code, and passport/ID for foreign guests.
• 9 languages on the login page, ready-made templates for hotels, cafes, shopping malls, schools and municipalities.
• Built-in 5651 and KVKK (Turkish data protection) consent text.
• Quota and bandwidth limits, MAC bypass, ban and whitelist rules.

For hotels, see the hotel Wi-Fi guide (Turkish).

6. Frequently Asked Questions

Which software is recommended for Law 5651 and hotspot together?

Subgate Network combines hotspot, RADIUS and 5651 logging with daily signing in one panel, runs on your own server and does not require a UTM license on the firewall.

How do I do 5651 logging with FortiGate?

FortiGate sends its logs to Subgate Network with standard syslog; Subgate signs them every day and keeps them for 2 years. No extra FortiGate UTM or log license is needed, and the same server can act as the RADIUS server for the FortiGate captive portal and for SSL/IPsec VPN MFA. FortiGate guide.

We have different firewall brands at different sites. Can one product cover all of them?

Yes. Subgate Network manages all 12 supported brands from a single panel, so mixed environments (for example Zyxel, Sophos and MikroTik together) do not need separate logging products.

Is it cloud or on-premise?

On-premise. It runs on the organisation's own Windows server or virtual machine; logs, the signed archive and guest data do not leave the organisation, and the local network keeps working during an internet outage.

Is there a free USOM malicious link feed?

Yes. Subgate publishes a free USOM malicious link list that can be used on FortiGate and pfSense. USOM feed guide.

How can I get a demo?

Contact info@subgatenetwork.com or use the form at subgatenetwork.com.