WiFi Access Gateway

Optimize and Monetize WiFi Networks

WiFi Networks - Optimize to Monetize

WiFi gives people mobility, enables them untethered access to the Internet. However, a poorly managed WiFi network can be extremely frustrating due to performance bottlenecks.

As a service provider of WiFi networks, you struggle to offer a great Quality of Experience while also striving to monetize the network through service differentiation such as premium subscriptions, IoT subscriptions and more.

Even bulking up with more bandwidth won't fix the problem as congestion continue unless traffic is optimized and different priorities based on subscription model can be enforced.

What You Get


Service Differentiation

The Clavister WiFi Access Gateway (WAG) offers great capabilities for service differentiation.

Imagine being able to offer limited bandwidth, block windows update and throttle torrent traffic for free users while providing a more exclusive service for premium users.

Additionally the Clavister WAG enables packaging of IoT related subscriptions where the traffic pattern and security features are tailored to the needs and limitations related to these devices.

Package tailor-made services bundles and achieve:

  • Increased Revenue
  • Optimized Traffic
  • Reduced Cost
  • Quality of Experience

Context-aware policies with Mobility and IoT in mind

Manage onboarding of IoT devices and control the Quality of Experience for your subscribers using the context-aware policies available in the Clavister WiFi Access Gateways.

The context-aware policies allows you to Block, Allow or traffic shape traffic based on contexts such as:

  • Who the user is
  • Subscription / Service Level
  • Type of device
  • Application
  • Category of website
  • and more...

Application Visibility & Control

Using probably the most advanced and powerful DPI engines on the market, Qosmos DPI Engine, which is tightly integrated into the Clavister WiFi Access Gateway gives you supreme visibility of the applications being used in your network.

Imagine being able to limit bandwidth and access to windows or iOS updates for free-users and boost the capacity to productive tools such as Salesforce or VoIP applications for your premium subscribers. All this (and more) you can do with the Clavister WiFi Access Gateway without even breaking a sweat.

Read More

Vendor-Agnostic Solution

As a WiFi network service provider you are often challenged by offering a unified set of services but with a network that has been built over a long time, with different brands that integrates poorly with eachother. 

Clavister's WiFi Access Gateways are agnostic to vendor or type of WiFi equippment you might have running in your network.


  • No vendor lock-in or integration problems
  • Provide unified set of services throughout entire network
  • Optimize and Monetize already existing networks
  • Future-safe investment with freedom of choice

Centralized Management

Clavister InControl is our premium centralized management system built to manage thousands of Clavister WiFi Access Gateway and Next-Generation Firewalls in a single pane of glass.

By using Clavister InControl you can easily handle anything from policy management to network troubleshooting and even produce insightful reports.

Key Features

  • Reduces management costs & simplifies configuration
  • Simplifies device provisioning
  • Analyze traffic and produce KPI Reports
  • Integrate with business and IT systems using APIs and SDKs
Read More


  • In light of Edward Snowden's revelations, the Shadow Brokers' revelation of zero day hacks into the biggest security vendors' appliances and servers and other similar events, it's no longer conjecture if there are backdoors in firewalls and other network equipment. In fact, most of the top firewall vendors have confirmed having backdoors in their products, either deliberately or through penetration by surveillance entities (NSA, PLA etc).

We pledge to a strict no backdoors policy: Clavister’s technology is, and will always be, free from any kind of backdoors.

Don't want to take our word for it? No problem, we can even invite you to our headquarters to audit our source code, development environment and processes.


The Clavister WiFi Access Gateways are highly versatile and offers great capabilities to optimize the traffic, provide different service for different users but also the keep them and their data safe as they connect to the network. Additionally they also come with attractive value-adding features to help run your network smoother and to stay on top of the situation using in-depth traffic analysis.




Dynamic Routing

Transparent Mode

WAN Load Balancing







DDoS Protection


Application Control

User Identity Awareness

Captive Portal

Web Content Filtering

Bandwidth Control

Policy Scheduling


Centralized Management

Local Management






Success Stories

Beijing-Shanghai Express Railway improves its network security with Clavister Security Gateways

Clavister safeguards our network security and contributes to the development of our information systems. Clavister’s innovative solutions further guarantee stable and secure operations of our station management system.

Clavister ensures high availability and network security for the Civil Police, Federal District, Brazil

In Brazil, the Civil Police is the investigative State Police Force. Each of the 26 states of Brazil has its own Civil Police Department, as does the Federal District. Its role is to carry out detective work, forensics and criminal investigation and it acts as a state bureau of investigation.

What are You Waiting For?

Download free trial or contact us for more information.

Compare models

Here you can compare the different WiFi Access Gateway platforms and choose the model that best fits your specific needs.


Firewalling 4 Gbps 10 Gbps 55 Gbps 10 Gbps 
VPN 1 Gbps 2 Gbps 8 Gbps 2 Gbps 
Estimated max. APs* 20 100 500 100 
Estimated max. Users* 200 1,000 10,000 1,000 
Concurrent Connections 250k 750k 5M 750k 
VPN Tunnels (IPsec)  25 500 1,000 500 
Ethernet Interfaces 6 x 1GbE (RJ45)   6 x 1GbE (RJ45)   1 x 1GbE (RJ45)   Max 10 
Expansion Slot No 1 4
Compatible Modules - 8 x 1GbE (RJ45 and SFP),  
2 or 4 x 10GbE (SFP+)
8 x 1GbE (RJ45 and SFP),  
2 or 4 x 10GbE (SFP+)
Virtual Interfaces VLAN (802.1Q) 64 1,024 4,096 1,024 
Routing Tables (Virtual Routers) 5 50 250 50 
High Availability (HA) No Active-Passive, Active-Active and
Active-Passive, Active-Active and
Active-Passive, Active-Active and 
Hardware Specifications
Form-Factor   Desktop 1U, 19"  1U, 19" Software/Virtual
Rack-mountable Rack-kit included Yes Yes
Power-supply 100-240VAC, 50-60 Hz 100-240VAC, 50-60 Hz Redundant & Hot-Swappable
100-240VAC, 50-60 Hz
Recommended Use-Cases
Typical environments Restaurants, Retail Stores, etc Shopping Malls, Large-size Stores, Etc Enterprise Buildings, Airports, Trainstations, etc  Shopping Malls, Large-size Stores, etc
Supported hypervisors - - - VMware, KVM
Minimum storage - - - 256 MB
Minimum RAM - - - 1 GB
Number of vCPUs - - - 1
Cloud-Based / xSP Licensing - - - Optional**

* Estimated numbers does not take into consideration important aspects such as hosted and public services, data-intense applications and similar.
For a detailed reommendation please contact a Clavister partner for further discussions. 

** Optional licensing programs are available for Service Providers where licensing is based on the total aggregated capacity instead of number of VNFs, allowing a highly dynamic and flexible licensing.

Interface Modules

The Clavister interface modules enables you to customize  port configuration of Clavister appliances with interface module slots. This gives you greater flexibility but also ensures a longer lifecycle and better compliance with your current and changing needs without having to replace the entire product.

ModulePortsCompliant ProductsSKU
8 x GbE (RJ45) Clavister W30/W50 APP-CM-NET80
8 x GbE (SFP) Clavister W30/W50 APP-CM-NET81
2 x 10GbE (SFP+) Clavister W30/W50 APP-CM-NET120
4 x 10GbE (SFP+) Clavister W30/W50 APP-CM-NET141

What are You Waiting For?

Download free trial or contact us for more information.


Clavisters services are designed to help ensure that your Clavister products are kept up to date with the latest security threats and that you get excellent assistance from our attentive support team.

The services are purchased in either 12, 36 or 60 months bundles.


Clavister WAG Subscription

Technical Support

Access to technical support 24 hours per day, 365 days per year

Software Maintenance

Access to both minor and major software upgrades

Hardware Replacement

Advanced hardware replacement in case of hardware failure. 

Centralized Management

Access to Clavister InControl, our centralized management system.

Intrusion Detection and Prevention

Access to new threat signatures.

Web Content Filtering

Access to the cloud based URL categorization service.

Application Control

Updates of application recognition decoders

What are You Waiting For?

Download free trial or contact us for more information.


Download product datasheets, videos, white papers and more.


Clavister WiFi Access Gateway EN
Clavister InControl - Centralized Management EN 
Clavister InControl - API/SDK EN 

Feature Spotlights

Application Control EN
User Identity Awareness EN
WAN Load Balancing EN
Service VLANs EN


Cybercrime and Ransomware  
Protect against DDoS attacks  
More videos  

Whitepapers and Thought Leadership Articles

Has Prism scattered trust in IT security? EN
DoS and DDoS Protection with Clavister EN | DE | SE
More though leadership articles on Clavister DeCrypted News   

What are You Waiting For?

Download free trial or contact us for more information.

Free Trial

Create My Clavister Account

Free 90-day trial

Start your trial today to use Clavister Next Generation Firewall.

Here's what you need to get started: 

1. Access My Clavister

To register for your free trial version you must first access the My Clavister area. Click here to login, or here to register a new account.

2. Generate Trial License

Try out the Clavister Virtual Next Generation Firewall for free during 90 days. It comes with UTM Services, NGFW Services and Clavister InControl, our centralized management system included. Read more about the specifications here. You may generate one trial license for your company. If you want to extend your trial or have additional requirements, don't hesitate to contact Clavister Sales.

3. Need more help?

If you need more help you are always welcome to contact our support team by registering a new support ticket in My Clavister.