Enable Policy-based Internet Access at Sea

Back to use cases

How does Cloudi-Fi helps global maritime transport leader to offer a secure Wi-Fi access at sea with Fortinet Fortigate and Starlink

Secure Wi-Fi at sea with Cloudi-Fi - Fortinet - Starlink

Enable controlled internet access at sea with Cloudi-Fi, Fortinet Fortigate, and Starlink
 

Reliable internet access is essential for maritime crews. Concurrently, managing satellite data costs and bandwidth is a growing challenge for maritime operators (shipping and cruise vessels face similar challenges). Cloudi-Fi’s cloud-based captive portal, combined with Fortinet’s FortiGate firewall, empowers shipping fleet IT management teams to offer fair, secure, and cost-efficient connectivity for all onboard.

Cloudi-Fi LAN deployment with Fortinet FortiGate and Starlink
Daily internet Access for Crew Members

The challenge: managing satellite internet costs at sea

Satellite services like Starlink Maritime (link: https://www.starlink.com/business/maritime), which delivers high-speed internet even in remote waters, allow crews to stay connected during long voyages. However, this connectivity comes at a cost. Starlink offers speeds up to 220 Mbps, but without data consumption limits, monthly expenses can escalate quickly—especially when Starlink bandwidth is left unmanaged.

Shipowners face the complex task of managing Starlink maritime connections while keeping data costs under control. A few users streaming or browsing heavily can consume large portions of the ship’s Starlink bandwidth, causing service slowdowns or expensive overages.

To solve this, maritime operators need a solution that enables:

  • Fair access to the internet for all crew members
  • Cost control through data consumption management
  • Secure authentication for users

A user-friendly browsing experience

Cloudi-Fi - Fortinet Fortigate Zero Trust identity and Cloud Captive Portal solution  

The solution: Cloudi-Fi Captive Portal with FortiGate

To meet these needs, shipowners are deploying Cloudi-Fi’s cloud-based captive portal, integrated with Fortinet’s FortiGate firewall. This combination offers seamless internet access while ensuring consumption is controlled, secure, and aligned with Starlink Maritime CyberSecurity best practices.

Because Cloudi-Fi is 100% cloud-based, there’s no need for on-premise infrastructure. It allows shipowners to manage access policies remotely and in real-time—even while the ship is at sea. This cloud-captive portal approach provides flexibility and centralization, ideal for modern maritime operations.

Crew members connect to Wi-Fi, are redirected to a branded login portal, and authenticate with personal credentials. This ensures only authorized users are allowed access, and all activity is logged in the cloud—enhancing wireless network identity and access management for all users and devices through traceability and control.

Crew member user journey with the Cloudi-Fi Captive Portal config with Fortinet Fortigate + Starlink

Fair access through time-based consumption tokens

A standout feature of this solution is time-based internet access tokens. This system assigns a daily usage allowance—one hour per crew member—to ensure fair and controlled access, especially when working with limited Starlink bandwidth.

How it works:

  • A crew member logs in using a voucher for 60 minutes of daily internet access.
  • After browsing for 15 minutes, the system logs them out, retaining 45 minutes for later use.
  • The timer resets daily, allowing each user a fresh allocation.

This approach prevents overuse by a few users and guarantees fair internet access across the crew, preserving the integrity of Starlink maritime connectivity while enhancing operational efficiency.

Secure Wi-Fi onboard shipping vessel by Cloudi-Fi - Image by Freepik

Key Benefits for Maritime Operators

1. Cost Control and Bandwidth Optimization
Time-based tokens help limit satellite data usage, reducing costs while maintaining service availability—even on limited Starlink bandwidth plans.

2. Secure and Compliant Access
Users must authenticate before gaining access, minimizing security risks. Cloudi-Fi’s logging system stores detailed usage records securely in the cloud.

3. Fair Usage for All Crew Members
The system ensures equitable internet time and bandwidth distribution, avoiding monopolization by a few individuals using Starlink maritime connections excessively.

4. Easy Remote Management
Administrators can adjust access policies in real-time from anywhere, which is ideal for managing fleets across regions using Starlink maritime services.

Secure Wi-Fi at sea with Cloudi-Fi - Fortinet - Starlink

Conclusion

 Maritime connectivity doesn’t have to be expensive or chaotic. With Cloudi-Fi and FortiGate, shipowners can offer secure, fair, and cost-effective internet access at sea. As satellite services like Starlink grow in popularity, intelligent data management becomes essential—and Cloudi-Fi delivers a scalable, future-ready solution that supports Starlink Maritime CyberSecurity, optimizes Starlink bandwidth usage, and leverages a robust cloud-captive portal to enhance control and user experience.