A system for provisioning a captive portal associated with a network access point, said system comprising: a memory area associated with a group of processing units, said memory area storing a correlation between a NAP owner identifier and at least one NAP, the NAP implementing the captive portal to provide access to a network; and the group of processing units programmed to: receive a request from a NAP owner device to configure a NAP, the request including the NAP owner identifier; receive, from the NAP owner device via a control channel, configuration settings for the captive portal, the configuration settings including usage rules; process the received configuration settings to generate configuration data for the NAP; transmit the generated configuration data to the NAP, the NAP applying the transmitted configuration data to configure the NAP; monitor network traffic from a plurality of users through the captive portal; and enforce the usage rules against the plurality of users based on the monitored network traffic to restrict access to the network; characterised in that the configuration settings comprise a set of application identifiers that identify one or more applications allowed to connect to the network through the captive portal without authentication. a memory area associated with a group of processing units, said memory area storing a correlation between a NAP owner identifier and at least one NAP, the NAP implementing the captive portal to provide access to a network; and the group of processing units programmed to: receive a request from a NAP owner device to configure a NAP, the request including the NAP owner identifier; receive, from the NAP owner device via a control channel, configuration settings for the captive portal, the configuration settings including usage rules; process the received configuration settings to generate configuration data for the NAP; transmit the generated configuration data to the NAP, the NAP applying the transmitted configuration data to configure the NAP; monitor network traffic from a plurality of users through the captive portal; and enforce the usage rules against the plurality of users based on the monitored network traffic to restrict access to the network; characterised in that the configuration settings comprise a set of application identifiers that identify one or more applications allowed to connect to the network through the captive portal without authentication. receive a request from a NAP owner device to configure a NAP, the request including the NAP owner identifier; receive, from the NAP owner device via a control channel, configuration settings for the captive portal, the configuration settings including usage rules; process the received configuration settings to generate configuration data for the NAP; transmit the generated configuration data to the NAP, the NAP applying the transmitted configuration data to configure the NAP; monitor network traffic from a plurality of users through the captive portal; and enforce the usage rules against the plurality of users based on the monitored network traffic to restrict access to the network; characterised in that the configuration settings comprise a set of application identifiers that identify one or more applications allowed to connect to the network through the captive portal without authentication.