Guest Wi-Fi reaches the corporate network
A mis-configured guest network is a real security hole. No panic, but fix soon.
Try this first
- 1Connect to guest Wi-Fi on a phone and try to reach an internal share or printer. Works? Then the gap exists.
- 2Open your router or AP controller and confirm the guest SSID is on a separate VLAN or has client isolation.
- 3Turn on client isolation on the guest SSID. That alone prevents guests from seeing each other and reaching corporate.
- 4Block guest-Wi-Fi access to internal services in the firewall: drop all traffic from guest VLAN to LAN VLAN.
When to bring us in
VLAN and firewall work is delicate; one wrong rule and the office has no internet. Safer to do together, typically about an hour.
See also
- Wi-Fi drops randomly across the officeFirst rule out whether it is the access points or the internet connection itself. Different fix.
- One room or corner has no or bad Wi-FiNot always "add another AP"; often one is poorly positioned, or there is a metal wall in the way.
- Internet is suddenly slow for everyoneThree suspects: your provider, a colleague soaking the line, or a backup or update kicking in unexpectedly.
None of the above fits?
Describe your situation below. We pass your input plus the steps you already saw to our AI and return tailored next-step advice. If it's too risky to DIY, we'll say so.
Or skip the DIY entirely
Our Managed IT clients do not look these things up. One point of contact, a fixed monthly price, resolved within working hours.