Home

IT Support

Professional IT support

We've solved the same IT headaches you're dealing with now, for hundreds of other Wiltshire businesses. Whether it's helpdesk support, network management, cloud solutions, cybersecurity or strategic IT consulting, get in touch and let's fix it.

Learn more ->

IT Support

Outsourced IT Support Packages & Pricing Remote IT Support Proactive IT Support Switching Providers Pricing Estimator

Regional IT support

IT Support in Wiltshire IT Support in Melksham IT Support in Chippenham IT Support in Trowbridge IT Support in Bristol IT Support in Bath IT Support in Corsham IT Support in Devizes IT Support in Swindon

Fully managed IT services

The technology behind your business should be invisible - until you need it. We manage it so it stays that way.

Learn more ->

Managed Services

Core IT Services Microsoft Solutions Cloud & Hosted Services Unified Communications IT Consultancy Data Connectivity

Website Services

Website Development Search Engine Optimisation Website Hosting Website Support

Cyber Security services

Cybersecurity isn't a luxury item - it's the intelligent way to protect your business, your data, and your future.

Learn more ->

Security Services

Remote Server Monitoring Cyber Essentials Multifactor Authentication Email Security Firewalls Anti Virus Software Endpoint Detection & Response

Frequently Asked Questions

The questions we get asked the most, answered straight in plain English.

Learn more ->

Our Vision

Our vision is to make the organisations we partner with the very best they can be.

Learn more ->

Company Links

Who are Sound Networks The Team Frequently Asked Questions Customer Testimonials Why Choose Us Privacy Policy Cookie Policy Terms & Conditions Data Protection Policy Environmental Policy Diversity Policy

Why your business should have separate guest Wi-Fi

Guest Wi-Fi should give visitors internet access without giving them access to your business network

Customers, contractors and visitors may use devices you don't control. You don't know whether their phones or laptops are properly updated, protected from malware or secure. A properly configured guest network keeps those devices away from your business computers, servers, printers, cameras and other systems.

What separate guest Wi-Fi means

So export everything you need

Guests should be able to browse the internet, use email and access online services, but they should not be able to connect to your internal systems. This includes:

Business computers and servers
Network printers
File storage and backups
Security cameras
Building access systems
Network management interfaces

Your guest and business networks can still share the same internet connection. The separation is created through your router, firewall, switches and wireless access points.

A different Wi-Fi name isn't enough

Having separate Wi-Fi names (SSIDs) doesn't automatically mean the networks are secure.

A properly configured guest network should use network separation, such as a VLAN, with firewall rules preventing guest devices from accessing your internal network. Look for settings such as:

Guest network
Network isolation
Deny local network access
Client isolation
VLAN
Guest firewall rules

If your equipment only provides a second Wi-Fi name and password, ask your IT provider to confirm that guest devices cannot access your internal network.

Stop guests connecting to each other

Guest devices should normally be prevented from communicating with one another as well as being separated from your business network. This may be called client isolation, wireless isolation or peer-to-peer blocking.

Create a list of everything connected to it and update or disable those connections before cancellation. Test the replacement to make sure new information is still being received and automated tasks continue to work. Also check whether employees use the service to sign into other applications, such as Sign in with Microsoft or Sign in with Google. Add alternative sign-in methods before cancelling and make sure the business controls the administrator and recovery details. Once the migration is complete, revoke old API keys, access tokens and integrations.

These are two separate protections, ideally, your guest network should use both:

Network separation stops guests accessing your business systems.
Client isolation stops guests accessing each other's devices.

What about employees' personal devices?

Personal phones and laptops that only need internet access can normally use the guest network. If an employee needs to access company files or applications from a personal device, you should have a clear BYOD policy and appropriate security controls in place. Company-owned, managed devices can use the business network where required. Unmanaged devices should have restricted access.

What about smart devices?

Smart TVs, cameras, speakers, thermostats and other connected devices often need internet access without needing access to your computers. Where appropriate, put these devices on a separate network. Some businesses use the guest network for this, although devices that need to communicate with local controllers or recording systems may require a different configuration. A smart device shouldn't be able to access business computers simply because it uses the same router.

How to check your guest Wi-Fi

Check which devices use each network

Business equipment should use the business network; visitors and unmanaged devices should use the guest network.

Block access to your internal network.

Guests should not be able to reach printers, servers, file storage, cameras or network management pages.

Enable client isolation

Prevent guest devices from communicating with each other.

Use appropriate Wi-Fi security

Use WPA3 where supported, or WPA2 where necessary, and always use a different password from your business Wi-Fi.

Keep network equipment secure

Install firmware updates, change default administrator credentials and replace equipment that no longer receives security updates.

Test the configuration again whenever your router, firewall or wireless equipment is replaced or significantly reconfigured.

Do you need a separate internet connection?

Usually not.

Most small businesses can run guest and business networks over the same internet connection while keeping them properly separated through the router or firewall. You can also apply bandwidth limits to guest Wi-Fi to prevent visitors from using all your available internet capacity. Older or basic routers may not provide sufficient isolation, even when they offer a "Guest Wi-Fi" option. Check the manufacturer's documentation or ask your IT provider to test it.

Keep the guest password separate

Never use your business Wi-Fi password for guests. A separate guest password means you can change visitor access without disconnecting company devices. Consider changing it when too many people know it, after a large event or when a contractor no longer needs access.

Remember, a guest password controls who can connect; network separation controls what they can access.

Frequently Asked Questions

Is a guest Wi-Fi password enough to protect my business network?

No. Your router, firewall and wireless equipment must also prevent guest devices from accessing the internal network.

Can guest and business Wi-Fi use the same internet connection?

Yes. They can share one internet connection while remaining separated within your network equipment.

Should employees use guest Wi-Fi on personal phones?

If the phone only needs internet access, guest Wi-Fi is usually appropriate. Devices accessing company systems should follow your business's security and BYOD policies.

Can visitors use a network printer?

Guest access to printers should normally be blocked. If visitor printing is required, your IT provider can provide a controlled solution.

Does guest Wi-Fi prevent cyber attacks?

No. It reduces unnecessary network access and can limit the spread of a compromised device, but it doesn't replace MFA, secure passwords, updates, endpoint protection, backups and other security controls.