Plain English guide · Networking & cyber security
Giving visitors internet access should be straightforward. Keeping their devices away from your business systems is just as important. Here is what a properly separated guest network does, and what to check.
The short answer
A guest network gives visitors a route to the internet while restricting access to staff computers, shared files, printers and security equipment. It reduces unnecessary access and makes it easier to manage how the connection is used.
A small business might use one Wi-Fi name for staff laptops, customer phones, cameras and smart devices. It is convenient, but it mixes equipment with very different purposes and levels of trust. A visitor’s device could be poorly maintained or already compromised.
Staff use the business network. Visitors use an internet-only guest network. CCTV and other connected equipment can have their own controlled area, with access allowed only where it is needed. Separation reduces exposure; it does not replace device security or updates.
What matters in practice
Start with what your business needs, then choose the equipment and settings to support it.
The name you choose from a phone’s Wi-Fi list is called an SSID. Creating a second name does not automatically create a security boundary. The router, access points and switches need to support and enforce the intended separation.
A VLAN is a way to divide one physical network into separate logical areas. Firewall rules control communication between them. Guest access should normally be blocked from internal systems, including equipment management pages, with any genuine exceptions deliberately agreed.
Visitors still share your internet capacity. Sensible speed limits can help protect business calls and applications. Client isolation can also stop guest devices communicating directly with one another where the equipment supports it.
An everyday example
They can browse the web and check their email. They cannot reach your office file share or open your CCTV recorder’s management screen. Staff still reach the resources they need. That is the practical result to aim for, and it should be tested from a device actually connected to the guest Wi-Fi.
Your quick checklist
You do not need all the technical answers yourself. These questions give you a useful starting point for a conversation with your provider.
A practical next step
Selected Cyber can help review your current setup and shape a practical approach around your premises, priorities and budget.