In many offices, Wi-Fi is now the most important access to the network. Notebooks, smartphones, printers, meeting room equipment, and increasingly also building technology sensors connect wirelessly. An enterprise Wi-Fi network differs from a home network less in its radio technology than in planning, central management, and a well-thought-out security concept.
If the wireless network is overloaded or fails, telephony, video conferences, and cloud applications grind to a halt. A poorly secured Wi-Fi network is also a convenient entry point into the internal network, because it reaches beyond the building's boundaries.
How an enterprise Wi-Fi network is structured
Several access points are distributed so that their radio cells overlap. As a result, devices switch from one access point to the next without interruption as people walk through the building (roaming). The access points are managed centrally via a controller, which is available as a dedicated device, as software, or as a cloud service. It distributes configurations, coordinates channels and transmit power, and reports disruptions.
Company devices usually sign in via WPA2 or WPA3 Enterprise. Instead of a shared password, each device or person authenticates individually according to the 802.1X standard against a RADIUS server, often with device certificates distributed, for example, via Microsoft Intune. Separate wireless networks (SSIDs) and VLANs keep company devices, guests, and devices such as printers or cameras apart, a basic principle of network segmentation.
Typical examples
- Meeting rooms where many people take part in video conferences at the same time and which are therefore planned by capacity rather than just by area.
- A guest Wi-Fi network with a sign-in page or daily codes that leads only to the internet and allows no access to internal systems.
- Warehouses and production halls with handheld scanners, where shelves, metal, and machines strongly affect radio propagation.
- Several branches that are configured and monitored uniformly from central management.
What companies should keep in mind
- Before installation, carry out a site survey or at least plan based on the floor plan, because walls, glass, and metal significantly change the range.
- Have company devices sign in individually via 802.1X instead of using a shared password, so that a disabled account or a revoked certificate no longer gets access.
- Consistently place guests, company devices, and IoT devices in separate networks.
- Keep the access points' firmware up to date and include the Wi-Fi network in IT monitoring.
- Plan capacity reserves for additional devices and newer standards such as Wi-Fi 6E or Wi-Fi 7.