Guest Wi-Fi that can see finance is not guest Wi-Fi
Cameras, visitors and the shop floor do not belong on the same VLAN as the accounting share.
ITSIGN Administrator · March 19, 2025 · 2 min read
Walk into a reception, join Guest, and traceroute. If you can ping a file server, the segmentation is a sticker on the SSID.
Split guest, cameras, voice, and corporate. Put a firewall between them, not just a VLAN name. Test it like an attacker would.
We design that under server and network management and prove it in penetration testing.
Related reading
Do you still need a perimeter firewall?
Yes, if you have an office. No, it is not your only control. Identity is the new edge, and both still matter.
2 min read
Site-to-site VPN mistakes we still walk into
Overlapping subnets, stale tunnels, and a second office that was never documented.
2 min read
Firewall change control that people will actually follow
If the process takes a week, someone will bypass it on a Friday. Make it short and recorded.
2 min read
Want this applied to your environment?
A short conversation, an honest assessment of your current setup, and a clear proposal. No obligation and no pressure.