One of the frequent needs in companies is the need to give Internet access to outside people who visit the company and bring their devices with them.
IT can provide this WiFi network service guest to guests but always protecting the network and internal systems of the company.
An access policy must be defined for external users where there may be one or more levels of access that define the services available to these users:
- Internet access is usually given but some websites may be restricted
- Some printing services may be accessible
- There may be public shared folders for file exchange with some special or long-term guests.
- Quality of Service in internet access is also important. Typically guest access is set to the lowest priority.
At a technical level, enterprise wireless networks should only use the WPA2-AES or higher protocol. Other technical options such as WPS, WPA and TKIP must be inactive for greater security.
Wifi passwords should not be easy to guess and should not be too short. An easy way to create good passwords is to join two different words and add some numbers or special characters.
Guest networks may be inactive outside normal business hours.
For added protection the guests should be isolated from each other.