ipfour
Business visitors using guest Wi-Fi on laptops and mobile devices in a modern office reception area
Wireless Infrastructure

Keep visitors connected. Keep your data protected.

Properly isolated guest networks and controlled BYOD access for UK businesses. Visitors get the connectivity they need, your corporate network stays completely separate.

Full Network Isolation
Branded Guest Portal
BYOD Policy Enforcement
100%
network isolation between guest and corporate traffic on every deployment
0
guest network breaches on any deployment where we designed the isolation architecture
5 min
typical time for a visitor to connect to a properly configured guest network
Capabilities

Controlled access for every type of visitor and device.

From branded guest portals to certificate-based BYOD onboarding, we design and deploy network access solutions that balance usability with security.

Isolated Guest Network

A completely separate guest SSID mapped to an isolated VLAN with no access to your internal network. Visitors get internet connectivity, your business data stays protected. Configured as standard on every wireless deployment.

VLAN IsolationInternet OnlyNo Internal Access

Captive Portal and Splash Pages

Branded captive portal requiring guests to accept terms of use before connecting. Options include email registration, social login, voucher codes, and time-limited access. Your brand, your rules.

Branded PortalTerms AcceptanceTime-Limited Access

BYOD Device Onboarding

Automated onboarding for employee personal devices. Certificate-based authentication ensures only approved devices connect to the corporate network. No IT involvement required for each new device.

Certificate AuthAutomated OnboardingSelf-Service

BYOD Policy Enforcement

Network access policies applied based on device type, ownership, and compliance status. Personal devices can be restricted to specific applications or network segments while corporate devices get full access.

Policy EnforcementDevice ClassificationAccess Control

Guest Usage Monitoring

Visibility of guest network usage including connected devices, bandwidth consumption, and session duration. Bandwidth limits applied to prevent guests impacting business traffic. Usage logs retained for compliance.

Usage MonitoringBandwidth LimitsCompliance Logging

Network Access Control Integration

Integration with NAC solutions to enforce device compliance before network access is granted. Unmanaged or non-compliant devices automatically redirected to a restricted network or blocked entirely.

NAC IntegrationCompliance ChecksAutomated Enforcement
How It Works

From policy to portal in a single engagement.

01

Requirements and Policy Review

We review your guest access requirements, BYOD policy, and compliance obligations. Who needs access, what they can reach, and how access is controlled are all agreed before design begins.

02

Network Segmentation Design

VLAN architecture designed to isolate guest, BYOD, corporate, and IoT traffic. Firewall rules specified to enforce the isolation. No traffic crossing segment boundaries without explicit policy.

03

Captive Portal Configuration

Guest portal configured with your branding, terms of use, and authentication method. Voucher codes, email registration, or social login configured based on your preference.

04

BYOD Onboarding Setup

Certificate authority configured and device onboarding portal set up. Employees can self-enrol personal devices without IT involvement. Compliance policies applied automatically on connection.

05

Testing and Validation

Guest and BYOD networks tested to confirm isolation is working correctly. Penetration testing of the guest network boundary available. Bandwidth limits and usage monitoring verified.

06

Documentation and Training

Network architecture documented and handed over. IT team trained on managing guest access and BYOD onboarding. Ongoing management available as a managed service.

Real Results

Guest and BYOD solutions across the UK.

Professional Services Firm

A Leeds accountancy firm needed a guest network for client meetings and a BYOD solution for staff who wanted to use personal iPads for work, without compromising client data security.

Branded guest portal deployed with time-limited access. BYOD onboarding configured for 45 staff devices. Full isolation confirmed. No IT tickets raised for guest or BYOD access in 12 months.

Hotel and Hospitality

A Lancashire hotel needed guest Wi-Fi across 80 rooms and public areas, with bandwidth management to prevent individual guests impacting others, and usage logging for compliance.

Per-room and per-device bandwidth limits configured. Branded splash page deployed. Usage logs retained for 12 months. Guest satisfaction scores for Wi-Fi improved from 3.2 to 4.7 out of 5.

Manufacturing Facility

A Birmingham manufacturer needed to give contractors and visitors Wi-Fi access during site visits without exposing their production network or intellectual property.

Contractor network deployed with internet-only access and mandatory terms acceptance. Production network completely isolated. Zero incidents of unauthorised access in 18 months of operation.

Secure Guest Access

Give visitors the access they need without the security risk.

Tell us about your guest access and BYOD requirements and we will design a solution that keeps visitors connected and your corporate network completely protected.