Security Setup for a New Office

Moving into a new office gives you a rare chance to design security properly rather than patching an old network. Building security in from the start is easier and cheaper than retrofitting it later.

Start with a firewall

A business-grade firewall should protect the internet edge, with policies that allow only necessary traffic and inspect for threats.

Segment the network

Create separate VLANs for staff, guests, CCTV, payment devices and IoT. Control what can communicate between segments.

Secure Wi-Fi

Use WPA3 or WPA2-Enterprise for staff networks, with individual credentials where possible. Keep guest Wi-Fi isolated from internal systems.

Physical security of network equipment

Lock racks and network rooms, and limit access to authorised people. Unused network ports should be disabled.

Protective DNS

DNS filtering blocks malicious and phishing domains for every device on the network.

Access control and CCTV

Integrate door access and cameras on their own network segment and keep their software updated.

Remote access

Set up VPN or zero-trust access with multi-factor authentication before staff start working remotely.

Backups

Ensure important data is backed up off site, especially during the move when equipment is transported.

Policies and training

Brief staff on Wi-Fi use, guest access, password practices and phishing awareness as part of the move.

Document everything

Record network design, credentials management, policies and contacts.

The bottom line

Designing security into a new office creates a strong foundation for years. UbiFi can plan connectivity and security together for your move.

Learn more about Business Preconnect from UbiFi, or talk to our team.