The small office network checklist

Most office network problems, like slow Wi-Fi, random disconnections and "the internet is down again", come from a handful of avoidable gaps. Use this checklist to review your current setup or plan a new office.

1. Internet connectivity

• Two internet links from different providers, ideally over different technologies (for example fibre plus 4G/5G or microwave), so one outage doesn't stop the business.
• Automatic failover on your router or firewall, so traffic switches to the backup link without anyone touching anything.
• Know your contracted speeds and check them periodically.

2. Firewall and router

• Use a business-grade firewall or router, not the ISP's basic modem, as the heart of your network.
• Change all default passwords and disable remote admin from the internet unless it's secured.
• Keep firmware up to date, and turn on security features such as web filtering and intrusion prevention where your device supports them.
• Use a VPN for staff who need secure access to office systems from outside.

3. Switches and network segmentation

• Use managed switches so you can monitor ports and create VLANs.
• Separate traffic with VLANs: staff, guests, CCTV, IP phones and servers or management. A guest's phone should never see your accounting PC.
• Check the switch's PoE budget if it powers cameras, access points or phones.

4. Wi-Fi

• Use ceiling-mounted business access points with central management, rather than one router in a corner.
• Plan coverage with a site survey. Walls, glass and metal partitions change everything.
• Use WPA3 or WPA2 security with strong passphrases, or WPA2/WPA3-Enterprise with individual logins for larger teams.
• Put guest Wi-Fi on its own isolated network, with a separate password you can change regularly.

5. Cabling and the network cabinet

• Cat6 cabling for new installations, terminated on a patch panel.
• Label both ends of every cable, and keep the cabinet tidy and ventilated.
• Wire desks and access points where possible. Wired is faster and more reliable than Wi-Fi.

6. Power protection

• Put the modem, firewall, switches and access points on a UPS, so a power cut doesn't drop the whole network.
• Use surge protection and proper earthing for the cabinet. See our UPS sizing guide.

7. Security basics

• Turn on multi-factor authentication for email, admin portals and remote access.
• Run endpoint protection on all computers and keep operating systems updated.
• Give staff only the access they need, and remove access promptly when people leave.
• Store admin passwords in a password manager, not on paper or in spreadsheets.

8. Backups

Follow the 3-2-1 rule: three copies of important data, on two different types of storage, with one copy off-site or in the cloud. Then test a restore. A backup you've never restored is only a hope.

9. Documentation and monitoring

• Keep a simple network diagram, an IP address plan, a list of devices with serial numbers and warranty dates, and ISP contacts.
• Set up monitoring or alerts so you know about failures before staff do.