A VLAN (Virtual Local Area Network) is a logical division of a physical network. A managed switch carries multiple VLANs on the same physical infrastructure, enforcing separation between them. Firewall rules between VLANs control what traffic, if any, is allowed to cross from one segment to another.

WiFi & Network Security Auckland | Business WiFi Installation NZ

Q: What is the difference between consumer and business WiFi?

Consumer WiFi is designed for a small number of devices in a home. Business WiFi uses enterprise access points with higher capacity, centralised management, VLAN support, traffic prioritisation, and proper security configuration. Business systems give you visibility over every device and the ability to control bandwidth and security per group.

Q: Why should security cameras be on a separate network?

IP cameras have a poor security track record. If a camera is compromised on the same network as your staff devices and file servers, an attacker has a foothold in your business. Placing cameras on a dedicated VLAN with firewall rules blocking outbound internet access means a compromised camera cannot reach anything else on your network.

Q: What is firewall configuration and do I need it?

A firewall controls which traffic passes between network segments and to/from the internet. Configuration sets specific rules for your environment. Without configuration, a firewall runs on permissive defaults that don't protect you. Any Auckland business with IP cameras, a server, or sensitive data should have a configured firewall.

Why consumer routers aren’t enough for business

The router your ISP provides or a $200 consumer device from a hardware store is designed for a household of four people streaming Netflix. It is not designed to simultaneously support 40 laptops, a dozen IP cameras, a VoIP phone system, smart office devices, and a guest network — all on the same hardware, all with different security requirements. It has no centralised management, no VLAN support, no traffic prioritisation, and no visibility into what’s consuming bandwidth or generating unusual traffic.

Comsys designs and installs business-grade networking using Ubiquiti UniFi, Cisco Meraki, and Ruckus platforms. These systems are designed to scale, to be centrally managed, and to be configured correctly for security — not left at factory defaults with the admin password on a sticker on the base.

Enterprise WiFi access points — Ubiquiti UniFi, Cisco Meraki, and Ruckus for full-coverage, high-density environments

Network cabinet & rack setup — structured rack installation with managed switches, patch panels, and proper cable management

VLAN configuration — separate logical networks for staff, cameras, IoT devices, guests, and management traffic

Firewall configuration — pfSense, UniFi Security Gateway, and Meraki MX rules to block unauthorised inter-VLAN traffic

Guest WiFi setup — isolated guest networks with bandwidth limits, portal pages, and session time limits

VPN setup — site-to-site and remote-access VPN for secure multi-site connectivity and working from home

Request a network assessment

Network security and segmentation

Network segmentation is the practice of dividing your network into separate zones so that a security problem in one zone cannot spread to others. It is one of the most important and most commonly skipped steps in small business networking in New Zealand. When your security cameras, your staff laptops, and your guest WiFi are all on the same network with no firewall rules between them, a compromised camera (and IP cameras do get compromised) has a direct path to your file server.

Comsys configures every business network with VLANs that separate cameras, IoT devices, staff devices, and guests. Firewall rules prevent traffic crossing VLAN boundaries except where explicitly permitted. Camera networks have no outbound internet access except to the NVR and your remote-viewing app. Guest WiFi is isolated from everything. Staff devices can reach the internet and your internal servers, but not the camera network or the management interface of your switches.

Network monitoring — continuous monitoring for unusual traffic, rogue devices, and bandwidth anomalies

Cybersecurity hardening — default password changes, unused port disabling, WPA3 encryption, management VLAN isolation, and firmware update policies

Multi-site networking — site-to-site VPN tunnels connecting multiple Auckland locations on a single secure network

Wireless site survey — RF site survey prior to access point placement to eliminate dead zones and channel interference

Network documentation — full IP addressing scheme, VLAN diagram, and device inventory provided on commissioning

Book a free network assessment

How many access points does my office need?

The answer depends on your floor plan, construction materials, device density, and what you’re doing on the network. As a general guide for Auckland office environments:

Small office (up to 15 people, open plan) — one to two access points, typically a Ubiquiti UniFi U6 Pro or similar, is usually sufficient for full coverage
Medium office (15–50 people, multiple rooms) — three to six access points positioned based on a site survey, with each AP handling a defined zone
Larger or multi-floor premises — a Wireless Site Survey is essential; high-density environments (conference rooms, open-plan with 80+ devices) need high-capacity APs and careful channel planning
Warehouses and large open spaces — directional APs mounted high on walls or ceiling beams, with careful attention to multipath interference from racking and metal shelving

Comsys carries out a physical site walk and, for larger deployments, a wireless site survey using RF planning software before recommending access point count and placement. This eliminates the common outcome of installing three APs and finding one corner of the building still has no coverage.

WiFi and network security FAQ

What is the difference between consumer and business WiFi?

Consumer WiFi routers are designed for a small number of devices in a domestic setting. Business WiFi uses enterprise access points with higher capacity radios, centralised management, VLAN support, traffic prioritisation (QoS), and proper security configuration. Business systems are designed to be managed — you can see every device on the network, control bandwidth per device or group, push firmware updates centrally, and receive alerts when something unusual happens. Consumer devices have none of these capabilities.

Why should security cameras be on a separate network?

IP cameras have a poor security track record. Many are manufactured with weak default credentials and firmware that receives infrequent security updates. If a camera is compromised on the same network as your staff laptops and file servers, the attacker has a foothold in your business network. Placing cameras on a dedicated VLAN with firewall rules blocking outbound internet access (except to your NVR and remote-viewing app) means a compromised camera cannot reach anything else of value on your network.

What is a VLAN?

A VLAN (Virtual Local Area Network) is a logical division of a physical network. Instead of running separate physical cables for each network segment, a managed switch carries multiple VLANs on the same physical infrastructure, with the switch enforcing separation. From each device’s perspective it is on its own network; from the infrastructure perspective it is one set of cables and switches carrying multiple isolated networks. Firewall rules between VLANs control what traffic, if any, is allowed to cross from one segment to another.

How many WiFi access points do I need for my office?

For a typical single-floor Auckland office of up to 20 people in an open plan space, one to two access points is usually sufficient. Larger offices, multi-floor buildings, or environments with high device density need three or more APs positioned based on a site survey. Comsys carries out a physical site walk before recommending access point count and placement to ensure full coverage without dead zones or inter-AP interference.

What is firewall configuration and do I need it?

A firewall is the network device that controls which traffic is allowed to pass between network segments and to and from the internet. Configuration is the process of setting specific rules for your environment — what is allowed, what is blocked, and what is logged. Without proper configuration, a firewall is running on default rules that are typically permissive rather than secure. Any Auckland business with IP cameras, a server, or sensitive data stored on-site should have a configured firewall. Comsys configures pfSense, UniFi Security Gateway, and Meraki MX devices as part of every network installation.

Related services

Good networking is the foundation that every other system depends on. Related Comsys services:

Structured cabling — Cat6 and fibre runs that give your access points and switches reliable, high-speed wired backhaul

Smart office automation — meeting room systems, occupancy sensors, and automated HVAC all running on your new network infrastructure

CCTV surveillance — IP cameras designed to run on your properly segmented camera VLAN

Server rack solutions — rack installation and cabling for your network hardware and NVR equipment

WiFi and network security installation for Auckland businesses