Short answer: a good business Wi-Fi network has business-grade access points placed by a site survey (roughly one per 1,500 to 2,500 square feet of open office, more for brick, cinder-block and metal buildings), a separate guest network that cannot see your computers or printers, point-of-sale or medical devices on their own segment, WPA3 or at least WPA2 with a long passphrase, and enough internet bandwidth that the Wi-Fi is not the bottleneck. The consumer router from the internet provider gives you none of that.
First published in 2018, rewritten October 2026 with current standards and the segmentation requirements that now apply to card payments.
| Key facts | |
|---|---|
| Access point coverage, typical office | About one per 1,500 to 2,500 sq ft; walls, metal and crowds reduce it |
| Current standards | Wi-Fi 6 (802.11ax) is the baseline; Wi-Fi 6E and 7 add the 6 GHz band for dense spaces |
| Encryption | WPA3 where devices support it; never open or WEP; WPA2 with a 14+ character passphrase at minimum |
| Guest Wi-Fi | Separate SSID on its own VLAN with client isolation; no access to internal devices |
| Card payments | PCI DSS puts any wireless network that carries or can reach cardholder data in scope; keep point-of-sale segmented from guest and staff Wi-Fi |
| Lifespan | Replace access points every 5 to 7 years; firmware updates throughout |
Why is the router from the ISP not enough?
It is one radio in one corner, with consumer firmware that stops getting security updates after a couple of years, and a single flat network on which the guest in the waiting room, the front-desk PC and the printer are all neighbours. It works for a two-person office. It fails as soon as there are walls, a dozen devices or a credit card terminal.
How many access points do we need?
It depends on the building more than the headcount. An open-plan office of 3,000 square feet with drywall usually needs two access points. The same square footage in a brick mill building in Westbrook or a cinder-block garage in Scarborough may need four, because the materials absorb the signal. Dense spaces (a conference room with 40 laptops, a waiting room full of phones) need their own access point regardless of area. The honest answer comes from a site survey with a signal meter, which takes an hour and prevents the “dead spot by the copier” complaint forever.
What are the four questions that decide the design?
Stability: how bad is it if the Wi-Fi drops? For a retail counter or a clinic, very. Use business-grade access points with central management, power them over Ethernet from a switch on a UPS, and have a second internet path (cellular failover on the firewall is the cheap version).
Security: what travels over it? Anything with customer data, payments or patient records needs WPA3 or WPA2-Enterprise, a separate guest network, and segmentation so a compromised phone on the guest Wi-Fi cannot reach the server. For card payments the PCI Data Security Standard treats any wireless network connected to the cardholder environment as in scope, which is why point-of-sale belongs on its own VLAN with the guest network walled off.
Redundancy: who depends on it? If you rent a conference room or run a point-of-sale over wireless, overlap coverage so one failed access point does not take a room down, and keep a wired drop for the register.
Speed: how many people at once? Five users and fifty are different networks. Wi-Fi 6 handles many simultaneous devices far better than older gear, but no access point can hand out bandwidth the internet circuit does not have. Size the circuit first.
What does “guest Wi-Fi” actually require?
- Its own network name and password, changed when staff leave if it was ever shared internally
- Its own VLAN, with the firewall blocking it from every internal address
- Client isolation, so guests cannot see each other’s devices
- A bandwidth cap so a guest’s video stream does not slow the office
- Optionally a splash page with terms of use
Should we buy Wi-Fi 6, 6E or 7?
Wi-Fi 6 for most offices: it is mature, affordable and handles device density well. Wi-Fi 6E or 7 if you have a dense environment or newer laptops that can use the 6 GHz band, and a budget that allows it. Whatever you choose, buy from one business line (Ubiquiti, Cisco Meraki, Aruba, Fortinet and others) so every access point is managed from one console and updated together.
What goes wrong most often?
- Access points placed where the cable was easy to run, not where the people are.
- Guest and staff on the same network “temporarily”, for years.
- A password printed on the wall that was also the admin password.
- Firmware never updated after installation.
- A gigabit internet plan feeding a 100-megabit switch.
Frequently asked questions
What does business Wi-Fi cost?
Business access points run a few hundred dollars each installed; a small office with two or three, a managed switch and the design work is usually a low four-figure project. Cabling for the access points is extra if drops do not exist.
Can we keep using the ISP router?
As a modem only, with its Wi-Fi turned off and a business firewall behind it. Not as the network.
Do we need a site survey for a small office?
For one open room, no. For anything with multiple rooms, floors, brick or metal, yes; it is an hour and it decides the access point count.
How often should Wi-Fi be replaced?
Every five to seven years, or when the vendor stops issuing security updates, whichever comes first.
Sources
- PCI Security Standards Council, PCI DSS v4.0.1, Requirement 1 (network security controls) and wireless scoping guidance: pcisecuritystandards.org
- Wi-Fi Alliance, Wi-Fi 6 / 6E / 7 and WPA3 program pages: wi-fi.org
Cite this page: “Business Wi-Fi Done Right: How to Design a Wireless Network for a Maine Office, Shop or Clinic”, Information Systems of Maine, Portland, ME, updated October 2026.
Dead spots, dropped connections or a guest network that can see the server? Request IT help or call 207-653-4143. We design and install wireless networks across Greater Portland and Southern Maine as part of technology consulting and managed IT.
