It differs from a home wireless router in how access is controlled and separated, and in how coverage is planned before access points are installed.
Short answer
You describe your needs once: your request is reviewed by the Courtier TI team, then entrusted to the IT services company that will prepare your quote.
What the quote should cover
- The coverage survey done or planned, and its findings
- The number, model and placement of the proposed access points
- The planned networks and how they are separated
- The authentication method and security protocol
- The cabling required and management after installation
What a business Wi-Fi project involves
- A coverage survey: floor plans, walls and materials, areas to cover, number of people per area.
- Design: number and placement of access points, cabling to each access point and power.
- Separating networks: one SSID per use (staff, guests, connected devices), each on its own VLAN, as the Canadian Centre for Cyber Security recommends.
- Authentication: WPA3 for a new deployment where the equipment supports it, in Enterprise mode with a RADIUS server connected to the user directory.
- Installation and configuration, replacing the default settings.
- A post-installation coverage reading to confirm the signal in each area.
- Management: firmware updates for access points and the controller, monitoring and adding users.
Questions to ask yourself before requesting a quote
- How many people and devices connect at the same time, and for what: video calls, online software, file transfers?
- Which areas must be covered: offices, meeting rooms, warehouse, production floor, outdoors?
- Do you offer Wi-Fi to visitors or clients?
- Do you have wireless printers, cameras, phones or connected devices?
- Can the existing cabling serve new access points?
- Do you have a user directory, such as Active Directory or a cloud directory service, for authentication?
Risks and pitfalls to avoid
- One passphrase shared by all staff. The Canadian Centre for Cyber Security does not recommend pre-shared keys (PSK) for business use, as they do not authenticate individual users.
- A guest network connected to the internal network. The Centre recommends never connecting Wi-Fi offered to visitors to internal networks or resources such as printers or audiovisual systems.
- Default settings left in place. The Centre cites known passwords, traffic allowed between SSIDs or VLANs, and client isolation turned off on access points.
- Access points installed by employees. The Centre notes that these unmanaged access points may be configured insecurely and let unauthorized third parties into the network.
- Relying on wireless alone. The Centre points out that a simple jammer can disrupt Wi-Fi and that corporate networks should not rely solely on it.
- Unpatched firmware. The Centre recommends a patching policy that includes access points and controllers.
What to specify in your request
- The address, floor plans, number of floors and areas to cover
- The approximate number of users and devices connected at the same time
- The main uses of the network
- The networks to plan: staff, guests, connected devices
- The authentication method you want and the directory in place
- The state of the cabling and where the network room or cabinet is
- Existing equipment to keep or replace
- The management expected after installation: updates, monitoring, support
You can then describe your project: the team will contact you to clarify your needs and send you a quote.
Frequently asked questions
WPA2 or WPA3: which should we choose?
The Canadian Centre for Cyber Security baseline controls call for WPA2 or newer, preferably Enterprise. For new deployments, the Centre's Wi-Fi security publication recommends WPA3 where available. Ask for the quote to state the planned protocol and whether the proposed access points support WPA3.
What is Enterprise mode?
Instead of one shared passphrase, each person or device authenticates with its own credentials or a certificate, checked by a RADIUS server. According to the Canadian Centre for Cyber Security, using TLS certificates with EAP is the most secure practice, and it lets you disable a single device's access.
How do we secure the guest network?
The Canadian Centre for Cyber Security recommends separating guest access with a restricted VLAN, turning on client isolation and limiting how long the guest password can be used, for example with guest passes. It also suggests considering a separate Internet subscription for guests and connected devices, and using WPA2 or WPA3 on the guest network.
Where should printers and connected devices go?
The Canadian Centre for Cyber Security notes that these devices may not support enterprise authentication. It recommends placing them on a separate, secure network that is isolated from the employee and guest networks and locked down with a very strong password.
Why a coverage survey before installation?
Because walls, materials, layout and the number of people per area change how the signal travels. The survey supports the number and placement of access points proposed in the quote and plans the cabling needed.