Knowledge Hub · Connectivity

Can guests on FirstNet Managed Guest Wi-Fi reach our internal business network?

Managed Guest Wi-Fi · Answered by FirstNet Technology Services

Short answer

No. FirstNet Managed Guest Wi-Fi runs guest access on a dedicated guest SSID or VLAN, so guests only reach the internet and stay separate from your business systems. If you do not have a guest network today, FirstNet helps you plan one.

In detail

How the separation works:

  • Dedicated network: guests connect to their own SSID (Wi-Fi network name) or VLAN, kept apart from business systems such as staff devices and point-of-sale.
  • Your side: you provide access to your Wi-Fi controller settings and a guest SSID or VLAN, and approve the terms and privacy wording.
  • FirstNet's side: captive portal design, login configuration, site set-up, reporting access, change control and ongoing support.
  • Content filtering: the optional Purple Shield add-on filters guest content.

Separation is the foundation for both security and privacy. Guests log in through a branded captive portal using consent-based login aligned to POPIA and GDPR, and your organisation remains the data controller for the guest dataset.

The service runs on the Purple platform, which is ISO 9001 and ISO 27001 certified, with annual third-party audits and ongoing vulnerability and penetration testing. Bandwidth and session limits can also be applied to guest traffic, depending on your Wi-Fi and network policy controls.

Source: FirstNet Managed Guest Wi-Fi service page →

Didn’t answer your question?

Call