Interactive explainer · Run

What a well-run small-office network looks like.

Most small offices do not need anything exotic. They need guest access kept apart from staff, laptops that are useless to a thief, accounts that need a second factor, and staff who only see the folders they need. Turn each control off to see what it was protecting.

Scenario

Choose what happens

A visitor joins the guest Wi-FiA staff laptop is stolenSomeone clicks a phishing link

A staff member enters their password on a fake login page. The attacker now has a password, and tries it against email and the office files.

Network map

Visitor device

Phone or laptop on guest Wi-Fi

Internet and cloud

Email and cloud accounts

Guest Wi-Fi

Isolated from staff devices

Staff laptop

Disk encrypted

Company file server
Office printer
Email and cloud account

Your controls

Guest Wi-Fi is isolatedGuest devices cannot see staff devices, printers or file shares.Laptop disks are encryptedFiles cannot be read off a stolen device without the login.MFA on email and cloud accountsA password alone is not enough to sign in.Staff see only the shares they needEach account can open the folders it needs, and nothing more.

What the attacker can reach

Contained

Company file server
Blocked
Blocked: MFA or limited share access
Office printer
Blocked
Not relevant to this scenario
Files on the laptop
Blocked
Not relevant to this scenario
Email and cloud account
Blocked
Blocked by MFA

A simplified model. It does not cover every attack, and MFA can still be phished, so use number matching and phishing-resistant methods where you can. Turn each control off to see what it was protecting.

What a well-run small-office network looks like.

Scenario

Network map

Your controls

What the attacker can reach

Related services