Why Is This So Hard?

This is probably one of the biggest issues I see when taking over from other MSPs both big and small.

Why is it that when I join the public Wi-Fi I can ping every computer and server in the building lol?

See normally I encounter businesses with one Wi-Fi and I understand how that doesn't translate to guests or customers being separate from the main network. Still not configured properly and still an issue, but I get it.

But today for example. Did a network assessment for a healthcare office. They literally had 2 separate ssids. One labeled private one labeled public.

They both connect you to the same subnet.

And I can ping every computer and server in the building from the public.

Like you went out of your way to make a separate public Wi-Fi but didn't actually make it separate.

My guess is they either had issues with the VLAN so they said screw it and put it on the main. But even then, this is a unifi system, you could literally just check the box for isolation of devices and leave them on the LAN but at least they wouldn't be able to talk to other LAN devices.

It's really sad that I see this so often. It's one of the first things I check when I walk in the door, I join the public or guest posted wifi and start pinging.

What's even worse is I looked up this MSP. They are up and down the entire East coast USA. They also were billing them for advanced antivirus and security on all the machines but sentinel one was only installed on two of them. Smh.