The problem
A 30-person law firm was struggling with constant Wi-Fi issues:
- Dead zones in conference rooms and remote offices
- Frequent disconnects during client video calls
- Security risk: Guests connected to the same network as internal systems
- IT support overload: 15+ Wi-Fi-related tickets per month
Their existing setup was a hodgepodge of consumer-grade routers and range extenders: fast enough when it worked, but unreliable and insecure.
The challenge
The firm needed:
- 100% coverage across 3 floors and 8 offices
- Secure segmentation: Guest network isolated from internal systems
- Zero disruption: Deployment during business hours without downtime
- Future-proof: Scalable as they grow to 50+ people
And they needed it done fast. Client complaints were mounting.
Our approach
Week 1: Site survey & design
- Wi-Fi heat mapping: Identified dead zones and interference sources
- Network redesign: VLAN segmentation (internal, guest, IoT/printers)
- Hardware selection: Ubiquiti UniFi controller-based Wi-Fi (3 APs)
- QoS policies: Prioritize VoIP and video calls over file transfers
Week 2: Implementation & testing
- Firewall upgrade: Replaced consumer router with pfSense firewall
- AP installation: Mounted 3 UniFi APs with proper PoE cabling
- VLAN configuration: Internal, guest, and IoT networks segregated
- Testing & optimization: Real-world coverage tests in all offices and conference rooms
- User training: Quick guide on connecting to the new Wi-Fi (internal vs. guest)
The results
Connectivity
- 100% coverage: No more dead zones. Signal strength > -65 dBm everywhere
- Zero dropped calls: Video conferences no longer interrupted
- Faster speeds: 300 Mbps+ on all devices (was 50-100 Mbps with range extenders)
Security
- Guest network isolation: Clients can’t see internal systems
- IoT segmentation: Printers and smart devices on separate VLAN
- Firewall rules: Geo-blocking and threat prevention enabled
Operational impact
- 35% fewer IT tickets: From 45/month to 29/month (mostly password resets now)
- Faster onboarding: New hires connect in < 5 minutes (was 30+ with old setup)
- Remote management: We can troubleshoot and update APs remotely (no onsite visits)
Tech stack
- Firewall: pfSense (open-source, enterprise-grade)
- Wi-Fi: Ubiquiti UniFi (3x UAP-AC-Pro access points)
- Controller: UniFi Controller (cloud-hosted for remote management)
- VLANs: Internal (staff), Guest (clients), IoT (printers/devices)
- QoS: Prioritized traffic classes (VoIP > web > file transfers)
Client feedback
“We went from constant Wi-Fi complaints to zero issues in 2 weeks. Our video calls don’t drop anymore, and we can finally use the conference rooms without worrying about connectivity. Best IT investment we’ve made.”
Managing Partner
Timeline
- Week 1: Site survey, design, hardware procurement
- Week 2: Installation, configuration, testing, handover
Total: 2 weeks from kick-off to go-live, with zero disruption to daily operations.
What we delivered
- Network map and VLAN design
- 3x UniFi access points (professionally mounted)
- pfSense firewall with threat prevention
- Guest network with captive portal
- QoS policies for video/VoIP
- Remote management dashboard
- Config backups and runbooks
- 30 days post-launch support
Key takeaways
- Consumer-grade Wi-Fi doesn’t scale: Range extenders create more problems than they solve
- VLANs are essential: Guest and internal networks should never mix
- Controller-based Wi-Fi is a game-changer: Centralized management, seamless roaming, real-time monitoring
- QoS matters: Prioritizing video calls and VoIP prevents dropped connections
- Fast deployment is possible: With proper planning, you can go from chaos to rock-solid in 2 weeks
Next steps
After the initial deployment, the firm signed up for our IT Services retainer (€1,200/month) for:
- Monthly network monitoring and optimization
- Helpdesk support (email, phone, remote)
- Quarterly onsite visits for hardware checks