Can Company WiFi Track Visitor Websites?

Can Your Company WiFi See & Track What Websites Visitors Browse?

In today's digital workplace, many businesses offer WiFi access to both employees and visitors. But a common question arises: can your company WiFi actually see and track the websites people browse? The short answer is: it depends. Let's break this down in simple terms to help you understand what's possible and what you should consider.

What Can Company WiFi See?

When someone connects to your company WiFi, the network has the ability to see certain information about their online activity. Here's what a typical business WiFi network can and can't see:

What It CAN See:

• Domain Names: The WiFi network can see the domains (websites) being visited. For example, it can see that someone visited "example.com" but not necessarily the specific pages within that site.
• Connection Times: When someone connects, disconnects, and how long they spend online.
• Data Volume: How much data is being uploaded and downloaded.
• Device Information: The type of device connected (phone, laptop, etc.) and its MAC address.

What It CAN'T Easily See:

• Encrypted Content: Most modern websites use HTTPS encryption, which means the actual content being viewed (like specific pages, messages, or form data) is encrypted and not visible to the network.
• Personal Account Details: Passwords and personal account information are encrypted during transmission.

How Does This Work?

Think of it like this: your company WiFi is like a postal service. It can see the address on the envelope (the domain name), but it can't open the envelope to read the letter inside (the actual content). However, just knowing the addresses can reveal quite a bit about someone's browsing habits.

DNS-Level Monitoring

One of the most common ways companies monitor web traffic is through DNS (Domain Name System) monitoring. Every time someone types a web address, the DNS translates it into an IP address. By monitoring DNS requests, companies can see which websites are being accessed.

What About VPNs?

If someone uses a VPN (Virtual Private Network) on your company WiFi, this changes things significantly. A VPN encrypts all traffic between the device and the VPN server, making it much harder for the WiFi network to see what websites are being visited. The network would only see that a VPN connection is active, not the specific sites being browsed.

Legal and Ethical Considerations

Before implementing any monitoring on your business WiFi, there are important legal and ethical considerations:

• Data Protection: Under UK GDPR, you must be transparent about any monitoring. Users should be informed that their activity may be monitored.
• Legitimate Purpose: Monitoring should have a clear business purpose, such as network security or preventing misuse.
• Privacy Notices: Display clear notices informing users about monitoring when they connect to the WiFi.
• Proportionality: Any monitoring should be proportionate to the business need and not overly intrusive.

Best Practices for Businesses

If you're considering monitoring your business WiFi, here's what we recommend:

1. Implement a Clear WiFi Policy

Have a written policy that clearly states what monitoring takes place and why. This should be agreed to when users connect to the network.

2. Use a Captive Portal

Set up a login page that users must accept before accessing WiFi. This can include your terms of use and monitoring notice.

3. Separate Networks

Create separate WiFi networks for employees and guests. This allows you to apply different monitoring and security policies to each.

4. Focus on Security, Not Surveillance

Use monitoring primarily for network security purposes, such as detecting malware or preventing access to harmful websites, rather than tracking individual browsing habits.

5. Regular Reviews

Regularly review your monitoring practices to ensure they remain proportionate and comply with current regulations.

How Flotek Can Help

At Flotek Group, we help businesses set up secure, well-managed WiFi networks that balance security needs with user privacy. Our solutions include:

• Network Design: Creating separate, secure networks for different user groups.
• Content Filtering: Implementing appropriate web filtering to protect your network and users.
• Compliance Support: Helping you set up monitoring that complies with UK data protection laws.
• Security Monitoring: Focusing on threat detection rather than invasive browsing surveillance.

Want to know more about setting up secure WiFi for your business? Get in touch with our team and we'll help you find the right solution.

Further reading: Mesh WiFi Networks | WiFi Password Security

Discover how Flotek can help with our business internet services and data and fibre installation.