Enterprise WiFi: why yours drops and how to size it

“The WiFi works, but as soon as a meeting fills up, everything slows down.” It is the most frequent complaint we hear, and it almost always has the same cause: a network sized to cover, not to serve. The short answer: reliable enterprise WiFi is designed from the number of active devices per area and what they are used for, with managed enterprise access points, cabled over PoE Ethernet, and networks separated by VLAN. Here is how we size it, the mistakes we fix most often and the checklist to follow before buying a single access point.

Coverage and capacity are two different things

Coverage answers the question “does the signal reach here?”. Capacity answers another one: “how many devices can work properly here, at the same time?”. One access point can cover a whole floor and still fail to handle a training room where every participant connects a laptop and a phone.

The reason is simple: on a WiFi channel, devices take turns to talk. The more there are, the longer each waits, and a slow or distant device hogs airtime at the expense of the others. A more expensive access point does not change that rule; more access points, well placed on different channels, do.

In an office, the problem shows up at peak times: meetings, simultaneous video calls, the morning arrival. In a school, a hotel or a conference room, it is permanent. That is why we talk about high-density WiFi as soon as dozens of devices gather in the same space.

The mistakes we fix most often

• Consumer access points or “repeaters” that cut throughput at every hop and handle neither roaming nor VLANs.
• Power at maximum: access points interfere with each other, and devices stay stuck to a distant one instead of moving to the nearest.
• A single network for employees, guests, printers and cameras: a visitor ends up on the same network as the file server.
• No central management: every access point configured by hand, differently, and nobody notices when one goes down.
• Wide channels everywhere: on the 5 GHz band, wider channels raise the throughput of an isolated device but reduce the number of available channels, and therefore overall capacity in high density.
• An undersized switch: not enough PoE ports, or a power budget too tight for recent access points.
• Hidden access points above a metal false ceiling or in a cupboard, where the signal is attenuated most.

Coverage or capacity: what changes by space

Type of space	Main challenge	What we plan
Open space, offices	Video calls, cloud applications	Ceiling access points spread by area, fast roaming
Meeting or training room	Peaks of simultaneous connections	Dedicated access point in the room, narrow channels, reduced power
Warehouse, workshop	Distance, racking, dust	Ruggedised access points, suitable antennas, aisle coverage
Hotel, clinic	Seamless roaming, guests	WiFi telephony, isolated guest network with portal
School, training centre	Very high density, filtering	One access point per room, web filtering, profile-based management
Reception, public area	Unmanaged visitors	Rate-limited guest network, isolated from the internal network

The method, step by step

1. Site survey: floor plans, materials (concrete, glass, metal partitions), high-density areas, real usage (voice, video, office work, stock terminals), number of devices per area and per person.
2. Coverage study simulated on the floor plan, to place access points according to the capacity needed, not just range.
3. Channel and power plan: favour the 5 GHz band, and 6 GHz when access points and devices support it; keep 2.4 GHz for equipment that has no other option.
4. Separate networks by VLAN: staff, guests with a portal, devices (printers, cameras, IoT). The firewall filters traffic between them.
5. Appropriate authentication: WPA3 or WPA2-Enterprise with a directory (802.1X) for staff, rather than a shared password that has been circulating for years.
6. Managed enterprise access points (Fortinet, WatchGuard, Ubiquiti) with fast roaming, automatic channel management and a central console.
7. Cabling: every access point on PoE Ethernet, never a wireless bridge, on switches whose PoE budget covers every access point.
8. Real measurement after installation, with a walk-through survey, then continuous monitoring to spot a failed access point or a saturated area.

Roaming, the weak spot of larger sites

In a clinic, a hotel or a warehouse, users move around. A WiFi phone or a stock terminal must move from one access point to the next without dropping the call or the session. That requires access points from the same range, managed by the same controller, with fast roaming mechanisms enabled and enough overlap between coverage areas. Consumer access points, each working on its own, cannot do it: the device clings to a distant access point until the connection breaks.

WiFi telephony is also the most demanding use: it tolerates latency and loss poorly, as we explain in the 10 mistakes that ruin call quality.

WiFi within the network architecture

WiFi is only one end of the network. Behind the access points, the firewall must filter traffic between VLANs and to the internet without becoming a bottleneck: it is a sizing criterion covered in FortiGate for SMBs: which model to choose. The internet link matters too: a full room on video calls saturates a thin link whatever the WiFi, see business fibre in Morocco. Finally, an isolated guest network and segmented devices are a first practical application of Zero Trust for SMBs.

Special cases by sector

Clinics and hotels need seamless roaming for WiFi telephony and a guest network strictly isolated from the internal one. Factories and warehouses need ruggedised access points and coverage of storage areas, where metal racking absorbs the signal. Schools and training centres reach densities an office never sees, with peaks at the start of every class. In hospitality, WiFi quality is part of the guest experience.

Checklist before buying access points

• Number of active devices per area and per person, at peak times.
• Uses listed: voice, video, office work, business terminals, guests.
• Site floor plans and wall and ceiling materials.
• Coverage study done on the floor plan before ordering.
• VLANs defined: staff, guests, devices.
• Staff authentication method chosen.
• Switch PoE budget and port count checked.
• Central management console and monitoring planned.
• Acceptance measurement after installation written into the contract.

How we do it

We start with a site visit and a conversation with users to identify the problem areas and the times they saturate. We then run the coverage study, propose a plan for access points, cabling and VLANs, and quote hardware and licences transparently. After installation, we measure real coverage and add the access points to our 24/7 monitoring: a failed access point or a saturated area triggers an alert, and a critical incident is handled in under 15 minutes. Our case studies show comparable network projects.

All of this is part of our network infrastructure and WiFi service. If your WiFi drops during meetings or you are preparing an office move, start with the free initial audit: contact us, we reply within 24 business hours.