Network Security
Best Practices for Securing a Public WiFi Network
Use this guide as a practical framework, then adapt each step to your network, customers and operating policies.
01
Isolate hotspot clients from each other
Enable client isolation (or a per-user VLAN) so one customer's device cannot see or scan another customer's device on the same hotspot — without this, a public network becomes an easy target for local attacks.
02
Keep RouterOS and firmware updated
Outdated RouterOS versions carry known, publicly documented vulnerabilities. Schedule updates during low-traffic hours and always keep a configuration backup before upgrading, so a bad update can be rolled back quickly.
03
Limit what the router itself exposes
Restrict router management (Winbox, API, SSH) to your VPN/management IP only, disable unused services, and never allow the hotspot login page to also serve as a path into router configuration.
Need help applying this to your ISP?
Talk to the SiscoHotspot team about your routers, packages and payment workflow.
Contact the Team