Your Building Has Great Wi-Fi. What Happens When Your Executives Aren’t Allowed to Use It?

There's an assumption we hear surprisingly often when discussing cellular coverage inside commercial buildings:

"They can just use Wi-Fi."

And in many situations, they can. Modern enterprise Wi-Fi can be fast, reliable, and properly secured.

But what happens when Wi-Fi isn't an option?

We've had clients come to us because their organizations are moving toward policies that restrict certain executives from using Wi-Fi on their phones - even while they're on their own corporate campus.

Their phones need to stay on the cellular network.

That changes the conversation around indoor connectivity pretty quickly.

A building can have excellent Wi-Fi coverage in every conference room, office and hallway, but if an executive's phone shows one bar of cellular service, great Wi-Fi doesn't solve their problem.

It also raises a broader question for IT and facilities leaders:

If someone couldn't use your Wi-Fi, could they still work reliably inside your building?

Why Would an Organization Limit Wi-Fi Use?

There are legitimate reasons a security team might establish different connectivity policies for certain employees, particularly executives and others handling sensitive information.

Public and untrusted Wi-Fi networks can introduce risks including malicious access points, spoofed networks, interception attempts and other wireless attacks. The National Security Agency's guidance on securing wireless devices advises users handling sensitive information to avoid public Wi-Fi when possible and identifies cellular connectivity as an alternative in certain circumstances.

Some organizations may choose to take a more restrictive approach for particular devices or users. Keeping an executive's phone on cellular could reduce the Wi-Fi networks that device interacts with, simplify certain security policies or provide greater separation from local networks.

Those are possible security rationales, not universal best practices. Every organization's cybersecurity strategy is different.

And there's an important distinction:

Restricting Wi-Fi use for certain devices does not mean properly secured enterprise Wi-Fi is inherently unsafe.

Organizations can use strong authentication, encryption, device management, network segmentation, monitoring and other controls to secure enterprise wireless networks. CISA's guidance on securing Wi-Fi networks discusses many of these protections.

Cellular networks have their own security considerations as well.

The takeaway isn't that cellular is "secure" and Wi-Fi is "insecure." Cybersecurity is much more complicated than choosing one wireless technology over another.

Zero Trust Doesn't Mean "No Wi-Fi"

The rise of zero trust security makes this distinction especially important.

Under the National Institute of Standards and Technology's Zero Trust Architecture, users and devices aren't automatically trusted simply because they're connected to a corporate network.

Access is evaluated based on identity, devices, resources, policies and other factors rather than assuming that being "inside the network" makes something trustworthy.

In other words, zero trust doesn't require abandoning Wi-Fi.

But organizations can still establish more restrictive policies for particular users or devices based on their own risk assessments.

And that's where a cybersecurity policy can suddenly become a building infrastructure problem.

Great Wi-Fi Doesn't Guarantee Great Connectivity

Consider what happens when an executive walks into a conference room.

The company's Wi-Fi signal is excellent.

Their phone's cellular signal is nearly nonexistent.

Normally, the answer might be simple: connect the phone to Wi-Fi.

But if corporate policy requires that device to remain on cellular, the Wi-Fi network is irrelevant. The phone is only as connected as the cellular network available inside that room.

And this issue extends well beyond executives.

Visitors may not have Wi-Fi credentials. Contractors may be operating on cellular devices. Customers aren't necessarily joining your corporate network. Employees may need reliable carrier connectivity. Certain connected devices may operate independently of the building's Wi-Fi altogether.

Reliable cellular coverage gives those users another connectivity path.

Unfortunately, some of the most modern buildings can also be remarkably effective at keeping outdoor cellular signals out.

Why Does Cell Service Get Worse Inside Buildings?

Your phone normally communicates with cellular infrastructure located outside the building.

Between that network and your phone may be concrete, steel, brick, interior walls, energy-efficient windows and multiple floors.

Those materials can weaken cellular signals as they travel indoors. AT&T's overview of distributed antenna systems and in-building connectivity notes that building materials including concrete and treated glass can interfere with wireless signals.

That's why stepping outside can sometimes turn one bar into four.

The cellular network outside may be working perfectly well.

The building itself can be the obstacle.

That's Where DAS Comes In

A Distributed Antenna System, or DAS, is one way organizations improve cellular coverage inside a building.

The easiest way to understand DAS is to think about providing audio throughout a large facility.

Instead of putting one enormous speaker outside and turning up the volume, you'd place smaller speakers throughout the building so people can hear consistently wherever they go.

A cellular DAS follows a similar principle.

Rather than relying entirely on an outdoor cellular signal to penetrate the building, a properly designed system distributes cellular signals through strategically placed antennas inside the facility.

The exact system can vary significantly depending on the building, carriers, available outdoor signal, capacity requirements and other factors. But the objective is straightforward:

Bring reliable carrier coverage to the places inside the building where people actually need it.

It's also important to understand what DAS doesn't do.

A DAS isn't a cybersecurity product. It doesn't provide end-to-end encryption, replace zero trust architecture or eliminate cellular security threats.

It provides the cellular infrastructure that allows devices to connect reliably indoors.

Wi-Fi and Cellular Aren't Either-Or Technologies

Businesses shouldn't have to choose between excellent Wi-Fi and excellent cellular coverage.

They solve overlapping but different connectivity needs.

Wi-Fi gives an organization tremendous control over its own wireless network and can deliver exceptional performance.

Cellular gives employees, executives, visitors, contractors, customers and connected devices access to carrier networks without requiring them to join the organization's Wi-Fi.

In a well-connected building, the two complement each other.

And the executive policies we're encountering are a good reminder of why that matters.

For years, poor cellular coverage inside a building could sometimes be dismissed with a simple answer:

"Just use the Wi-Fi."

But that answer assumes everyone can - and will - connect to it.

Increasingly, that's not an assumption every organization can make.

Your building may have fantastic Wi-Fi. But if cellular coverage disappears when someone walks through the front door, there's still a gap in your connectivity infrastructure.

So here's a question worth asking:

If someone couldn't use your Wi-Fi, could they still work reliably inside your building?

If you're not sure, Stiehl Communications can help evaluate the cellular coverage inside your facility, identify weak or underserved areas and determine whether an in-building cellular solution such as DAS makes sense.