Skip to main content
SummitDNC

Managed IT

Network Assessment Checklist for Small & Medium Businesses

Summit DNC EngineeringSeptember 16, 202510 min read

A network assessment identifies problems before they cause outages and reveals opportunities to improve performance, security, and reliability. Use this checklist to evaluate your SMB network.

Infrastructure Inventory:

- [ ] Document all network switches (model, port count, PoE budget, firmware version) - [ ] Document all routers and firewalls (model, firmware, rule count) - [ ] Document all wireless access points (model, band support, client count) - [ ] Document ISP connections (provider, speed, SLA, contract expiration) - [ ] Map physical topology (what connects to what, cable types, patch panel assignments) - [ ] Record UPS systems (capacity, battery age, load percentage)

Network Performance:

- [ ] Test internet speed at multiple points (speed test from switch, from Wi-Fi, from remote office) - [ ] Measure internal network throughput between key systems (file server, database, backup target) - [ ] Check switch port utilization — any ports running at 100Mbps or experiencing errors? - [ ] Verify PoE budget — are switches running near PoE capacity? - [ ] Check wireless coverage — walk test with a Wi-Fi analyzer on every floor - [ ] Identify dead zones, weak signal areas, and channel interference - [ ] Review bandwidth utilization trends — are you approaching ISP capacity?

Network Security:

- [ ] Verify firewall firmware is current (check vendor CVE advisories) - [ ] Review firewall rules — remove rules that reference decommissioned systems - [ ] Check for default credentials on switches, APs, and firewalls - [ ] Verify VPN configuration — is split tunneling enabled when it shouldn't be? - [ ] Test that guest Wi-Fi is isolated from internal networks (can guests reach file shares?) - [ ] Verify 802.1X or MAC filtering is enabled on wired ports - [ ] Check for rogue wireless APs (personal hotspots, unauthorized repeaters) - [ ] Verify DNS filtering or web content filtering is in place - [ ] Check that unused switch ports are disabled

Wireless Assessment:

- [ ] Verify all APs are running current firmware - [ ] Check channel assignments — are APs on the same channel causing co-channel interference? - [ ] Verify transmit power settings — are APs overpowered causing roaming issues? - [ ] Test client roaming between APs — do devices switch smoothly? - [ ] Check client band steering — are 2.4GHz-capable devices connecting to 5/6GHz when possible? - [ ] Verify WPA3 or WPA2-Enterprise is in use (not WPA2-Personal for business networks) - [ ] Test wireless throughput at typical workstations

Cabling & Physical:

- [ ] Inspect patch panels for labeling accuracy - [ ] Check cable management — organized or spaghetti? - [ ] Test a sample of cable runs with a cable certifier (Cat5e? Cat6? Cat6A?) - [ ] Inspect cable pathways for code violations (bend radius, fill capacity, fire-stopping) - [ ] Check telecom room temperature (should be below 75°F / 24°C) - [ ] Verify telecom room access is restricted (locked, badge reader, or key)

Reliability & Redundancy:

- [ ] Check UPS battery health and load percentage - [ ] Test UPS — does equipment stay up during a brief power outage? - [ ] Verify ISP failover works (if dual ISP) — actually disconnect the primary and test - [ ] Check switch stacking or redundancy — what happens if the core switch fails? - [ ] Review backup power runtime — how long can critical systems run on UPS?

Documentation:

- [ ] Network diagram exists and is current - [ ] IP address assignment is documented (spreadsheet or IPAM) - [ ] VLAN assignments are documented - [ ] Firewall rules are documented with business justification - [ ] Wireless SSID list with purpose and VLAN assignment is documented - [ ] Vendor support contract information is accessible

Scoring Your Assessment:

- 40-50 checks passing: Excellent — maintain current practices - 30-39: Good — address gaps within 30 days - 20-29: Needs work — prioritize security and reliability items - Under 20: Critical — engage a professional for remediation

Summit DNC performs comprehensive network assessments for SMBs across Southern California. Our assessments include all 50+ checkpoints, detailed findings, and a prioritized remediation plan. Contact us to schedule a free assessment.

Network AssessmentSMBIT AuditChecklistNetwork Security
Share:

Need Help With Your Infrastructure Project?

Summit DNC designs and deploys the systems covered in this article. Contact us for a free consultation.

Licensed & Insured (C-7, C-10)BICSI Certified15-Year WarrantyBBB Accredited
Get a Free Quote