CASE STUDY
Solstrålen kindergarten — tablets without limits and Wi-Fi that never reached the playground
A kindergarten using tablets every day, but with infrastructure never built for it. Here is how we built four isolated zones, set up content filtering for the children and delivered full coverage both indoors and outdoors.
The situation
Solstrålen kindergarten had tablets and learning apps as a natural part of everyday life, but the infrastructure was never built for it. There was no Wi-Fi coverage in the gym hall and nothing outdoors — where the children spend most of the day.
Every device — the children's tablets, the administration's computers, teaching equipment and the staff's phones — sat on the same unsegmented network, with no filtering and no overview. A child with a tablet was in principle on the same network as the payroll system and administrative documents.
What we found
- All devices on one network — children, staff and administration unsegmented
- No content filtering — the tablets could reach anything on the internet without limits
- No overview of connected devices or traffic
- Close to zero coverage in the gym hall and outdoors
- An old access point in the corridor — covering only part of the indoor area
- Personal data about children and guardians reachable from the same network as uncontrolled devices
Kindergartens process personal data about minors — some of the most sensitive data there is under GDPR. An unsegmented network is not only a technical problem, it is a legal responsibility.
The solution
We started with a full site survey of the building and the outdoor area before placing a single access point. Then we split the network into four isolated segments, each with a clearly defined purpose:
Four isolated zones
Administration
Management, payroll system and sensitive documents. Authorised staff only.
Teaching network
Tablets and learning material. Strictly content filtered and isolated from administration.
Staff
The employees' private devices, with no access to administrative systems.
Guest
Guardians and visitors, fully isolated from everything else.
Content filtering and coverage
On the teaching network we set up content filtering where the kindergarten itself defines which categories and sites should be available. Everything else is blocked automatically. The solution is simple to administer without a technical background.
Weather-resistant access points were mounted on the wall facing the playground, and a dedicated ceiling-mounted access point covers the entire gym hall. All access points are powered over PoE and cabled back to a clean, labelled rack.
The result
We did not really know what we were missing until it was in place. The tablets now work out on the playground, we no longer worry about what the children might tap on, and our IT systems are separated from the rest. It feels much safer.