I have a company-issued laptop with some corporate spyware installed. I'm not actually required to use it for development, so I don't use it. But I have to switch it on from time to time or else I get a nice email from IT.
Anyway whenever I switch it on my wifi goes to shit. Apparently it does some SSID scanning every 5 seconds and then keeps sending the scan result to the "mothership". So I switch it on once or twice a week for an hour or so to do its spying thing.
probably something like "hey, it looks like updates haven't been installed on your corporate laptop in the last three months. Please fix that or we're going to ban it from our systems."
My company "allows" USB sticks but they will encrypt any files on it with key tied to that machine. Had a tech updated a config file when after this was silently rolled out and poof line down for the day as it couldnt be used to reimage systems on the embedded pcs.
That's what I do, although with OpnSense, but that's that easy part. Also, a cheap managed switch works well enough for this purpose.
The main issue I had was that most "consumer" access points don't support multiple SSIDs with separate VLANs. In the end, I went with a Netgear WAX something that can support 4 SSIDs, each with a dedicated VLAN (+ a separate management VLAN). But it's more expensive than "normal" APs with similar performance.
Anyway whenever I switch it on my wifi goes to shit. Apparently it does some SSID scanning every 5 seconds and then keeps sending the scan result to the "mothership". So I switch it on once or twice a week for an hour or so to do its spying thing.