In short: BT business broadband security includes Web Threat Protect and Content Controls on every plan, though both are off until you activate them. Pro adds Wi-Fi Security Controls, McAfee-powered antivirus is an optional add-on, BT Business Ultra builds in a Cisco Meraki firewall, and BTnet customers can add BTnet Security.
Security included with every BT Business Broadband plan
Two protections come with BT Business Broadband at no extra charge:
- Web Threat Protect warns you about, and helps block, dangerous websites such as those spreading malware or phishing pages.
- Content Controls let you restrict the kinds of website people can reach on your connection, which is useful in shops, schools, surgeries and anywhere staff or visitors share the network.
The catch is that neither is switched on by default. BT says the account holder or an administrator has to activate them through the BT Business My Account portal. Many businesses never do, so the first thing we check for new customers is whether these settings are turned on.
Once activated, these controls work at network level, so they cover devices on the office network without installing anything on them. BT's terms note one condition: this network security only works if your devices use BT's own DNS (the service that looks up website addresses). If your IT provider has pointed devices or the router at a different DNS service, the BT filtering won't see that traffic. BT also says Web Threat Protect cannot guarantee to warn you about every malicious site.
They are a sensible baseline for any business, but they are not a firewall: they don't inspect traffic for intrusion attempts or give you a log of what each device is doing.
All plans also include free guest Wi-Fi that is kept separate from your business network, which stops visitors' devices sitting alongside your own. See BT business Wi-Fi for more.
Wi-Fi Security Controls on BT Business Pro
The Pro package adds Wi-Fi Security Controls, managed in the BT Business App with the BT Business Smart Hub 3. Instead of one set of rules for the whole connection, it lets you:
- see a list of every device connected to the hub
- pause, freeze or schedule internet access for individual devices or groups of devices
- filter websites by category or by individual web address, per device or per group
- protect devices and detect threats automatically
That is handy when, say, the reception PC needs tighter rules than the manager's laptop, or staff tablets should only be online during opening hours.
BT is clear about the limits. Wi-Fi Security Controls filters websites but cannot block mobile apps. And it replaces, rather than adds to, the network-level protection: when you switch Wi-Fi Security Controls on, BT's Broadband Network Security is disabled, so choose one approach deliberately. If you need app control, malware inspection or intrusion prevention, look at Ultra or a dedicated firewall. Compare all three tiers on the packages page.
BT Business Antivirus Protection by McAfee
BT Business Antivirus Protection, powered by McAfee, is an optional add-on that protects the computers and devices themselves rather than the connection. BT supplies it on a minimum 12-month term, after which it continues month to month unless you cancel.
Antivirus is worth having because broadband filtering only sees traffic on your office network. Laptops used at home, on public Wi-Fi or on an EE Business mobile hotspot are outside that protection, so device-level security still matters. For businesses that need more than antivirus, such as endpoint detection and response, see endpoint security and XDR on our cloud security site.
BT Business Ultra: a Cisco Meraki firewall built in
BT Business Ultra is the package BT calls its most secure business broadband. Instead of relying on the hub, it uses a Cisco Meraki router with a next-generation firewall, and adds:
- anti-malware protection
- content filtering across more than 70 website categories, applied from a default template, with custom categories or individual sites on request
- intrusion detection and prevention (IDS/IPS)
- a cloud dashboard for monitoring network performance
- automatic 4G backup on the EE Business mobile network if the line fails (4G coverage needed), up to three Meraki access points and Prompt Care
Like Wi-Fi Security Controls, Ultra's content filtering works on websites and cannot block apps, although it can restrict access to social media sites. Note that a static IP address is not available on Ultra. If you need one for VPNs or remote access, read about static IP options.
BTnet Security and BTnet Meraki for leased lines
On a BTnet dedicated leased line you have a choice. With BTnet wires only, you bring and manage your own firewall. With BTnet Meraki + BTnet Security, BT provides managed Cisco Meraki equipment with 24/7 proactive monitoring, and BTnet Security adds a layer 7 next-generation firewall, advanced malware protection, URL filtering, IDS/IPS and regular security patch updates. BT says BTnet Security is only available to BTnet customers who take the Cisco Meraki managed equipment option. Read the full detail on the BTnet Meraki page.
If you would rather run your own firewall behind BTnet or BT Business Broadband, our specialist sites cover Cisco Secure Firewall and Sophos Firewall.
Comparing BT's security options
| Layer | Where it comes from | What it protects |
|---|---|---|
| Web Threat Protect | All BT Business Broadband plans (activate it) | Browsing on your office connection |
| Content Controls | All BT Business Broadband plans (activate it) | Which website categories can be reached |
| Wi-Fi Security Controls | BT Business Pro | Website filtering for individual devices |
| BT Business Antivirus Protection | Add-on, 12-month minimum term | The computers and devices themselves |
| Meraki firewall, IDS/IPS and filtering | BT Business Ultra | The whole broadband network |
| BTnet Security | BTnet Meraki + BTnet Security | A dedicated leased line and the network behind it |
Connection security is only one part of the picture. Email, cloud apps, passwords and staff awareness need attention too, and many contracts now ask for Cyber Essentials certification. We can review what you have and contact us to get a quote for the right mix.
Why buy BT through Forever Communications
Forever Communications Ltd is a BT Business Partner, supplying BT Business connectivity, voice and mobile services to UK organisations. You get BT's network with a named team who knows your account.
- Impartial advice on the right BT product for each site, from Essential, Enhanced, Pro and Ultra business broadband to BTnet and BT Ethernet
- One point of contact for availability checks, orders, installations, moves, upgrades, faults and renewals
- Ready for the PSTN switch-off: digital phone lines, SoGEA, BT Cloud Voice, BT Cloud Phone and Digital Voice for Business, with your numbers kept where possible
- Multi-site and sector know-how for schools, GP surgeries, retailers, hospitality venues and growing offices
- Mobile and security too: EE Business mobiles from BT Group, Hybrid Backup on the EE Business 4G network, and BT security options alongside our wider Cyber Essentials help
We sell to businesses, schools, charities and public sector organisations. We do not sell consumer or home products.
Want a BT Business quote for your sites?
Tell Forever Communications what you need and we will come back to you by email with options, not a hard sell.
Contact usFrequently asked questions
Is Web Threat Protect switched on automatically?
No. BT includes Web Threat Protect and Content Controls with BT Business Broadband, but they are not switched on by default. The account holder or an administrator needs to activate them in the BT Business My Account portal.
Does BT business broadband include antivirus?
Not as standard. BT Business Antivirus Protection, powered by McAfee, is an optional add-on supplied on a minimum 12-month term, then month to month unless cancelled.
Can BT Wi-Fi Security Controls block apps?
No. BT says Wi-Fi Security Controls filters websites by category or address but cannot block mobile applications. Switching it on also disables BT's network-level Broadband Network Security. For deeper control, BT Business Ultra includes a Cisco Meraki next-generation firewall with content filtering and intrusion prevention.
What is the most secure BT business broadband?
BT describes BT Business Ultra as its most secure business broadband. It is powered by Cisco Meraki, with a next-generation firewall, malware protection, content filtering across more than 70 categories, IDS/IPS and a cloud dashboard.
Do I still need a firewall with BT business broadband?
It depends on your risk and what you run. Web Threat Protect and Content Controls filter websites but are not a firewall: they don't inspect traffic for intrusion attempts. Businesses that handle sensitive data, allow remote access or need to meet Cyber Essentials often choose BT Business Ultra, BTnet Meraki or their own managed firewall.