This guide helps you pinpoint whether the issue is the device or the network and restore timekeeping quickly.
Is your time clock stuck on "offline" right when you're trying to close payroll? A quick scope check can show whether the problem is limited to one device or the whole office, which keeps you from chasing the wrong fix. You'll get clear steps to restore the connection and keep time records accurate.
Decide whether it's the device or the network
Scope the impact
Start by checking the scope of the impact across users and locations because it narrows the likely cause and prevents wasted fixes. A business network is the digital artery that keeps email, apps, and timekeeping moving, so if everything else is healthy while one device is down, you can focus on that device and its local connection.
Isolation and quick local checks
If the device works on an alternate network test, your office network is the culprit; if it stays offline across multiple networks, the device itself is likely at fault. Plug the device into a known-good wall jack to see whether to focus on the network or the device.
Once you know the issue is local, check power and cabling, restart the unit, and verify it still has the right network settings, because unstable power or a loose cable can look like a network failure. If you have ten hourly staff and each manual correction takes three minutes, that's half an hour a day of admin time, so the basic checks are worth doing first.
Firewall checks that actually matter
Understand the gate
A firewall blocks unauthorized access to your network, which protects payroll data but can also block a biometric device when rules are too tight. The upside is clear security and fewer unwanted connections; the downside is missed punches when legitimate device traffic is dropped. If the device must reach a timekeeping server elsewhere in your business, that path has to be allowed.

Audit the rule path
Misconfiguration is a leading cause of firewall failures, so any recent policy change, upgrade, or hardware swap should trigger a rule review. Readers can go dark the morning after a firewall cleanup; restoring a single rule can bring them back within minutes.
One analysis notes a 95% misconfiguration rate for firewall breaches, so an audit of source, destination, and port rules is the fastest way to validate the device's path. Review logs for denied traffic from the device's IP and confirm the required ports are explicitly allowed, then re-test connectivity.
IP conflicts and address hygiene
Validate the address
Configuration errors like wrong IP settings create connectivity problems, so confirm the device's IP address, subnet mask, and gateway match your network plan. This is also the moment to record the device's address on your site sheet so the next person doesn't guess.
Use a nearby PC on the same port to run ipconfig; a 169.x address signals there's no valid lease, and a 60-second power cycle of the modem or router can clear temporary glitches. That single minute can save you from chasing higher-level settings that are actually fine.
Conflict cleanup
Network-related problems include IP conflicts and firewall rules that block device connectivity. An IP conflict is overlapping address assignments that keep the device from staying reachable. Two devices can end up cloned to the same IP after a swap; assigning a unique address to the replacement restores clock-ins immediately.

Basic network monitoring identifies issues early and reduces downtime, which is exactly what you want before payroll week. Even a simple weekly check of device status and address lists can keep a conflict from blindsiding your team.
Treat connectivity like a payroll control, not a one-off tech task. When you scope the impact, verify the firewall path, and clean up address conflicts, the device becomes boring again, which is exactly what payroll needs.


Share:
Time Attendance Only vs. All-in-One Access Device: Single Function or Integrated?
Onboarding in 2026: Plastic Card vs. Face Scan – Which Is Cooler?