Network Management

Hi,

We wanted to allow a local IT team to monitor Wi-Fi activity on the campus they are in charge of, so in Airwave 8.2.13.0 we created a Read-Only User pointing to the specific subfolder containing the APs of that campus.

It worked fine: the Read-Only User can only browse or search APs and Clients located under the subfolder, and even in VisualRF only the deployed APs located under the subfolder are visible on the Floor Plans.

But surprisingly, in VisualRF the Read-Only User can show all the clients on all Floor Plans on all buildings on all campuses, i.e. even the clients associated with APs not located under the subfolder! This causes a major security issue and information leak for us.

How can we restrict clients visibility to the clients associated to (or located around) APs under the User scope ? Or is there a way to confine the read-Only User to specific Buildings in VisualRF ?

I would suggest to open a TAC case as it sounds to be a defect. The clients connected to the AP's the user is assigned to only should show up in VisualRF too.

------------------------------
Gowri Sankar Amujuri
------------------------------

Original Message:
Sent: Oct 01, 2021 09:21 AM
From: Unknown User
Subject: How to limit clients visibility in Airwave/VisualRF ?

Hi,

We wanted to allow a local IT team to monitor Wi-Fi activity on the campus they are in charge of, so in Airwave 8.2.13.0 we created a Read-Only User pointing to the specific subfolder containing the APs of that campus.

It worked fine: the Read-Only User can only browse or search APs and Clients located under the subfolder, and even in VisualRF only the deployed APs located under the subfolder are visible on the Floor Plans.

But surprisingly, in VisualRF the Read-Only User can show all the clients on all Floor Plans on all buildings on all campuses, i.e. even the clients associated with APs not located under the subfolder! This causes a major security issue and information leak for us.

How can we restrict clients visibility to the clients associated to (or located around) APs under the User scope ? Or is there a way to confine the read-Only User to specific Buildings in VisualRF ?