Custom Login Banner for Cloud WiFi and CloudPath

  • 1
  • Question
  • Updated 8 months ago
  • Acknowledged
Could we specify custom login banner for Cloud WiFi and CloudPath systems admin logins?
Photo of Alex

Alex

  • 17 Posts
  • 0 Reply Likes

Posted 8 months ago

  • 1
Photo of Phal

Phal, Employee

  • 39 Posts
  • 24 Reply Likes
Hi Alex, 
Thank you for your many suggestions through the product UI page, we are taking close look at them - thank you again! 

Are you intending to put your branding on the admin login page, that your end customer will see? Is that post login, or pre-login? 

thanks
Phal
Cloud Product Team
Photo of Alex

Alex

  • 17 Posts
  • 0 Reply Likes
Hi Phai,

The branding is not that important to us as a login banner for administrators when they access https://cloud.ruckuswireless.com and https://na1.cloudpath.net/admin/login .

In a Federal Government space we have to follow NIST security framework.

As per NIST AC8 security control https://nvd.nist.gov/800-53/Rev4/control/AC-8

Control Description
The information system:

a. Displays to users [Assignment: organization-defined system use notification message or banner] before granting access to the system that provides privacy and security notices consistent with applicable federal laws, Executive Orders, directives, policies, regulations, standards, and guidance and states that:

1. Users are accessing a U.S. Government information system;

2. Information system usage may be monitored, recorded, and subject to audit;

3. Unauthorized use of the information system is prohibited and subject to criminal and civil penalties; and

4. Use of the information system indicates consent to monitoring and recording;

b. Retains the notification message or banner on the screen until users acknowledge the usage conditions and take explicit actions to log on to or further access the information system; and

c. For publicly accessible systems:

1. Displays system use information [Assignment: organization-defined conditions], before granting further access;

2. Displays references, if any, to monitoring, recording, or auditing that are consistent with privacy accommodations for such systems that generally prohibit those activities; and

3. Includes a description of the authorized uses of the system.

I do understand that CloudWiFi or CloudPath are not true multi tenant systems.
Is there any other way to meet NIST AC-8 for CloudWiFi and CloudPath or it could be meet with on-prem dedicated WiFi controller?
Thanks,
 
Photo of Abhi Maras

Abhi Maras, Employee

  • 22 Posts
  • 15 Reply Likes
Hi Alex,
Yes, this is needed for Federal deployments specifically those that need Common Criteria certification. While the SmartZone product-line supports this feature (and is CC certified) other products do not support this feature (or CC certification).