Adming login page customization

Can you repeat that? Why are you trying to delete logs?

No... not at all, of course.

 

 

What I'm trying to do is not showing information about Firepass version in the admin login page... I think it's easy to understand, but is not documented anywhere... so, I'm just asking if anyone knows how to "delete" that information from the login page...

 

 

In the included image is the red marked area

I can't see any way to remove that information from the standard admin access. I guess that you don't want a person who is not authenticated to see what the device is and the version of code being run.

 

 

What you could perhaps do is to setup another IP address and define an new web service in Device Management | Configuration | Network Configuration | Web Services and tick "SSL only" and "admin logon" to that web service. Doing that would present the standard logon screen or you could define your own logon screen as a "Virtual host based customisation" used when connecting to that new IP address. Then configure the real management interface on a private management network where that access is more tightly controlled. Could that work?

 

 

Regards,

 

Kevin

Thanks for you answer. You're correct... I don't want any internet user to get that information about the controller.

 

 

I've being playing with your method, but I found a "problem". I added the second IP, with Admin, and SSL options. I just uploaded a test index.htm using Webdav to the controller, and if I try https://thenewip then the new index.htm is showed, but if I try https://thenewip/admin then, again, full admin login page is showed...

 

 

If I disable admin access and enable user access, https://thenewip automatically redirects to https://thenewip/admin ... :?

 

 

Any new idea?

Yes, you're right if I use http://myurl/admin then it does go to the standard admin login screen. Hmm...!

 

 

The URL that I use here is enabled for both user and admin access and so if I want to login for user functions then when I use my standard user credentials. If I use the inbuilt adminsitrator credentials at that same login screen then it takes me to the admin console view.

 

 

As you say it does still expose the FirePass infrmation if somebody is creative enough to put the /admin on the end of the URL.

 

 

How about not allowing any admin access from an externally accessible IP address and rely on having a separate IPSec VPN access to get to the management screen through the private management IP address?

 

 

Regards,

 

Kevin