SAML RO users are performing packet captures

[RaphaelL]

Hi ,

Since the addition of Inteligent Capture , my SAML RO users are able to perform packet captures if they select a switch. 

Does any of you also have that problem ?

I have a case opened but it's not really going anywhere at the moment.

[Ryan_Miles]

Same happens for a local admin with RO permissions. Seems to be a UI loophole.

I will ping Support and let them know it happens to SAML and non SAML admins along with a quick video showing exactly how it's accessible.

To confirm the way you're accessing it is going to a switch, clicking on a port, then down in the tools section clicking the packet capture link yes? Also, it only applies to the new version page. The old version doesn't appear to show the pcap link.

[RaphaelL]

This or Network-Wide -> Inteligent capture  ( new UI ) and select switch. Probably works with wireless since it's the new UI.

[Ryan_Miles]

Hmm, I don't see it under network wide with RO admins. Only using the little loophole routes do I find it.

[RaphaelL]

You might be right ! I will circle back with our L1 techs. 

[RaphaelL]

Users confirmed they are using the same loop hole described by Ryan

[Ryan_Miles]

I also had a chat with Support and showed them the ways it's accessible. So, hopefully that will help you get case moving.

[cmr]

Wasn't this something that a few of us asked for in the past?  I know it may be accidental, but it could be a useful feature!

[Ryan_Miles]

Same loophole when using the new Client360 page too