Updated Cybersecurity Guidelines question...

[Aja]

Line 4 reads Each congregation should have a separate user account and password for the Kingdom Hall computer and the Wi-Fi system. I'm pretty tech savvy and handle a lot of the technology at our Kingdom Hall (shared by 3 congregations) but I don't have a clue how to setup separate user accounts and passwords for the 3 congregations on our wifi. We currently use a mesh Nest Wifi Pro setup with 3 wifi points. Any help would be appreciated.

[gusdn1]

I don't think it is possible for a single Nest Wi-Fi Pro to have more than two SSIDs (Main and Guest SSIDs).

Please refer to this Nest Community answer: Can the Nest Wifi Pro have multiple non-guest SSIDs?.

If you have a more advanced router, like those primarily used by businesses or enterprises, you might be able to create more than two SSIDs.

 

Another option is to have secondary routers connected to the main router. Each of these secondary routers can have its own Wi-Fi credentials for each congregation. However, you might need to get a separate set of three Wi-Fi points for each congregation (totaling nine Wi-Fi points) because they are only intended to extend the coverage of a single network. This means they can only connect to one router and help it distribute the Wi-Fi signal more effectively throughout the area. Disconnecting and reconnecting to different networks with the same Wi-Fi point is not recommended and can waste a lot of time.

 

 

 

Most importantly, seek guidance from your local LDC. They will likely provide you with more reliable information.

Edited August 4 by gusdn1

[Pabo]

Basically on a computer, you may have a different login for each of the congregations, so that when a particular congregation logs in on that computer, the desktop display/language settings will set up to their preferences. I have heard many great fights between congregations fiddling around with the settings on their computers, getting others annoyed.

 

However, as regards to the WiFi, as @gusdn1 has mentioned, it will depend on the router/Wifi device that you are using. But unless the general population of the congregation really needs to use the WiFi, why should those details be freely available in the first place. Most will be able to hotpsot from their phones, unless you are in a blackspot for mobile reception. What would be the best practice is that you have one Wifi SSID available to the general public (usually it would be the "Guest" mode) to use within the Kingdom Hall, and throttle down the speed requirements (more-less disincentivising them to use it), and another SSID be hidden for those devices with the Kingdom Hallthat really need to be connected on that network, and only those who need to know the access details have that information. But is would be better again to use different WiFi routers for each public and private networks, as those being public are generally hacked more easily than if it is hidden. Also too, you could disable the "Public" Wifi during the meeting, so the Kingdom Hall does get the best speed connection.

 

For our Kingdom Hall, as we are just one congregation, only a select few brothers use the sound desk's equipment anyways. However, our Wifi SSID connection is hidden from public and only those who need to know, have been given both the SSID and password can connect to it. As we are on a mobile prepaid plan for our limited data (our landline speeds are atrocious), we do not allow others within the Kingdom Hall use the WiFi, as most have their internet connection by their phones hotspotting anyways. Also, it frees up the connection speed for Zoom to transmit and download its data unhindered. The WiFi is really only used for technical purposes such as the secondary laptop for Zoom, or the CO uses the SoundBox app to remotely control the video/pictures on the stage monitors that he uses for the groups. Our computer is actually connected to a network switch by cable with both the WiFI/Router and PTZ camera are connected as well. if the brothers want free Wifi, just connect to the local McDonald's WiFi just down the road.

 

 

[cdk.h5c]

I don’t think this refers to the SSiDs. 
 

Each Congregation should have a separate user account for the Computer (that’s fine) and a separated user account for the WiFi SYSTEM (the management console).  

[gusdn1]

On 8/7/2024 at 5:27 AM, cdk.h5c said:

a separated user account for the WiFi SYSTEM (the management console).  

 

You can add multiple accounts to a single Google Nest WiFi Pro; however, it won't make much difference since the Nest WiFi only has one guest SSID and one regular SSID. Additionally, if one account makes changes, it will affect all other accounts because it is the same network, just with multiple accounts having complete control over it.

Edited August 9 by gusdn1

[cdk.h5c]

29 minutes ago, gusdn1 said:

 

You can add multiple accounts to a single Google Nest WiFi Pro; however, it won't make much difference since the Nest WiFi only has one guest SSID and one regular SSID. Additionally, if one account makes changes, it will affect all other accounts because it is the same network, just with multiple accounts having complete control over it.

That is true. But that is not the point. 
 

It’s because of paragraph 2 of the guidelines. If every congregation has its own account, it is much easier to keep track on who has the credentials and change them if needed.  

[gusdn1]

11 minutes ago, cdk.h5c said:

That is true. But that is not the point. 
 

It’s because of paragraph 2 of the guidelines. If every congregation has its own account, it is much easier to keep track on who has the credentials and change them if needed.  

 

Oh, I am not referring to the guidelines. I am talking about the limitations of the Nest WiFi Pro regarding user accounts.

Of course, there should be a separate account for each congregation, as pointed out in the guidelines, but the Nest WiFi Pro does not offer that option with complete separation of controls, as far as we know according to the documentation provided by Google.

Edited August 9 by gusdn1

[cdk.h5c]

1 minute ago, gusdn1 said:

 

Oh, I am not talking about the guidelines. I am talking about the limitations of the Nest WiFi Pro regarding the user accounts.

 

If I understood you correctly, you made the point that if you would setup multiple user accounts (one for each congregation), each account has full control over the same two SSIDs (main and guest).  

That is true. But it has one advantage. Every congregation knows their brothers who have the credentials of their congregation. In a case which is described in paragraph 2 of the guidelines, they could simply change the password of their congregation without the need to change it for all congregations which use the same WiFi device. That’s why it makes sense to have multiple accounts managing the same SSIDs. 

[gusdn1]

9 minutes ago, cdk.h5c said:

 

If I understood you correctly, you made the point that if you would setup multiple user accounts (one for each congregation), each account has full control over the same two SSIDs (main and guest).  

That is true. But it has one advantage. Every congregation knows their brothers who have the credentials of their congregation. In a case which is described in paragraph 2 of the guidelines, they could simply change the password of their congregation without the need to change it for all congregations which use the same WiFi device. That’s why it makes sense to have multiple accounts managing the same SSIDs. 

 

Yes, that makes sense too. As long as they are aware that if one congregation makes changes to the WiFi settings (not the user account), e.g. IP address, WiFi name, etc., those changes will also affect other congregations that have full control.

 

Just to add into this, the Nest WiFi Pro with multiple accounts provides shared full control, not independent full control.

Edited August 9 by gusdn1