Security

Reply
Regular Contributor I
Posts: 186
Registered: ‎03-22-2013

Possible to host an ssl cert on Guest Captive Portal to aid https inspection?

We were wondering about how we could go about getting guest to install a certificate on their device so we can use https inspection.. the most obvious place would be to put it on the registration page as a requirement of them using the service.  

 

Is this possible, or would we have to host this on another server which we could redirect to after registration?

 

 

Guru Elite
Posts: 8,340
Registered: ‎09-08-2010

Re: Possible to host an ssl cert on Guest Captive Portal to aid https inspection?

Yes. You can put anything you want on the splash page.


Thanks,
Tim

Tim Cappalli | Aruba Security TME
@timcappalli | timcappalli.me | ACMX #367 / ACCX #480
Regular Contributor I
Posts: 181
Registered: ‎10-20-2010

Re: Possible to host an ssl cert on Guest Captive Portal to aid https inspection?

Whats https inspection?  What device does the inspection?  Just curious.  

 

I know you thought about this but making clients/guest install something on their device will likely not go over well with them.  In my case many fortune 100 clients of ours are restricted from installing or modifying their laptops at all.  Government especially.

Guru Elite
Posts: 8,340
Registered: ‎09-08-2010

Re: Possible to host an ssl cert on Guest Captive Portal to aid https inspection?

It's usually a MiTM on the Internet firewall.


Thanks,
Tim

Tim Cappalli | Aruba Security TME
@timcappalli | timcappalli.me | ACMX #367 / ACCX #480
Regular Contributor I
Posts: 186
Registered: ‎03-22-2013

Re: Possible to host an ssl cert on Guest Captive Portal to aid https inspection?

It would be our Checkpoing Firewalls doing the https inspection... 

 

We did consider the fact that a user would first have to install a certificate on their device, but we are offering them free internet access.. so we thought it a fair trade off!

 

So Im haping that on the Captive Portal registration page, we can simply have a link to the cert, which is hosted on Clearpass (rather than another external system), thich they can install as part of their registration. 

 

 

Guru Elite
Posts: 8,340
Registered: ‎09-08-2010

Re: Possible to host an ssl cert on Guest Captive Portal to aid https inspection?

Also keep in the mind the average user does not know what a cert is and will likely be skeptical about installing it onto their machine ( if they even know how).


Thanks,
Tim

Tim Cappalli | Aruba Security TME
@timcappalli | timcappalli.me | ACMX #367 / ACCX #480
Search Airheads
Showing results for 
Search instead for 
Did you mean: