Security

We were wondering about how we could go about getting guest to install a certificate on their device so we can use https inspection.. the most obvious place would be to put it on the registration page as a requirement of them using the service.  

 

Is this possible, or would we have to host this on another server which we could redirect to after registration?

 

 

Yes. You can put anything you want on the splash page.


Thanks,
Tim

Whats https inspection?  What device does the inspection?  Just curious.  

 

I know you thought about this but making clients/guest install something on their device will likely not go over well with them.  In my case many fortune 100 clients of ours are restricted from installing or modifying their laptops at all.  Government especially.

It's usually a MiTM on the Internet firewall.


Thanks,
Tim

It would be our Checkpoing Firewalls doing the https inspection... 

 

We did consider the fact that a user would first have to install a certificate on their device, but we are offering them free internet access.. so we thought it a fair trade off!

 

So Im haping that on the Captive Portal registration page, we can simply have a link to the cert, which is hosted on Clearpass (rather than another external system), thich they can install as part of their registration. 

 

 

Also keep in the mind the average user does not know what a cert is and will likely be skeptical about installing it onto their machine ( if they even know how).


Thanks,
Tim