Guest User!

You are not Sophos Staff.

This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

HTTPS Scanning Best Practices for public networks and BYOD

I would like to know what best practices are for providing HTTPS scanning, filtering, and inspection for public networks to protect users from virus infections, or if that is even done. I think it would be nice to provide this service, but I don't see it as possible to do so without somehow installing the cert on those devices, and how do you install a cert on a cell phone? Has anyone else done this, or do you just provide the HTTPS scanning for company machines on one specific VLAN/Subnet/etc?



This thread was automatically locked due to age.
Parents
  • There are certainly ways to install certificates on cell phones.  That said, you will find doing HTTPS scanning for your company challenging enough given that you need to get certificates on each machine and cell phone and then need to determine which sites break with HTTPS scanning and then create exceptions for each.  Getting people to install certificates on public networks would be next to impossible - not to mention that you would not know what would break for them with the HTTPS scanning enabled.

  • Paul,

    as Greg wrote it will almost impossible to manage and distribute Certificate to every users in order to avoid the Certificate error page.

    Can you give us more details about what you are thinking and what you would like to achieve?

    Thanks

Reply
  • Paul,

    as Greg wrote it will almost impossible to manage and distribute Certificate to every users in order to avoid the Certificate error page.

    Can you give us more details about what you are thinking and what you would like to achieve?

    Thanks

Children