Skip to main content
eranjayaFG
Explorer
August 28, 2025
Question

Windows Mobile Hotspot

  • August 28, 2025
  • 2 replies
  • 427 views

Dear All,

 

I would like to check on the options available to restrict devices connecting through the Mobile Hotspot feature in Windows OS at the gateway level.

 

In an AD environment, this can be controlled using Group Policy. However, in a non-AD environment, apart from relying on an endpoint protection tool, what other options can we use to manage this?

 

FortiGate FortiNAC FortiClient FortiSwitch 

2 replies

AEK
SuperUser
SuperUser
August 31, 2025

Hi

I'm not sure if we can distinguish a device connecting to a mobile hotspot from a device connecting to a regular AP, except from the BSSID (MAC addr).

In this case I personally don't know such feature in FortiClient EMS. But probably this can be done with a custom scan (script) with FortiNAC.

AEK
fukolnu2
New Member
August 31, 2025

That's a big ol' red flag, my friend. You definitely don't want any randos getting onto the company network through those hotspots. I'd say disable that feature ASAP before it causes some major trouble for ya.