Pushing out FortiGate cert to BYOD devices.

[patagbura]

Hi, we would like to enable DPI within a school environment. To do this we would need to deploy the FortiGate webfilter cert to all devices connected to WiFi. The issue is that the bulk of these devices are BYOD and not domain members. Does anyone know if there is a way to do this FortiAuthenticator is not deployed at site?

[ebilcari]

As far as I know there is no built in mechanism on FortiGate to do this. You can distribute it via mail or to instruct the user to download this certificate from an internal webserver.

[Yurisk]

There is no solution from Fortinet that I know of, and Fortiauthenticator would not help either. You are talking about MDM solution potentially, but even then if the byod devices are managed by this mdm, not someone else’s devices just connecting via wifi. 

[gfleming]

Not a solution to your problem, but may I ask why you need to do DPI on a BYOD network?