SSL Inspection error _ Mobile Devices

[sanu]

Dear Friends,

I need your kind attention on a small problem and need your valuable suggestions.

I have enabled SSL inspection in my Fortigate policy which leads me to an certificate error in the Browser which i overcome by installing a Fortigate Certificate in the computer Browser like Mozilla / Chrome / IE/ etc , but what will i do with the Mobile devices like Android /Iphones where i have no option to manually install the Certificate.

Please do revert ASAP ... TqVM

Regards,

SANU

[SecurityPlus]

When you say more effort for the end-users, are you referring to the every 12, 24, 36, etc. month renewal of the certificate. Would like to do deep packet inspection without having the user get a certificate warning and without having to add certificated to every user machine individually. Not all organizations are using Active Directory so this is not often an option.

[emnoc]

No, I need to clarify. To obtain CA signed certificate requires you to do more work from a ORG standpoint. You have to sign more paper, provide this and that ,and so on...... from most certificate issuers, but once done it's done.

Outside of that it a breeze. I would still do a POC using a internal-local CA authority  that you  control  before applying for a cert from a well known issuer, imho.