Windows Mobile Hotspot

[eranjayaFG]

Dear All,

I would like to check on the options available to restrict devices connecting through the Mobile Hotspot feature in Windows OS at the gateway level.

In an AD environment, this can be controlled using Group Policy. However, in a non-AD environment, apart from relying on an endpoint protection tool, what other options can we use to manage this?

FortiGate FortiNAC FortiClient FortiSwitch 

[AEK]

Hi

I'm not sure if we can distinguish a device connecting to a mobile hotspot from a device connecting to a regular AP, except from the BSSID (MAC addr).

In this case I personally don't know such feature in FortiClient EMS. But probably this can be done with a custom scan (script) with FortiNAC.

[fukolnu2]

That's a big ol' red flag, my friend. You definitely don't want any randos getting onto the company network through those hotspots. I'd say disable that feature ASAP before it causes some major trouble for ya.