iPad Wifi Authentication with Authenticator

[eshaq786]

Hi 

What is the best way of authenticating ipads using fortiauthenticator as a radius server with fortigate as the controller?

Is it best to generate individual certificates for each ipad? Isnt this inefficient when you have hundreds of ipads? What alternative way would be good?

[boneyard]

what is your goal? do you want easy access, secure access, able to track who is doing what, ...?

[eshaq786]

Goal is easy administration when deploying devices. No user input to get onto wifi. Ideally able to add and remove wifi access.

[boneyard]

that is asking a lot

certificates are an easy way to gain access from a user point of view, no username / password, it just works (until it expires). but getting a certificate on a device other then a windows AD system is another matter. perhaps scep can help with that and you let the users enroll themselves: http://help.fortinet.com/fauth/3-3/Content/FortiAuthenticator%203_3%20Admin%20Guide/900/904_SCEP.htm although im not sure if an iPad will just pick that up.

you could also look at the other products that generate and install certificates on devices like smartphones and tablets, for example Aruba ClearPass with the Onboard module.

[xsilver_FTNT]

Hello eshaq786,

if you are looking for easy wifi, and do not want to bother yourself with certificates, then what about simple captive portal and guest user management ?

Maybe some of the cookbook recipes will help or bring ideas .. http://cookbook.fortinet.com/?s=WiFi&cat=5

Kind regards, Tomas