So I am looking into configuring DPI-SSL on our network, but I think I am up against a very 'modular' network client base.
So we have a SonicWall NSA 2600; and our primary interface is split into 2 main VLANs. We have roughly 200+ clients at any given time on VLAN 1, which is our main staff VLAN. Then we have a guest VLAN 40 which allows for throttled Wifi only guest traffic. And at times we can ~400 guest clients at any given time. This is a pretty big network to handle and manage; with split interests. Protecting staff while at work and protecting guests from themselves and from others while on campus is very critical.
With DPI-SSL, it takes the HTTPS traffic decrypts it and resigns its; but the resigned SSL certificate has to be manually installed on the client. That is pretty much impossible with our setup. We don't use a domain, and...