Hi @mo-chou , thank you for reaching out to Hexnode Connect.
We understand your scenario of managing shared or event-based device deployments.
Instead of relying solely on network-level firewalls, you can use certificate-based authentication through SCEP (Simple Certificate Enrollment Protocol) to control internet access securely and dynamically.
Here’s how it works:
With SCEP, each managed device can be automatically issued with a unique digital certificate based on the user’s identity or group. This certificate acts as a trusted credential; so only authenticated users (like your students and faculty) can connect to the school’s Wi-Fi or access internet resources. If someone outside your domain tries to use the device, the authentication simply fails, effectively blocking access.
The best part is that Hexnode supports SCEP configuration across multiple platforms, making it ideal for your multi-device environment. You can refer to our step-by-step documentation here:
Using this, you can automate certificate enrollment, link it with your existing identity provider, and ensure that only authenticated users; verified via certificates, gain access to your network or web resources.
I hope this approach helps with your cause. If you need any assistance, please feel free to reach out to us; we’re happy to help.
Best regards,
George
Hexnode UEM
13 Views
