I would like to raise a curiosity that maybe someone has experienced.
I have a very extensive network of users and I can not have CA root. The need to inspect SSL traffic to prevent access to pornographic images is increasing. Also the searchers are redirects web access to https
For enable SSL inspection, and avoid the end-users are shown a fit of man in the middle, I would set a template for the first connection made by the user, where it explains that the SSL inspection is applied and load the certificate may to be installed on your computer to avoid the error message.
Does anyone have implemented something similar and could share?, Can I submit a template only the first user access - maybe like autentication template - and explain here how to download and install the certificate? Any idea?