Content Filtering Public Wifi

[cmb991]

We have an internal network and a public network.  We want to do content filtering on both.  The internal network is all domain joined computers, so we can easily push out a certificate for https filtering.  But what is the best way to filter public wifi and avoid the certificate errors on every https website?