Preferred FQDN that the clients see when they get redirected? I think we want this to be a name that resolves correctly on the NAC vlan. Second question: is self-sign certificate satisfactory, or do we want to apply for a Verisign or similar cert matchine the above name? /jgk