What is needed to enable an HTTPS proxy?

The correct answer is C. self-signed CSR. To enable the HTTPS proxy (SSL/TLS inspection) on the Cisco WSA, you must provide a root certificate that the WSA uses as a signing authority to re-sign decrypted traffic. The WSA allows you to generate a self-signed Certificate Signing Request (CSR), which it then self-signs…

Decryption Policies to Control HTTPS Traffic

Question

Options

Aself-signed server certificate
Btrusted third-party CA signed root certificate
Cself-signed CSR
Dself-signed root certificate

How the community answered

(47 responses)

A
6% (3)
B
2% (1)
C
89% (42)
D
2% (1)

Explanation

To enable the HTTPS proxy (SSL/TLS inspection) on the Cisco WSA, you must provide a root certificate that the WSA uses as a signing authority to re-sign decrypted traffic. The WSA allows you to generate a self-signed Certificate Signing Request (CSR), which it then self-signs to create a root CA certificate used for HTTPS interception. This self-signed root certificate must also be distributed to client browsers so they trust the WSA-generated certificates. A third-party CA-signed root certificate can alternatively be uploaded, but the minimum requirement to enable the HTTPS proxy is the generation of this self-signed CSR/certificate through the WSA's built-in wizard.

Topics

#HTTPS Proxy#SSL Decryption#Certificates#Certificate Generation

Community Discussion

No community discussion yet for this question.

Full 300-725 Practice