Which parameter must be set for an invalid certificate handling on a Cisco Seucure Web Appliance with a policy for HTTPS traffic?

When a Cisco Secure Web Appliance (SWA) encounters an invalid certificate during HTTPS inspection, setting the "Decrypt" action allows the SWA to attempt decryption and further inspection of the traffic. This enables the appliance to apply security policies to the content, even if the certificate's validity is in question, ensuring deep packet inspection is performed.

Reject would simply block the traffic, which might be too restrictive and prevents any further inspection or policy application.

Accept would allow the traffic to pass without decryption or inspection, bypassing security policies for invalid certificates.

Scan is a general term and not a specific parameter setting for invalid certificate handling; decryption is a prerequisite for content scanning.