Which of these is not an action that is associated with HTTPS decryption policies?

Question

Options

• ADecrypt
• BDrop
• CBlock
• Dpass-through

• A
  8% (5)
• B
  2% (1)
• C
  85% (52)
• D
  5% (3)

Explanation

Block (C) is not a standard action in HTTPS decryption policies because blocking traffic is the function of security policies (e.g., URL filtering or firewall rules), not decryption policies. HTTPS decryption policies are specifically concerned with how to handle the SSL/TLS handshake, not whether to allow or deny the connection.

• Decrypt (A) is a core decryption policy action - it intercepts and decrypts the SSL/TLS session so the firewall can inspect the traffic.
• Drop (B) is valid in decryption policies; it silently terminates the connection without sending a reset, typically used when decryption isn't possible or desired.
• Pass-through (D) is also a valid action - it allows the encrypted session to pass without decryption, often used for trusted traffic like banking or healthcare sites.

Memory tip: Think of HTTPS decryption policy actions as answering the question "What do I do with the SSL tunnel?" - you can open it (Decrypt), let it go (Pass-through), or kill it quietly (Drop). "Block" answers a different question ("Should I allow this site?") and belongs in access/security policies, not decryption policies.

No community discussion yet for this question.