N10-005 · Question #422
Which of the following can be used to decrypt SSL packets which encapsulate internal network addresses in the payload?
The correct answer is D. VPN concentrator. A VPN concentrator is specifically designed to terminate SSL/TLS-encrypted VPN tunnels. When remote clients send SSL-encrypted packets whose payloads contain private (internal) network addresses - as in SSL VPN connections - the VPN concentrator holds the server-side SSL…
Question
Which of the following can be used to decrypt SSL packets which encapsulate internal network addresses in the payload?
Options
- AProxy server
- BContent filter
- CLoad balancer
- DVPN concentrator
How the community answered
(25 responses)- A4% (1)
- B8% (2)
- C4% (1)
- D84% (21)
Explanation
A VPN concentrator is specifically designed to terminate SSL/TLS-encrypted VPN tunnels. When remote clients send SSL-encrypted packets whose payloads contain private (internal) network addresses - as in SSL VPN connections - the VPN concentrator holds the server-side SSL certificate and private key, allowing it to decrypt the tunnel and expose the internal addresses encapsulated inside. This is its core function. A proxy server performs SSL inspection at the application layer but is not designed to handle VPN encapsulation of internal addresses. A content filter inspects unencrypted or already-decrypted traffic. A load balancer distributes traffic across servers and, while it can do SSL offloading, it is not designed to handle VPN payloads with internal network addresses.
Topics
Community Discussion
No community discussion yet for this question.