NETSEC-PRO · Question #22
A company has an ongoing initiative to monitor and control IT-sanctioned SaaS applications. To be successful, it will require configuration of decryption policies, along with data filtering and URL Fi
The correct answer is A. Configure SSL Forward Proxy. B. Validate which certificates will be used to establish trust.. To inspect SaaS app traffic (often encrypted), you must configure: SSL Forward Proxy The SSL Forward Proxy decryption profile enables the firewall to decrypt outbound SSL traffic, essential for visibility into SaaS app usage. Validate certificates Validating and deploying the app
Question
A company has an ongoing initiative to monitor and control IT-sanctioned SaaS applications. To be successful, it will require configuration of decryption policies, along with data filtering and URL Filtering Profiles used in Security policies. Based on the need to decrypt SaaS applications, which two steps are appropriate to ensure success? (Choose two.)
Options
- AConfigure SSL Forward Proxy.
- BValidate which certificates will be used to establish trust.
- CConfigure SSL Inbound Inspection.
- DCreate new self-signed certificates to use for decryption.
How the community answered
(34 responses)- A76% (26)
- C9% (3)
- D15% (5)
Explanation
To inspect SaaS app traffic (often encrypted), you must configure: SSL Forward Proxy The SSL Forward Proxy decryption profile enables the firewall to decrypt outbound SSL traffic, essential for visibility into SaaS app usage. Validate certificates Validating and deploying the appropriate root and intermediate CA certificates is critical for establishing trust and preventing SSL errors during decryption. Without these steps, SaaS decryption and policy enforcement would be incomplete.
Topics
Community Discussion
No community discussion yet for this question.