nerdexam
Palo_Alto_Networks

NETSEC-PRO · Question #34

In SSL Forward Proxy, what role does the firewall play in handling encrypted traffic?

The correct answer is B. It acts as a Certificate Authority and decrypts client-side SSL traffic. The firewall intercepts outbound SSL connections, generates a trusted certificate on the fly to present to the client, decrypts the SSL traffic to inspect it for threats, applies security policies, then re-encrypts the traffic before forwarding it to the destination. This makes t

Decryption and SSL Inspection

Question

In SSL Forward Proxy, what role does the firewall play in handling encrypted traffic?

Options

  • AIt allows encrypted traffic to pass without inspection
  • BIt acts as a Certificate Authority and decrypts client-side SSL traffic
  • CIt forces the client to bypass decryption
  • DIt uses SSH tunneling to analyze SSL

How the community answered

(59 responses)
  • A
    12% (7)
  • B
    80% (47)
  • C
    3% (2)
  • D
    5% (3)

Explanation

The firewall intercepts outbound SSL connections, generates a trusted certificate on the fly to present to the client, decrypts the SSL traffic to inspect it for threats, applies security policies, then re-encrypts the traffic before forwarding it to the destination. This makes the firewall an "invisible" proxy between the client and server, enabling full inspection of encrypted traffic.

Topics

#SSL Forward Proxy#certificate authority#SSL decryption#encrypted traffic inspection

Community Discussion

No community discussion yet for this question.

Full NETSEC-PRO Practice