nerdexam
Palo_Alto_Networks

NETSEC-PRO · Question #34

In SSL Forward Proxy, what role does the firewall play in handling encrypted traffic?

The correct answer is B. It acts as a Certificate Authority and decrypts client-side SSL traffic. The firewall intercepts outbound SSL connections, generates a trusted certificate on the fly to present to the client, decrypts the SSL traffic to inspect it for threats, applies security policies, then re-encrypts the traffic before forwarding it to the destination. This makes…

Decryption and SSL Inspection

Question

In SSL Forward Proxy, what role does the firewall play in handling encrypted traffic?

Options

  • AIt allows encrypted traffic to pass without inspection
  • BIt acts as a Certificate Authority and decrypts client-side SSL traffic
  • CIt forces the client to bypass decryption
  • DIt uses SSH tunneling to analyze SSL

How the community answered

(59 responses)
  • A
    12% (7)
  • B
    80% (47)
  • C
    3% (2)
  • D
    5% (3)

Explanation

The firewall intercepts outbound SSL connections, generates a trusted certificate on the fly to present to the client, decrypts the SSL traffic to inspect it for threats, applies security policies, then re-encrypts the traffic before forwarding it to the destination. This makes the firewall an "invisible" proxy between the client and server, enabling full inspection of encrypted traffic.

Topics

#SSL Forward Proxy#certificate authority#SSL decryption#encrypted traffic inspection

Community Discussion

No community discussion yet for this question.

Full NETSEC-PRO Practice