nerdexam
Palo_Alto_Networks

NGFW-ENGINEER · Question #119

An organization's Security policy states that for all outbound web traffic, the TCP session to the external web server must be established by the firewall, not the user's workstation. This requires…

The correct answer is B. Explicit proxy. Explicit proxy requires user web browsers to be manually configured to send traffic to the firewall, and the firewall establishes the TCP session to external web servers on behalf of the client, enabling full mediation of outbound web traffic with integrated authentication…

Implementing Security Policies and Features

Question

An organization's Security policy states that for all outbound web traffic, the TCP session to the external web server must be established by the firewall, not the user's workstation. This requires configuring user web browsers to point to the firewall. Authentication is also required. Which solution on a PA-Series firewall meets these specific needs?

Options

  • ATransparent proxy
  • BExplicit proxy
  • CGlobalProtect with User-ID
  • DDecryption policy with Authentication Portal

How the community answered

(37 responses)
  • A
    5% (2)
  • B
    76% (28)
  • C
    5% (2)
  • D
    14% (5)

Explanation

Explicit proxy requires user web browsers to be manually configured to send traffic to the firewall, and the firewall establishes the TCP session to external web servers on behalf of the client, enabling full mediation of outbound web traffic with integrated authentication support.

Topics

#Explicit Proxy#Web Security#User Authentication#Policy Enforcement

Community Discussion

No community discussion yet for this question.

Sign up to join the discussion
Full NGFW-ENGINEER Practice