How does a cloud security solution achieve visibility into TLS/SSL-protected Web traffic?

Question

Options

• Aby altering the TLS handshake and forcing the website to use a weak encryption algorithm which
• Bby altering the TLS handshake and forcing the website to use insecure (HTTP) access
• Cby performing the TLS handshake on behalf of the website and replacing the site's certificate with
• Dby using government-issued universal decryption keys for the ciphers

• A
  6% (4)
• B
  3% (2)
• C
  77% (51)
• D
  14% (9)

Explanation

TLS/SSL Inspection: Cloud security solutions achieve visibility into TLS/SSL-protected web traffic through a process known as TLS/SSL interception or inspection. The security solution acts as an intermediary (man-in-the-middle) during the TLS handshake. When a user initiates a connection to a TLS/SSL-protected website, the security solution intercepts this connection. It completes the TLS handshake with the user's device using its own certificate, and simultaneously performs the handshake with the destination website. Certificate Replacement: The security solution decrypts the traffic, inspects it, and then re-encrypts it before forwarding it to the destination website. The user's browser trusts the security solution's certificate, which replaces the original website's Security Implications: This method allows the security solution to inspect encrypted traffic for threats or policy violations while maintaining secure communication.

No community discussion yet for this question.