Which prerequisite must be satisfied before creating an SSH proxy Decryption policy?

The correct answer is A. No prerequisites are required. Configuring SSH Proxy does not require certificates and the key used to decrypt SSH sessions is generated automatically on the firewall during boot up. With SSH decryption enabled, all SSH traffic identified by the policy is decrypted and identified as either regular SSH traffic

User-ID, Decryption, and Authentication

Question

Options

ANo prerequisites are required
BSSH keys must be manually generated
CBoth SSH keys and SSL certificates must be generated
DSSL certificates must be generated

How the community answered

(45 responses)

A
93% (42)
B
4% (2)
D
2% (1)

Explanation

Configuring SSH Proxy does not require certificates and the key used to decrypt SSH sessions is generated automatically on the firewall during boot up. With SSH decryption enabled, all SSH traffic identified by the policy is decrypted and identified as either regular SSH traffic or as SSH tunneled traffic. SSH tunneled traffic is blocked and restricted according to the profiles configured on the firewall. Traffic is re-encrypted as it exits the firewall. https://docs.paloaltonetworks.com/pan-os/10-2/pan-os-admin/decryption/configure-ssh-proxy

Topics

#SSH proxy#decryption policy#prerequisites#SSL decryption

Community Discussion

No community discussion yet for this question.

Full PCNSC Practice