Which rule type controls end user SSL traffic to external websites?

The correct answer is B. SSL Forward Proxy. SSL Forward Proxy is the decryption rule type that intercepts and inspects outbound SSL/TLS traffic from internal end users to external websites on the internet. The firewall acts as a transparent intermediary: it terminates the client's SSL session, inspects the decrypted…

Submitted by suresh_in· Apr 18, 2026Deploy and Configure

Question

Options

ASSL Outbound Proxyless Inspection
BSSL Forward Proxy
CSSL Inbound Inspection
DSSH Proxy

How the community answered

(30 responses)

A
3% (1)
B
87% (26)
C
3% (1)
D
7% (2)

Explanation

SSL Forward Proxy is the decryption rule type that intercepts and inspects outbound SSL/TLS traffic from internal end users to external websites on the internet. The firewall acts as a transparent intermediary: it terminates the client's SSL session, inspects the decrypted content, and establishes a separate SSL session with the destination server. SSL Inbound Inspection is used for decrypting inbound traffic directed at internal servers (using the server's private key). SSH Proxy handles encrypted SSH tunneled traffic. 'SSL Outbound Proxyless Inspection' is not a valid PAN-OS decryption method name.

Topics

#SSL Decryption#Forward Proxy#Security Policy#Traffic Inspection

Community Discussion

No community discussion yet for this question.

Full PCNSE Practice