PCNSE · Question #374
What does SSL decryption require to establish a firewall as a trusted third party and to establish trust between a client and server to secure an SSL/TLS connection?
The correct answer is C. certificates. https://docs.paloaltonetworks.com/pan-os/10-2/pan-os-admin/decryption/decryption-overview SSL decryption (both forward proxy and inbound inspection) requires certificates to establish the firewall as a trusted third party, and to establish trust between a client and a server to…
Question
What does SSL decryption require to establish a firewall as a trusted third party and to establish trust between a client and server to secure an SSL/TLS connection?
Options
- Alink state
- Bstateful firewall connection
- Ccertificates
- Dprofiles
How the community answered
(15 responses)- A7% (1)
- C87% (13)
- D7% (1)
Explanation
https://docs.paloaltonetworks.com/pan-os/10-2/pan-os-admin/decryption/decryption-overview SSL decryption (both forward proxy and inbound inspection) requires certificates to establish the firewall as a trusted third party, and to establish trust between a client and a server to secure an SSL/TLS connection. You can also use certificates when excluding servers from SSL decryption for technical reasons (the site breaks decryption for reasons such as certificate pinning, unsupported ciphers, or mutual authentication). SSH decryption does not require certificates.
Topics
Community Discussion
No community discussion yet for this question.