An administrator is troubleshooting application traffic that has a valid business use case, and observes the following decryption log message: "Received fatal alert UnknownCA from client." How…

Question

Options

• AContact the site administrator with the expired certificate to request updates or renewal.
• BEnable certificate revocation checking to deny access to sites with revoked certificates. -"
• CAdd the server's hostname to the SSL Decryption Exclusion List to allow traffic without decryption.
• DCheck for expired certificates and take appropriate actions to block or allow access based on

• A
  6% (3)
• B
  2% (1)
• C
  81% (38)
• D
  11% (5)

Explanation

The log message "Received fatal alert UnknownCA from client" indicates that the client is unable to trust the certificate provided by the server because it was signed by an unknown or untrusted Certificate Authority (CA). This situation is typically seen in SSL/TLS decryption, where the firewall acts as a proxy and attempts to decrypt the traffic but encounters a certificate that it does not recognize. Add the server’s hostname to the SSL Decryption Exclusion List: This option allows the firewall to bypass decryption for this specific traffic, meaning the firewall will no longer attempt to decrypt the traffic and will allow it to pass through without interference. This solution is appropriate if the administrator determines that decryption of this traffic is unnecessary or problematic due to the untrusted certificate.

No community discussion yet for this question.