Which prerequisite must be satisfied before creating an SSH proxy Decryption policy?

Question

Options

• ABoth SSH keys and SSL certificates must be generated.
• BNo prerequisites are required.
• CSSH keys must be manually generated.
• DSSL certificates must be generated.

• A
  3% (2)
• B
  94% (62)
• C
  2% (1)
• D
  2% (1)

Explanation

Option B is correct because SSH proxy Decryption policies on platforms like Palo Alto Networks can be created without any prior key or certificate generation - the firewall generates the necessary SSH keys automatically when the policy is first applied to traffic, requiring no manual prerequisite steps. Option A is wrong because requiring both SSH keys and SSL certificates conflates two different decryption mechanisms (SSH Proxy and SSL/TLS decryption are separate features with different requirements). Option C is wrong because SSH keys are not manually generated by the administrator beforehand - the system handles key generation internally. Option D is wrong because SSL certificates are relevant to SSL Forward Proxy or SSL Inbound Inspection policies, not SSH proxy decryption.

Memory tip: Think "SSH = Simple Setup Here" - unlike SSL decryption (which requires CA certificate setup), SSH proxy decryption has zero prerequisites and works out of the box.

No community discussion yet for this question.