ExamGecko
Question list
Search
Search

Related questions











Question 364 - PCNSE discussion

Report
Export

Which two actions must an engineer take to configure SSL Forward Proxy decryption? (Choose two.)

A.
Configure the decryption profile.
Answers
A.
Configure the decryption profile.
B.
Define a Forward Trust Certificate.
Answers
B.
Define a Forward Trust Certificate.
C.
Configure SSL decryption rules.
Answers
C.
Configure SSL decryption rules.
D.
Configure a SSL/TLS service profile.
Answers
D.
Configure a SSL/TLS service profile.
Suggested answer: B, C

Explanation:

To configure SSL Forward Proxy decryption on a Palo Alto Networks firewall, certain key components must be set up to ensure secure and effective decryption and inspection of SSL/TLS encrypted traffic:

B) Define a Forward Trust Certificate:

A Forward Trust Certificate is essential for SSL Forward Proxy decryption. This certificate is used by the firewall to dynamically generate certificates for SSL sites that are trusted. When the firewall decrypts and inspects the traffic and then re-encrypts it, the new certificate presented to the client comes from the Forward Trust Certificate authority. This certificate must be trusted by client devices, often requiring the Forward Trust CA certificate to be distributed and installed on client devices.

C) Configure SSL decryption rules:

SSL decryption rules are the policies that determine which traffic is to be decrypted. These rules specify the source, destination, service, and URL category, among other criteria. The rules define what traffic the SSL Forward Proxy will apply to, enabling selective decryption based on security and privacy requirements.

Together, these components form the basis of the SSL Forward Proxy decryption setup, allowing for the decryption, inspection, and re-encryption of SSL/TLS encrypted traffic to identify and prevent threats hidden within encrypted sessions.

asked 23/09/2024
doaa elshazly
47 questions
User
Your answer:
0 comments
Sorted by

Leave a comment first