Exam PCNSE topic 1 question 594 discussion

is C Based on the provided text, the rule type that controls end user SSL traffic to external websites is SSL Forward Proxy. Here's why: SSL Forward Proxy: This rule type is specifically designed to decrypt and inspect SSL/TLS traffic from internal users to external web servers. It allows the firewall to act as a man-in-the-middle, decrypting the traffic so that security policies and profiles can be applied before re-encrypting and forwarding the traffic to its destination. The other options do not match the described functionality: SSL Inbound Inspection: This is typically used to decrypt traffic coming to internal servers from external clients, not for traffic from internal users to external sites. SSH Proxy: This is used for inspecting and controlling SSH traffic, not SSL/TLS traffic. SSL Outbound Proxyless Inspection: This term is not mentioned in the provided text and does not align with the described SSL Forward Proxy functionality.

Forward proxy are used to proxy outgoing traffic.

https://docs.paloaltonetworks.com/pan-os/10-1/pan-os-admin/decryption/decryption-concepts/ssl-forward-proxy#:~:text=When%20you%20configure%20the%20firewall%20to%20decrypt%20SSL,SSL%2FTLS%20traffic%20from%20internal%20users%20to%20the%20web.