What is the purpose of the firewall decryption broker?
What is the purpose of the firewall decryption broker?
The purpose of the firewall decryption broker is to decrypt SSL traffic and then send the cleartext traffic to a chain of security inspection tools for further analysis. This allows the security tools to inspect and analyze the decrypted traffic for any potential threats before it is re-encrypted and sent to its original destination.
A: https://docs.paloaltonetworks.com/pan-os/8-1/pan-os-new-features/decryption-features/decryption-broker
This feature will decrypt traffic and forward it out of the selected interface to a specific security device or service (or chain of devices) that examines the cleartext traffic. The last service in the chain returns the packet to the firewall, which then encrypts it and forwards it to the original destination.
https://docs.paloaltonetworks.com/pan-os/10-0/pan-os-admin/decryption/decryption-broker/decryption-broker-how-it-works#id182QLM00OH2
A is a correct answer
A is correct