A company has an ongoing initiative to monitor and control IT-sanctioned SaaS applications. To be successful, it will require configuration of decryption policies, along with data filtering and URL Filtering Profiles used in Security policies. Based on the need to decrypt SaaS applications, which two steps are appropriate to ensure success? (Choose two.)
Correct Answer: A,B
To inspect SaaS app traffic (often encrypted), you must configure: SSL Forward Proxy "The SSL Forward Proxy decryption profile enables the firewall to decrypt outbound SSL traffic, essential for visibility into SaaS app usage." (Source: SSL Forward Proxy Overview) Validate certificates "Validating and deploying the appropriate root and intermediate CA certificates is critical for establishing trust and preventing SSL errors during decryption." (Source: Certificate Deployment and Validation) Without these steps, SaaS decryption and policy enforcement would be incomplete.
