A network administrator is trying to configure an access rule to allow access to a specific banking site over HTTPS. Which method must the…

To allow access to a specific banking site over HTTPS, the network administrator must use SSL

decryption (also known as SSL/TLS inspection) and specify the URL. This is because HTTPS traffic is

encrypted, and the firewall needs to decrypt the traffic to inspect the URL and enforce the access

rule.

Steps:

Enable SSL Decryption: Configure SSL policies to decrypt the HTTPS traffic.

Specify the URL: Define the URL of the banking site in the access control policy, ensuring that the

decrypted traffic is inspected and allowed based on the specified URL.

This method ensures that only the desired banking site is accessed over HTTPS, while other HTTPS

traffic can be filtered or blocked according to the organization's security policies.

Reference: Cisco Secure Firewall Management Center Configuration Guide, Chapter on SSL

Decryption    .