Which two configuration options are available on a Cisco WSA within a decryption policy? (Choose two.)

A Cisco Web Security Appliance (WSA) Decryption Policy is designed to handle HTTPS traffic by making a decision on whether to intercept it for inspection. The two primary actions available within these policies are 'Decrypt' and 'Pass Through'. The 'Decrypt' action instructs the WSA to perform TLS/SSL interception, decrypt the traffic for inspection by other security engines, and then re-encrypt it. The 'Pass Through' action allows the encrypted traffic to bypass decryption and inspection, which is essential for sensitive categories like financial services or for applications that use certificate pinning and would otherwise fail.

B. Warn: This is an action available in Access Policies to present a warning page to the user, not a valid action within a Decryption Policy.

D. Allow: This is a general term and a specific action in Access Policies. In Decryption Policies, the actions for permitted traffic are more specific ('Decrypt' or 'Pass Through').

E. Block: While 'Drop' (the equivalent of Block) is a valid action in a Decryption Policy, 'Decrypt' and 'Pass Through' are the two fundamental, non-terminating actions that define the policy's primary purpose.

1. Source: Cisco Web Security Appliance AsyncOS 15.0 User Guide

Reference: Chapter 11

"Managing Decryption Policies

" Section: "Actions in Decryption Policy Rules

" Page 11-6.

Quote: "For each policy rule

you can configure one of the following actions to be taken on traffic that matches the rule criteria: Decrypt

Pass Through

Drop." (This confirms that 'Decrypt' and 'Pass Through' are primary actions. 'Drop' is the equivalent of 'Block').

2. Source: Cisco Web Security Appliance Configuration Guide - Configure HTTPS Inspection

Reference: Section "Configure Decryption Policies"

Details: The configuration steps and screenshots in this official guide consistently show the available actions for a decryption policy rule as "Decrypt

" "Pass Through

" and "Drop." This distinguishes them from Access Policy actions like "Allow

" "Warn

" or "Block" (though Drop has the same effect as Block).