Which offering can gain visibility and prevent an attack by a malicious actor attempting to exploit a known web server vulnerability using encrypted…

Secure Sockets Layer (SSL) Inbound Inspection is the offering that can gain visibility and prevent an

attack by a malicious actor attempting to exploit a known web server vulnerability using encrypted

communication. SSL Inbound Inspection is a feature that allows the firewall to decrypt and inspect

inbound SSL/TLS traffic from external clients to internal servers. SSL Inbound Inspection can gain

visibility and prevent an attack by a malicious actor attempting to exploit a known web server

vulnerability using encrypted communication by applying threat prevention technologies, such as

antivirus, anti-spyware, vulnerability protection, URL filtering, file blocking, data filtering, and

WildFire analysis, to the decrypted traffic and blocking any malicious content or activity. OCSP,

Advanced URL Filtering (AURLF), and WildFire are not offerings that can gain visibility and prevent an

attack by a malicious actor attempting to exploit a known web server vulnerability using encrypted

communication, but they are related solutions that can enhance security and visibility.

Reference: Palo Alto Networks Certified Software Firewall Engineer (PCSFE), [SSL Inbound

Inspection], [Threat Prevention Datasheet]