Malware Protection inside HTTPS connections is performed using which parts of the Zero Trust Exchange?

A significant portion of web traffic and potential threat delivery occurs within encrypted HTTPS tunnels. To inspect traffic within these secure connections, the Zscaler Zero Trust Exchange utilizes TLS Inspection. TLS Inspection acts as an inline proxy that decrypts SSL/TLS traffic, allowing inline security modules—such as Malware Protection, Advanced Threat Protection, and Cloud Antivirus—to analyze payload contents and evaluate files against known threat signatures and heuristics. Without TLS Inspection, encrypted malware downloads and command-and-control communications would pass through uninspected. Once decrypted and inspected, the traffic is re-encrypted before being delivered to the destination, ensuring comprehensive threat prevention while maintaining protocol security.

Option A: Deception technology uses decoys to detect lateral movement inside networks, not inline malware protection within user HTTPS web sessions.

Option B: Application Segmentation controls access to private applications via ZPA, but does not perform content-level malware signature inspection inside HTTPS streams.

Option D: Data Loss Protection prevents unauthorized data exfiltration and sensitive data leaks, rather than identifying and blocking incoming malware threats.

- Zscaler Documentation: "About SSL Inspection", Zscaler Help Portal, Section: "TLS/SSL Decryption and Malware Protection".

- Zscaler Documentation: "Malware Protection Policy Settings", Zscaler Help Portal, Section: "Inspecting Encrypted HTTPS Traffic".