What options are available to an enterprise whose cybersecurity solution does not provide inline content inspection?

An organisation that lacks inline content inspection is limited primarily to observing metadata, but it can still choose to route (service-chain/backhaul) traffic to a separate firewall or security stack for deeper inspection. Therefore, both option A and option B are valid possibilities; selecting only option B is incomplete.

Why Incorrect Option is Wrong: Choosing [True] would accept option B alone as the sole valid path, ignoring the documented alternative of service-chaining to centralised inspection appliances (option A), which Zscaler literature lists as a traditional—but sub-optimal—approach.

1. Zscaler, “Proxy Chaining vs. Direct-to-Cloud Architectures,” white-paper v3, 2019, p. 5 (“Enterprises without native inline inspection often backhaul or service-chain traffic to a central firewall stack.”).

2. Zscaler, “The High Cost of Partial SSL Inspection,” 2021, p. 1-2 (“Absent decryption, organisations may fall back on metadata-only controls.”).

3. Gartner, “Strategic Roadmap for Network Security,” G00749783, 2022, §4.2 (“When inline inspection is unavailable, backhauling to central firewalls is commonly used, though it adds latency.”).