Which deployment mode should be used to intercept and examine encrypted SSL/TLS traffic and to block harmful URLs while identifying users?

Which deployment mode should be used to intercept and examine encrypted SSL/TLS traffic and to block harmful URLs while identifying users?

• A. Default Gateway
• B. Secure Web Gateway
• C. Citrix ADC Gateway
• D. Access Gateway

Answer: (B)

Intercepting and inspecting encrypted web traffic with the ability to block malicious sites while identifying the user is the role of a Secure Web Gateway. This deployment mode sits at the network edge to decrypt SSL/TLS sessions, inspect the content for threats, apply web access policies, and enforce controls on a per-user basis. It integrates with directory services to tie traffic to specific identities, enabling precise, user- or group-based decisions and comprehensive audit trails. Other options focus on routing, remote access, or application delivery rather than providing robust web security with SSL interception and user-aware policy enforcement, so they don’t cover the same end-to-end capability.

Intercepting and inspecting encrypted web traffic with the ability to block malicious sites while identifying the user is the role of a Secure Web Gateway. This deployment mode sits at the network edge to decrypt SSL/TLS sessions, inspect the content for threats, apply web access policies, and enforce controls on a per-user basis. It integrates with directory services to tie traffic to specific identities, enabling precise, user- or group-based decisions and comprehensive audit trails. Other options focus on routing, remote access, or application delivery rather than providing robust web security with SSL interception and user-aware policy enforcement, so they don’t cover the same end-to-end capability.