問題文
A destination that the business depends on stops working after decryption is turned on for a rule. The site is known to pin its certificate. What does the documentation say about traffic of this kind?
選択肢
- Traffic to destinations with pinned certificates is normally left out of decryption, so an exception can be turned off for intrusion prevention while a problem is chased down.
- Traffic to destinations with pinned certificates is decrypted like the rest, so the pinning check runs against the certificate that the inspecting side presents to the client at the start.
- Traffic to destinations with pinned certificates is blocked outright, so the operator adds the destination to a list of approved exceptions before users can reach the site at all.
- Traffic to destinations with pinned certificates is decrypted where the file inspection features are turned on, so pinning matters for threat categories alone.