What are two reasons for this error?

Exhibit

When trying to set up a server protection SSL proxy, you receive the error shown.

What are two reasons for this error? (Choose two.)
A . The SSL proxy certificate ID is part of a blocklist.
B . The SSL proxy certificate ID does not have the correct renegotiation option set.
C . The SSL proxy certificate ID is for a forwarding proxy.
D . The SSL proxy certificate ID does not exist.

View Answer

Answer: B D

Explanation:

The error message shown in the exhibit regarding the SSL proxy setup indicates an issue with the type of server certificate being used. The error explicitly states, "Unsupported cert type of server certid." Here are two plausible reasons for this error based on the options provided:

Option B. The SSL proxy certificate ID does not have the correct renegotiation option set.

This option points to a configuration issue related to the properties or capabilities of the certificate, such as renegotiation, which if not set correctly according to the expected requirements of the SSL proxy, might lead to the certificate being unsupported. Renegotiation settings are critical in ensuring secure connections, and mismatches in configuration can result in errors.

Option D. The SSL proxy certificate ID does not exist.

If the certificate ID being referred to in the SSL proxy profile does not exist in the device’s certificate store or is incorrectly referenced, the system will be unable to apply the configuration, leading to an error during the commit operation. This situation would typically result in an error indicating that the system can’t find or recognize the specified certificate ID.