Which two statements are correct about SSL proxy server protection? (Choose two.)

Which two statements are correct about SSL proxy server protection? (Choose two.)
A . You do not need to configure the servers to use the SSL proxy the function on the SRX Series device.
B . You must load the server certificates on the SRX Series device.
C . The servers must be configured to use the SSL proxy function on the SRX Series device.
D . You must import the root CA on the servers.

View Answer

Answer: A B

Explanation:

When using SSL proxy, the servers themselves do not require any special configuration to utilize the SSL proxy function on the SRX device. The SSL proxy operates transparently, intercepting and decrypting SSL/TLS traffic before it reaches the servers.

For the SSL proxy to function effectively, especially in server protection mode where it impersonates the server to the client, it is necessary to load the server’s certificates onto the SRX device. This allows the SRX to establish a trusted connection with the client using the server’s credentials.