A company’s existing forward proxies support software-based TLS decryption, but are currently at 60% load just dealing with AV scanning and content analysis for HTTP traffic. More than 70% outbound web traffic is currently encrypted. The switching and routing network infrastructure precludes adding capacity, preventing the installation of a dedicated TLS decryption system. The network firewall infrastructure is currently at 30% load and has software decryption modules that can be activated by purchasing add
A. Purchase the SSL, decryption license for the firewalls and route traffic back to the proxies for enduser categorization and malware analysis
B. Roll out application whitelisting to end-user desktops and decommission the existing proxies, freeing up network ports
C. Use an EDP solution to address the malware issue and accept the diminishing role of the proxy for URL categorization in the short team
D. Accept the current risk and seek possible funding approval in the next budget cycle to replace the existing proxies with ones with more capacity
Join Telegram Study Group ▷