Watchguard Network Security Practice Test

What settings must you configure in an HTTPS-proxy policy to detect credit card numbers in SSL-encrypted HTTP traffic?

1. WebBlocker

2. Gateway AntiVirus

3. Application Control

4. Deep inspection of HTTPS content

The correct answer is: Deep inspection of HTTPS content

To detect credit card numbers in SSL-encrypted HTTP traffic, configuring deep inspection of HTTPS content is essential. Deep inspection allows the security device to decrypt SSL traffic and analyze the content within that traffic. This process involves intercepting the encrypted data, which enables the system to inspect the plaintext data for specific patterns or signatures associated with credit card numbers, such as the standard format of 16-digit numbers. Without deep inspection, the security solution would only see the encrypted data without any ability to analyze it for sensitive information. While other features, such as web filtering or anti-virus, enhance security, they do not have the capability to inspect the contents of encrypted data specifically for detecting sensitive information like credit card numbers. In summary, deep inspection of HTTPS content is the critical setting that enables the detection of sensitive information transmitted over SSL-encrypted channels.