HPE7-A02 Exam - Topic 8 Question 25 Discussion

HPE Aruba Networking SSE is a cloud-delivered Security Service Edge platform that provides secure web gateway, ZTNA, CASB/DLP, and cloud firewall functions. Threat detection for remote web browsing relies heavily on full traffic inspection, including SSL inspection, URL filtering, and malware scanning.

In Aruba SSE deployments that protect web access from campus/branch or remote users, you:

Integrate the on-prem gateway or AOS-10 environment with SSE using an external web profile, which defines how traffic is sent to SSE.

Within that profile, you enable SSL inspection so that SSE can decrypt and inspect HTTPS traffic, allowing advanced threat detection, DLP, and malware scanning.

Option A: Custom file security profiles can tune malware scanning, but using a non-default profile is not mandatory for basic threat detection.

Option B: SSE already includes built-in anti-malware and sandboxing; it doesn't require a separate third-party antivirus integration for core features.

Option C: Connectors in SSE are used mainly to reach private applications (ZTNA), not to ''reach remote users'' for general web browsing.

Therefore, an essential part of enabling threat detection for web browsing is creating an external web profile that enables SSL inspection Option D.