Discuss Netskope NSK300 Exam Topic 2 Question 3

Users in your network are attempting to reach a website that has a self-signed certificate using a GRE tunnel to Netskope. They are currently being blocked by Netskope with an SSL error. How would you allow this traffic?

AConfigure a Do Not Decrypt SSL Decryption rule to allow traffic to pass.

BConfigure a Real-time Protection policy with the action set to Allow.

CSet the No SNI setting in Netskope to Bypass.

DEnsure that the users add the self-signed certificate to their local certificate store.

Suggested Answer: A

To allow traffic from a website with a self-signed certificate that is being blocked by Netskope with an SSL error, the correct action is to configure a Do Not Decrypt SSL Decryption rule. This rule will allow the traffic to pass without being decrypted, thus bypassing the SSL error caused by the self-signed certificate. This is a common practice for handling traffic from trusted internal applications or specific external sites that use self-signed certificates1.

Get Premium NSK300 Questions as Interactive Web-Based Practice Test or PDF Real Exam Format Detailed Explanations Instant Access Get Your Practice Test

21 comments · newest first

Marylin 10 months ago

B sounds like it could work, but not sure if it’s the best option.

Marilynn 11 months ago

Totally agree with A, it’s the simplest fix.

Pamela 11 months ago

Wait, can you really just bypass SSL like that?

Dominque 11 months ago

I think D might be necessary too.

Herminia 11 months ago

A is the way to go for this!

Sylvia 12 months ago

I feel like the No SNI setting might be related to bypassing issues, but I’m not confident if option C is the best solution here.

Brittni 12 months ago

I practiced a similar question where we had to configure policies in Netskope, but I can't recall if Real-time Protection is the right approach. Option B seems plausible.

Josue 12 months ago

I'm not entirely sure, but I think option D could work if users add the self-signed certificate to their local store. That might help with the SSL error.

Fairy 1 year ago

I remember something about SSL decryption rules, so maybe option A is the right choice to allow the traffic without decrypting it.

Mireya 1 year ago

I've seen this type of issue before. I think the best approach is to go with option D and have the users add the self-signed certificate to their local certificate store. That should resolve the SSL error and allow the traffic to pass through.

Fabiola 1 year ago

Okay, let's see. The users are being blocked by Netskope due to an SSL error, so I'm guessing we need to find a way to bypass or ignore that SSL check. Option A seems like it could work, but I'm not 100% sure.

Charlene 1 year ago

Hmm, I'm not sure about this one. The question mentions a GRE tunnel, so I'm wondering if that might affect the solution. I'll have to think about it a bit more.

Taryn 1 year ago

I think the answer is C. Setting the No SNI setting in Netskope to Bypass should allow the traffic to pass through without the SSL error.

Antonio 1 year ago

I'm a bit confused on the difference between partitioning and clustering. I'll need to review those concepts to make sure I understand the best approach here.

Hubert 1 year ago

This looks straightforward, I'll just follow the steps in the solution and create the contact.

Leonor 2 years ago

Makes sense, but D needs user intervention. I think A is more practical.

Louisa 2 years ago

Maybe, but what about adding it to the local store? Option D feels right.

Belen 2 years ago

I'd go with A. A Do Not Decrypt rule should work.

Nelida 2 years ago

A self-signed certificate causing an SSL error is such a classic problem.

Leonor 2 years ago

Yeah, they're trying to stump us on Netskope configuration.

Louisa 2 years ago

I think it's a tricky question.

Netskope NSK300 Exam - Topic 2 Question 3 Discussion