Question

A security team deploys a next-generation firewall configured to decrypt and inspect outbound TLS traffic. After deployment, a specific mobile banking application on corporate devices begins failing to connect, while all other HTTPS traffic is inspected successfully. The firewall logs show the application terminating the connection during the TLS handshake. What is the MOST likely cause of this behavior?

Accepted Answer

The application uses certificate pinning, which detects the firewall's substituted certificate and refuses the connection

Answer

The application is using symmetric encryption that the firewall cannot decrypt

Answer

The firewall is performing a denial-of-service attack against the application server

Answer

The application's traffic is being tunneled over DNS to evade inspection