Palo Alto Networks Certified Network Security Engineer (PCNSE) — Question 571

An engineer needs to see how many existing SSL decryption sessions are traversing a firewall.
What command should be used?

Answer options

• A. debug sessions | match proxy
• B. debug dataplane pool statistics | match proxy
• C. show dataplane pool statistics | match proxy
• D. show sessions all

Correct answer: B

Explanation

The correct choice is B, as 'debug dataplane pool statistics | match proxy' specifically reveals detailed information about the SSL decryption sessions in the dataplane. The other options either do not provide the correct level of detail or do not focus on the SSL decryption context.