The director is required to intercept and examine all the traffic, including SSL/TLS, block harmful URLs, and identify users accessing malicious websites. Which Citrix ADC deployment mode should be used?

• A. Default Gateway
• B. Secure Web Gateway
• C. Citrix ADC Gateway
• D. Access Gateway

Answer: (B)

Intercepting and scrutinizing all web traffic, including SSL/TLS, while blocking harmful sites and identifying which users are browsing certain websites is the job of a dedicated secure web gateway function. The Secure Web Gateway deployment mode in Citrix ADC is designed to act as a forward proxy for outbound web traffic, enabling SSL interception (decrypting and inspecting encrypted sessions), applying URL filtering and threat protection, and associating web activity with user identities. This makes it the right fit for enforcing web access policies, blocking malicious URLs, and visibility into user web behavior across the organization.

Other deployment modes focus on different needs: a Default Gateway setup is primarily about routing and WAN connectivity rather than deep web security inspection. Citrix ADC Gateway and Access Gateway are centered on secure remote access to applications (SSL VPN and remote access services) rather than forcing all web traffic through a security proxy for inspection and policy enforcement.