What encryption configuration enables end-to-end security with caching and compression on the Citrix ADC?

• A. SSL front-end, HTTP backend
• B. SSL_TCP front-end, SSL_TCP backend
• C. SSL front-end, SSL backend
• D. SSL_TCP front-end, TCP backend

Answer: (C)

End-to-end security with caching and compression relies on the ADC being able to inspect and modify HTTP traffic while still keeping encryption across the full path. Terminating TLS at the ADC (front-end) lets the appliance decrypt the client request so it can cache and compress HTTP responses. At the same time, keeping the backend connection encrypted (SSL back-end) preserves encryption from the ADC to the backend servers. If the backend were unencrypted (plain HTTP/TCP), that final leg would not be secured, breaking true end-to-end protection. Therefore, using SSL on both the front-end and the back-end provides the needed visibility for caching/compression while maintaining encryption across both segments of the path.