Which Palo Alto Networks security component should an administrator use to and NGFW policies to remote users?

GlobalProtect extends the security policies of the Palo Alto Networks Next-Generation Firewall (NGFW) to remote and mobile users. It establishes a secure VPN connection from the user's device to the NGFW, ensuring all traffic is inspected and subject to the same security policies as on-premises users. This provides consistent protection, visibility, and control over user traffic, regardless of their location. GlobalProtect is the designated component for securely connecting remote users to the corporate network and enforcing NGFW policies.

A. Prisma SaaS API is a Cloud Access Security Broker (CASB) service that secures sanctioned SaaS applications; it does not extend NGFW policies to remote user endpoints.
B. Threat Intelligence Cloud is a backend service that provides data for security subscriptions like WildFire and DNS Security; it is not a user connectivity solution.
D. Cortex XDR is an endpoint detection and response (EDR) platform that protects endpoints from threats but does not function as the primary tool for extending network policies via VPN.

1. Palo Alto Networks. (2023). GlobalProtect Administrator's Guide PAN-OS 11.0. "About GlobalProtect". "GlobalProtect provides a complete security solution for mobile users that extends the protection of the Palo Alto Networks next-generation firewall to endpoints both inside and outside of the corporate network."

2. Palo Alto Networks. (n.d.). GlobalProtect Datasheet. "GlobalProtect extends the protection of your security platform to your remote workforce, securing your traffic and preventing threats from infecting your devices."