Palo Alto GlobalProtect Cloud Service for Remote Networks, URL - subscription license (1 year) + Premium Support - 1

As your business is expanding globally with new remote network locations popping up around the globe and mobile users roaming the world, it can be challenging to ensure that your business remains connected and always secure. GlobalProtect Cloud Service, a cloud-based security infrastructure service, simplifies the process of scaling your Palo Alto Networks next-generation security platform so that you can extend the same outstanding security to your remote network locations and your mobile users without having to build out your own global security infrastructure and expand your operational capacity. With the GlobalProtect Cloud Service, Palo Alto Networks automatically deploys next-generation firewalls and GlobalProtect portals and gateways in the locations where you need them.

The GlobalProtect Cloud Service for Remote Networks automatically deploys next-generation firewalls in the regions you specify in the Cloud Services plugin during the onboarding steps. You will need an IPSec-compliant firewall, router, or SD-WAN device that can establish a tunnel to the GlobalProtect Cloud Service for Remote Networks, and you must route traffic from users at the remote network location through the IPSec tunnel so that the policy you have pushed to the service can be enforced by the cloud service. You can enable access to the subnetworks at each remote network location using either static routes, dynamic routing using BGP, or a combination of static and dynamic routes. All remote network locations that you onboard are fully meshed.