When a user works primarily from a remote location but reports to the corporate office...

GlobalProtectis Palo Alto Networks'VPN and Zero Trust remote access solution. It dynamically determines whether a user shouldconnect to an internal or external gatewaybased onexternal host detection.

Preconfigured External Host Detection–

TheGlobalProtect agentchecks for a predefinedtrusted external IP address(e.g., the corporate office’s public IP).

Decision Making–

If the detected IPmatches the trusted external host, the GlobalProtect client assumes the user isinside the corporate networkand doesnot establish a VPN connection.

If the detected IPdoes not match, GlobalProtectinitiates a VPN connectionto an external gateway.

Improves Performance & Security–

Preventsunnecessary VPN connectionswhen users are inside the corporate office.

Reducesbandwidth overheadby ensuring only external users connect via VPN.

A. ICMP ping to Panorama management interface.❌

Incorrect, becauseGlobalProtect does not use ICMP pingsto determine location.

Panorama does not play a rolein dynamic gateway selection for GlobalProtect.

B. User login credentials.❌

Incorrect, becausecredentials are used for authentication, not for detecting location.

Users authenticateregardless of whether they are inside or outside the network.

D. Reverse DNS lookup of preconfigured host IP.❌

Incorrect, becauseReverse DNS lookups are not usedfor gateway selection.

DNS lookups can beinconsistentand are not areliablemethod for internal/external detection.

Firewall Deployment– GlobalProtect works withNGFWsto provide secure remote access.

Security Policies– Can enforce different security postures based oninternal vs. external user location.

VPN Configurations– Usesdynamic gateway selectionto optimize VPN performance.

Threat Prevention– Protects remote users fromphishing, malware, and network-based threats.

WildFire Integration– Inspectsfiles uploaded/downloaded via VPNfor threats.

Zero Trust Architectures– EnforcesZero Trust Network Access (ZTNA)by verifying user identity and device security before granting access.

How External Host Detection Works:Why Other Options Are Incorrect?References to Firewall Deployment and Security Features:Thus, the correct answer is:✅C. External host detection.