Which three features are supported by CN-Series firewalls?

[Reference: Palo Alto Networks documentation on CN-Series firewalls explicitly mentions App-ID support., B. Decryption: This is SUPPORTED. CN-Series firewalls can perform SSL/TLS decryption to inspect encrypted traffic for threats and enforce security policies on decrypted content., Reference: CN-Series documentation details decryption capabilities., C. GlobalProtect: This is NOT SUPPORTED. GlobalProtect is primarily designed for endpoint security and remote access. While there are integrations with containerized applications in the context of securing access to them, GlobalProtect is not a core feature of the CN-Series firewall itself., D. Content-ID: This is SUPPORTED. Content-ID provides threat prevention capabilities, including antivirus, anti-spyware, vulnerability protection, and URL filtering. CN-Series firewalls utilize Content-ID to protect containerized workloads from known and unknown threats., Reference: CN-Series documentation highlights Content-ID functionality., E. IPSec: While CN-Series can participate in secure communication with other systems, they don't directly terminate IPSec tunnels in the same way a traditional firewall might. Their focus is on securing traffic within the Kubernetes cluster and between the cluster and external networks through other means (like service meshes or ingress controllers)., , ]