A decryption policy allows the firewall to inspect encrypted traffic and apply security controls to Post- quantum Cryptography (PQC) usage, as PQC algorithms are typically implemented within encrypted sessions.
Decryption policies enable the firewall to see and control encrypted traffic. This visibility and control extend to new cryptographic algorithms, including PQC, to ensure that security measures are applied consistently.
By decrypting sessions, you ensure that even PQC traffic can be inspected, logged, and subject to security profiles for visibility and policy enforcement.

NGFWs first check External Dynamic Lists, then Custom URL Categories, and finally Predefined Categories when evaluating URL matches in a Security policy.

Client-based VPN solutions like GlobalProtect provide full coverage for the mobile workforce by extending the enterprise security stack to remote endpoints. It establishes a secure tunnel, allowing consistent security policies across the enterprise perimeter and the mobile workforce.
GlobalProtect is a client-based VPN that provides secure, consistent protection for mobile users by extending the security capabilities of Prisma Access to remote endpoints, covering all network protocols.

Prisma Access allows administrators to define a specific security profile group as the default security group in Prisma Access settings. Once configured, that group is automatically attached to newly created security rules.

With SSL Inbound Inspection, the firewall acts as a meddler-in-the-middle by terminating and decrypting inbound SSL/TLS sessions destined for the internal server. The firewall inspects the decrypted traffic for threats and then re-encrypts and forwards the traffic to the protected server.