Premium GlobalProtect enables Host Information Profile (HIP) checks to assess endpoint health and security posture continuously and supports always-on VPN for persistent secure connectivity, going beyond standard GlobalProtect offerings. These advanced features facilitate granular policy enforcement depending on device state and compliance.

Heartbeat backup uses ICMP-based keep-alive messages over the management interfaces to verify peer availability when the HA1 control link is unavailable or to provide additional peer health validation in an HA configuration.

In cloud environments like Azure, the VM-Series NGFW is deployed to create Layer 3 segmentation zones closest to the application workloads.
In Azure, deploy VM-Series firewalls in Layer 3 mode to enforce security policies closest to private applications, meeting strict compliance and segmentation requirements.
Layer 3 segmentation ensures security policies are enforced at the right boundary to isolate traffic within Azure's virtual networks.

SSL Inbound Inspection allows the firewall to decrypt incoming encrypted traffic to internal servers (e.g., web servers) by acting as a man-in-the-middle (MITM). The firewall uses the private key of the server to decrypt the session and apply security policies before re-encrypting the traffic.
SSL Inbound Inspection requires you to import the server's private key and certificate into the firewall. The firewall then acts as a man-in-the-middle (MITM) to decrypt inbound sessions from external clients to internal servers for inspection.

The "Report and Maintenance" step of the Zero Trust model emphasizes ongoing monitoring, analysis, and reporting to ensure the environment remains secure over time.
The Report and Maintenance phase includes continuous monitoring, log forwarding, and sharing of security telemetry to third-party tools to maintain and validate Zero Trust implementation.
By forwarding logs to SOC tools, the engineer ensures comprehensive visibility and proactive threat hunting.