Providing flexible connectivity options on the Palo Alto firewall is not a concern. With IPSec site-to-site VPN tunnels and GlobalProtect, we can grant our remote users, partners, and branches end-to-end, secure, and cost-effective connectivity, by leveraging the public internet as our transport mechanism. Implementing secure encryption and authentication protocols will guarantee our infrastructure and our peer networks/users, complete end-to-end security. Knowing how to apply this on PAN-OS is a must and taking advantage of this useful feature is going to be our main focus in this section.