A large organization is implementing a content security strategy across its global network. They need to ensure consistent security policies are applied to all web traffic, regardless of user location (on-premise, remote, or branch office), and that threat intelligence is shared in real-time across all security enforcement points. Which architectural approach best addresses these requirements?

Why the other options are wrong

• A. While VPNs provide secure access, they typically backhaul all traffic to a central point, which can introduce latency and doesn't inherently provide consistent web content security policies at the edge for remote users without additional SWG capabilities.
• B. Decentralized appliances can lead to inconsistent policies and fragmented threat intelligence across locations, increasing management overhead.
• D. Traditional on-premise proxy servers are not designed for a distributed workforce and would not provide consistent security or real-time threat intelligence for remote users.