You can now leverage the private IP addresses of the systems in your branch locations that are forwarding traffic to Explicit Proxy using Proxy mode. You can use the private IP address to skip authentication of headless systems that can't authenticate, set up security policies, and get visibility of the traffic on Prisma Access Explicit Proxy.

You can enable this functionality when you secure users and devices at a branch with a site-to-site IPSec tunnel using Remote Network and Explicit Proxy Secure Processing Nodes (SPNs).