A. They offload security filtering and access control to endpoints by deploying HPE Aruba Networking agents to them.

B. They automate the deployment of predefined policies, which assign access rights based on users' and devices' location.

C. They implement a strict traffic flow in which traffic always flows from the edge to gateways and firewall in the data center and then to its destination.

D. They make it easier for customers to define and apply consistent policies that follow users wherever they go.