In the SAFE SMR, if the remote users who do not want to establish VPN tunnel when connected to the Internet, they should use ____________ to mitigate against unauthorized access.

A.
IPSec with IKE

B.
Personal Firewall

C.
Cisco PIX Firewall

D.
Firewall provided through the corporate connection.

Explanation:
Because the remote user may not always want the VPN tunnel established when connected to the Internet or ISP network, personal firewall software is recommended to mitigate against unauthorized access to the PC.
REF;Safe white papers;page 28
SAFE: Extending the Security Blueprint to Small, Midsize, and Remote-User Networks