Which two statements are true about a service provider managed central firewall service? (Choose two)

A.
Traffic between the customer sites and the Internet are typically restricted only by the security functions of the service provider managed central firewall.

B.
Traffic between sites of an individual customer must flow inside the customer’s VPN.

C.
Traffic between the different customers (Inter-customer VPN traffic) should be allowed.

D.
Customers that still want to retain their own private IP addresses inside their network must use NAT on the service provider managed central firewall.

E.
Service providers typically use public IP addresses as the address space between the service provider managed central firewall and the customers.