Which three statements about VRF-Aware Firewall are true? (Choose three)

A.
It can run as more than one instance

B.
It enables service providers to implement firewall on PE devices.

C.
It can generate syslog message that are visible only to individual VPNs

D.
It can support VPN network with overlapping address range without NAT

E.
It supports both global and per-VRF commands and DoS parameters

F.
It enables service providers to deploy firewall on customer device.