Panorama can download only one update at a time for updates of the same type. If you schedule multiple updates of the same type to download during the same time Recurrence, only the first download succeeds.
https://docs.paloaltonetworks.com/pan-os/10-1/pan-os-upgrade/upgrade-panorama/deploy- updates-to-firewalls-log-collectors-and-wildfire-appliances-using-panorama/schedule-a-content- update-using-panorama

NAT policy rule matches the packet based on the original pre-NAT src and dst address and pre- NAT destination zone.It's security policy that match the packet based on pre-NAT src and dst address and post-Nat zone.