Authentication Sequence Admin Roles for external administrator accounts can be assigned to an Authentication Sequence, which includes a sequence of one or more Authentication Profiles that are processed in a specific order. The firewall checks against each Authentication Profile within the Authentication Sequence until one Authentication Profile successfully authenticates the user.

SSL Proxy re-encrypt is a process where SSL traffic is decrypted inspected and then re- encrypted to be delivered to the destination.

Schedule content updates so that they download-and-install automatically. Then, set a Threshold that determines the amount of time the firewall waits before installing the latest content. In a mission-critical network, schedule up to a 48 hour threshold.
https://docs.paloaltonetworks.com/pan-os/9-1/pan-os-admin/software-and-content-updates/best- practices-for-app-and-threat-content-updates/best-practices-mission-critical#id184AH00L078