After Migrating from an ASA firewall to a Palo Alto Networks Firewall, the VPN connection between a remote network and the Palo Alto Networks Firewall is not establishing correctly.
The following entry is appearing in the logs:
Pfs group mismatched: my:0 peer:2
Which setting should be changed on the Palo Alto Networks Firewall to resolve this error message?

Which User-ID method maps IP address to usernames for users connecting through a web proxy that has already authenticated the user?

Which field is optional when creating a new Security Policy rule?

Which tool provides an administrator the ability to see trends in traffic over periods of time, such as threats detected in the last 30 days?

Based on the following image, what is the correct path of root, intermediate, and end-user certificate?