https://www.paloaltonetworks.com/documentation/80/pan-os/pan-os/firewall- administration/manage-firewall-administrators/administrative-authentication

Reference: https://www.firewall.cx/networking-topics/firewalls/palo-alto-firewalls/1152-palo-alto- firewall-single-pass-parallel-processing-hardware-architecture.html

You can configure a file blocking profile with the following actions:
* Forward - When the specified file type is detected, the file is sent to WildFire for analysis. A log is also generated in the data filtering log.
* Block - When the specified file type is detected, the file is blocked and a customizable block page is presented to the user. A log is also generated in the data filtering log.
* Alert - When the specified file type is detected, a log is generated in the data filtering log.
* Continue - When the specified file type is detected, a customizable response page is presented to the user. The user can click through the page to download the file. A log is also generated in the data filtering log. Because this type of forwarding action requires user interaction, it is only applicable for web traffic.
* Continue-and-forward - When the specified file type is detected, a customizable continuation page is presented to the user. The user can click through the page to download the file. If the user clicks through the continue page to download the file, the file is sent to WildFire for analysis.
A log is also generated in the data filtering log.
https://www.paloaltonetworks.com/documentation/61/pan-os/pan-os/policy/file-blocking- profiles.html