Explanation
To configure LDAP authentication on Panorama, you need to23:
* Define an LDAP server profile that specifies the connection details and credentials for accessing the LDAP server.
* Define an authentication profile that references the LDAP server profile and defines how users authenticate to Panorama (such as username format and password expiration).
* Define an authentication sequence (optional) that allows users to authenticate using multiple methods (such as local database, LDAP, RADIUS, etc.).
* Assign the authentication profile or sequence to a Panorama administrator role or a device group role.

Explanation
The Method section of the GlobalProtect portal configuration allows you to specify how users connect to the portal. The options are:
* user-logon (always on): The agent connects to the portal as soon as the user logs in to the endpoint.
* pre-logon then on-demand: The agent connects to the portal before the user logs in to the endpoint and then switches to on-demand mode after the user logs in.
* on-demand (manual user initiated connection): The agent connects to the portal only when the user initiates the connection manually. References:
https://docs.paloaltonetworks.com/pan-os/10-1/pan-os-admin/globalprotect/configure-the-globalprotect-po

Explanation
When importing a pre-configured firewall configuration to Panorama, you need to perform the following steps
12:
* Add the serial number of the firewall under Panorama > Managed Devices
* In Panorama, import the firewall's configuration bundle under Panorama > Setup > Operations > Import device configuration to Panorama
* Make changes to the imported firewall configuration within Panorama
* Commit the changes you made to Panorama
* Perform an Export or push Device Config Bundle operation under Panorama > Setup > Operations The Export or push Device Config Bundle operation allows you to push a complete configuration bundle from Panorama to a managed firewall without duplicating local configurations . This operation ensures that any local settings on the firewall are preserved and merged with the settings from Panorama.