When defining policies in Panorama, the three rule types available are:
Pre Rules - These are evaluated first and are applied at the top of the rule hierarchy. They are typically used for organizational policies that need to be enforced universally, such as blocking specific categories of traffic or allowing necessary traffic like DNS.
Post Rules - These are evaluated after the pre-rules and any locally defined rules on the firewall.
They are often used for default deny rules or logging all denied traffic.
Clean Up Rules - These rules ensure that any traffic not matched by earlier rules is handled appropriately, often used to log or block traffic that didn't meet any other rule criteria.
https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000CljVCAS

To enable split-tunneling by access route, destination domain, and application, you need to configure a split tunnel based on the domain and application on your GlobalProtect gateway. This allows you to specify which domains and applications are included or excluded from the VPN tunnel.

Explanation:
Static - Range is 10-240; default is 10.
OSPF Internal - Range is 10-240; default is 30.
OSPF External - Range is 10-240; default is 110.
IBGP - Range is 10-240; default is 200.
EBGP- Range is 10-240; default is 20.
RIP - Range is 10-240; default is 120.

* Ping Interval-Specify the interval between pings that are sent to the destination IP address (range is 200 to 60,000ms; default is 200ms).
* Ping Count-Specify the number of failed pings before declaring a failure (range is 3 to 10; default is 10).

When running show system resources from the PAN-OS CLI, the top process in the output shows
9999% CPU utilization.
The following is an example output:
> show system resources