When installing the Windows-Based User-ID Agent for integration with Active Directory, it is recommended to use a Dedicated Service Account. This account should have the necessary permissions to read Active Directory data but does not need to have broad administrative privileges like those of a Domain Administrator or Enterprise Administrator. Using a dedicated service account helps adhere to the principle of least privilege and enhances security.
A Domain Administrator or Enterprise Administrator account would provide more permissions than necessary and is not recommended for this task, as it goes against best security practices.

Explanation
Timeline Description automatically generated

https://docs.paloaltonetworks.com/wildfire/9-1/wildfire-admin/wildfire-overview/about-wildfire.html

Explanation
https://live.paloaltonetworks.com/t5/Learning-Articles/How-to-Interpret-show-system-resources/ta-p/59364
"The command show system resources gives a snapshot of Management Plane (MP) resource utilization including memory and CPU. This is similar to the 'top' command in Linux."https://live.paloaltonetworks.com/t5/Learning-Articles/How-to-Interpret-show-system-resources/ta-p/593

https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClETCA0 A device group is a logical grouping of firewalls that share the same security policy rules. A device group can contain multiple vsys and firewalls, including multi-vsys firewalls. A multi-vsys firewall can have each vsys in a different device group, depending on the desired security policy for each vsys. This allows for granular control and flexibility in managing multi-vsys firewalls with Panorama1. Reference: Device Group Push to a Multi-VSYS Firewall, Configure Virtual Systems, PCNSE Study Guide (page 50)