To install the Windows-Based User-ID Agent for integration with Active Directory and to prevent credential phishing, the administrator should download the UaInstall-11.0.0.msi installer package. This package is specifically designed for the User-ID Agent installation on Windows systems. It allows the firewall to capture and map users to their IP addresses, providing the necessary information for effective security policy enforcement.

https://docs.paloaltonetworks.com/panorama/10-2/panorama-admin/manage-firewalls/manage- device-groups/manage-precedence-of-inherited-objects

For log forwarding in PAN-OS, traffic and threat logs require a Log Forwarding profile attached to Security rules (Option B) to send logs to external systems (e.g., syslog, Panorama). Without this, logs are stored locally but not forwarded, a critical design consideration.

When creating a new App-ID report under Monitor > Reports > Application Reports > New Application, the firewall identifies new applications based on the New App-IDs in the most recently installed content releases. The New App-IDs are the application signatures that have been added in the latest content release, which can be found under Objects > Security Profiles > Application. This allows the engineer to monitor any new applications that have been added to the firewall's database and evaluate whether to allow or block them with a Security policy update.