Increasing the frequency of antivirus updates ensures that the firewalls have the latest signatures to detect and block new malware more effectively.

When importing a pre-configured firewall configuration to Panorama, you need to perform the following steps:
Add the serial number of the firewall under Panorama > Managed Devices In Panorama, import the firewall's configuration bundle under Panorama > Setup > Operations > Import device configuration to Panorama Make changes to the imported firewall configuration within Panorama Commit the changes you made to Panorama Perform an Export or push Device Config Bundle operation under Panorama > Setup > Operations The Export or push Device Config Bundle operation allows you to push a complete configuration bundle from Panorama to a managed firewall without duplicating local configurations. This operation ensures that any local settings on the firewall are preserved and merged with the settings from Panorama.

You can also use Decryption Mirroring to forward decrypted traffic as plaintext to a third party solution for additional analysis and archiving.
https://docs.paloaltonetworks.com/pan-os/9-1/pan-os-admin/decryption/decryption- overview.html#idd71f8b4d-cd40-4c6c-905f-2f8c7fca6537
https://docs.paloaltonetworks.com/pan-os/10-2/pan-os-admin/decryption/decryption-overview