https://docs.paloaltonetworks.com/pan-os/9-1/pan-os-web-interface-help/policies/policies- application-override
https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000PPDrCAO

https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClomCAC By default, all the traffic destined between two zones, regardless of being from the same zone or different zone, this applies the rule to all matching interzone and intrazone traffic in the specified source and destination zones.

This document explains how to perform a fib lookup for a particular destination within a particular virtual router on a Palo Alto Networks firewall.
1. Select the desired virtual router from the list of virtual routers configured with the command:
> test routing fib-lookup virtual-router <value>
2. Specify a destination IP address:
> test routing fib-lookup virtual-router default ip <ip address>
https://live.paloaltonetworks.com/t5/Learning-Articles/How-to-Perform-FIB-Lookup-for-a- Particular-Destination/ta-p/52188

In a preemptive active-passive HA setup, the firewall with the higher device priority (lower numerical value) becomes the active-primary member once it becomes functional. When firewall-
01 (priority 90) is rebooted, firewall-02 (priority 100) temporarily takes over as the active-primary member. After firewall-01 finishes rebooting and becomes fully operational, it preempts firewall-02 and takes over as the active-primary member, following the preemptive configuration.

https://docs.paloaltonetworks.com/pan-os/10-2/pan-os-admin/firewall-administration/reference- port-number-usage/ports-used-for-globalprotect Used for IPSec tunnel connections between GlobalProtect apps and gateways.