Telemetry feature is using Traffic logs and packet captures to collect data: The Device Telemetry feature may collect sensitive information such as traffic logs and packet captures, which could include personal or confidential data. For compliance with local laws, particularly privacy laws like GDPR, the company must ensure that sensitive data is properly handled, stored, and shared. If this data includes personally identifiable information (PII) or other sensitive information, there may be legal obligations for how that data is managed and stored.
Telemetry data is shared in real time with Palo Alto Networks: Real-time sharing of telemetry data with Palo Alto Networks can raise privacy and compliance concerns, as it might involve sending sensitive data to external servers. Depending on the jurisdiction, there may be laws and regulations regarding how and where such data can be shared, especially if it's related to user activity or network behavior. The company needs to ensure that they comply with applicable privacy laws, including user consent and data protection requirements.

If you want to block traffic from zone A to zone B and you have configured the security rule to block this traffic, lets say the first packet comes from zone A, we do a route lookup and find the destination zone to be zone B. You will then do a policy lookup and see that there is a policy match. But since the action is set to "deny", the packet is dropped immediately. Firewall will only inspect the traffic if the policy it matched has action set to "allow".

When log storage reaches the maximum capacity, Panorama automatically deletes older logs to create space for new ones.
https://docs.paloaltonetworks.com/panorama/10-2/panorama-admin/set-up-panorama/determine- panorama-log-storage-requirements

Creation of a device group hierarchy enables you to organize firewalls based on common policy requirements without redundant configuration. When you create objects for use in shared or device group policy once and use them many times, you reduce administrative overhead and ensure consistency across firewall policies.
https://docs.paloaltonetworks.com/panorama/9-1/panorama-admin/panorama- overview/centralized-firewall-configuration-and-update-management/device-groups/device-group- hierarchy