The Action Manager is a feature of the Orion Platform that allows you to create, edit, and delete actions for scheduled reports1. Actions are the tasks that are performed when a report is generated, such as sending an email, saving a file, or printing a report2. You can use the Action Manager to edit the email address for each action on each report schedule, without affecting the report content or schedule3. References: 1: Network Performance Monitor Administrator Guide - Use the Action Manager 2: Network Performance Monitor Administrator Guide - Schedule a report 3: SolarWinds Certified Professional Program - Reporting Exam Study Guide - Use the Action Manager

NPM polls static properties, such as interface speed and duplex mode, from the firewall devices using SNMP.
NPM also collects traffic statistics, such as bytes in and bytes out, from the firewall interfaces using SNMP or NetFlow. NPM then calculates bandwidth consumption based on the total amount of bytes coming through the firewall over a given time interval. Bandwidth consumption is expressed as a percentage of the interface speed. For example, if a firewall interface has a speed of 100 Mbps and NPM polls 10 MB of bytes in and 10 MB of bytes out in one minute, the bandwidth consumption is 20% [(10 MB + 10 MB) / 100 Mbps *
100%]1. References: Monitor firewalls with NPM, Calculate bandwidth utilization on an interface

Orion Maps 2.0 supports displaying Palo Alto firewalls as network devices, along with their interfaces, zones, policies, and traffic data. You can also view the firewall status, alerts, and events on the map. To add a Palo Alto firewall to an Orion Map, you need to have Network Insight for Palo Alto enabled in NPM, and discover the firewall using SNMP and API polling. References: Orion Maps 2.0, New Alerting, and Palo Alto Networks Monitoring - SolarWinds Lab Episode #77, SolarWinds Lab Episode 77: Orion Maps 2.0, New Alerting, and Palo Alto Networks Monitoring - Orange Matter, Network Insight for Palo Alto Networks in NPM

The best way to reduce false alerts for high traffic utilization is to configure the alert trigger condition to be more specific and accurate. By setting the alert to trigger only when traffic utilization remains high for a sustained period, you can avoid getting alerted for short-lived spikes that are not a cause for concern. You can use the Time of Day and Trigger Condition options in the alert configuration wizard to define the duration and threshold of the high traffic utilization condition. For example, you can set the alert to trigger only when traffic utilization is greater than 80% for more than 10 minutes during business hours. References:
How do I create a high transmit percent utilization alert to monitor interface bandwidth - Forum - Network Performance Monitor (NPM) - THWACK Products How alerts work - SolarWinds SCP Study Aid - SolarWinds (page 8)

To assign users access to select reports, you can use custom properties and account limitations to restrict the scope of data that users can view and report on. Custom properties are user-defined fields that you can assign to monitored objects, such as nodes, interfaces, or applications. Account limitations are rules that you can apply to user accounts to filter the network data that users can access and view. By using custom properties and account limitations together, you can create granular and flexible report access for different users or groups. For example, you can create a custom property called Department and assign it to nodes thatbelong to different departments in your organization. Then, you can create an account limitation based on the Department custom property and assign it to users who only need to see and report on the nodes in their own department. References: How to create different Orion Support Users and assign them different properties in NPM, Define what users can access and do in the SolarWinds Platform