https://docs.paloaltonetworks.com/pan-os/10-1/pan-os-admin/decryption/prepare-to-deploy- decryption/size-the-decryption-firewall-deployment

Report generation can also consume considerable resources, while some pre-defined reports may not be useful to the organization, or they've been replaced by a custom report. These pre- defined reports can be disabled from Device > Setup > Logging and Reporting Settings.
https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClSvCAK

"(Optional) Select a Decryption Profile to perform additional checks on traffic that matches the policy rule."
https://docs.paloaltonetworks.com/pan-os/9-1/pan-os-admin/decryption/define-traffic-to- decrypt/create-a-decryption-policy-rulet.

https://live.paloaltonetworks.com/t5/best-practice-assessment-blogs/the-best-practice- assessment-bpa-tool-for-ngfw-and-panorama/ba-p/248343