https://docs.paloaltonetworks.com/pan-os/11-0/pan-os-new-features/networking-features/web- proxy

https://docs.paloaltonetworks.com/pan-os/11-0/pan-os-admin/policy/use-auto-tagging-to- automate-security-actions

When importing a pre-configured firewall configuration to Panorama, you need to perform the following steps:
Add the serial number of the firewall under Panorama > Managed Devices In Panorama, import the firewall's configuration bundle under Panorama > Setup > Operations > Import device configuration to Panorama Make changes to the imported firewall configuration within Panorama Commit the changes you made to Panorama Perform an Export or push Device Config Bundle operation under Panorama > Setup > Operations The Export or push Device Config Bundle operation allows you to push a complete configuration bundle from Panorama to a managed firewall without duplicating local configurations. This operation ensures that any local settings on the firewall are preserved and merged with the settings from Panorama.

https://docs.paloaltonetworks.com/pan-os/11-0/pan-os-new-features/networking-features/web- proxy

NAT oversubscription is a feature that allows you to reuse a translated IP address and port for multiple source devices. This can help you conserve public IP addresses and increase the number of sessions that can be translated by a NAT rule.