https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClomCAC
By default, all the traffic destined between two zones, regardless of being from the same zone or different zone, this applies the rule to all matching interzone and intrazone traffic in the specified source and destination zones.

The GlobalProtect pre-logon connect method is a feature that enables GlobalProtect to authenticate the agent and establish the VPN tunnel to the GlobalProtect gateway using a pre- installed machine certificate before the user has logged in.

https://docs.paloaltonetworks.com/vm-series/9-1/vm-series-deployment/bootstrap-the-vm-series- firewall/prepare-the-bootstrap-package

Priority - Click and select a priority to assign it to a class:
- real-time
- high
- medium
- low
When contention occurs, traffic that is assigned a lower priority is dropped. Real-time priority uses its own separate queue.

Explanation:
https://docs.paloaltonetworks.com/globalprotect/10-1/globalprotect-admin/globalprotect- overview/about-the-globalprotect-components