https://docs.paloaltonetworks.com/globalprotect/5-2/globalprotect-app-new-features/new- features-released-in-gp-app/connect-before-logon

To apply tags automatically based on User-ID logs, the engineer must configure a Log Forwarding profile that specifies the criteria for matching the logs and the tags to apply. The Log Forwarding profile can be attached to a security policy rule or a decryption policy rule to enable auto-tagging for the traffic that matches the rule. The tags can then be used for dynamic address groups, policy enforcement, or reporting1. References: Use Auto-Tagging to Automate Security Actions, PCNSE Study Guide (page 49)

Provides configuration logging and reporting functions on a separate processor RAM. and hard drive -> Management plane Steam-based uniform signature matching including vulnerability exploits (IPS) virus. spyware. CC#.
and SSN -> Signature matching
High-density parallel processing for flexible hardware acceleration for standardized complex functions
-> Security processing
Hardware-accelerated per-packet route lookup MAC lookup and NAT -> Network processing