palo alto firewall features: apply policy based on AD user or group membership block/apply protocols rather than ports (allow ssh doesn't care what port ssh r

palo alto firewall features: apply policy based on AD user or group membership block/apply protocols rather than ports (allow ssh doesn't care what port ssh runs on) advanced url categorization. allow Facebook but disallow Facebook chat etc