Panorama: device groups and hierarchy, pre-rules and post-rules, templates, template stacks, template variables and overrides

Panorama is Palo Alto's centralized management platform for many firewalls. It lets you write policy once, push it to hundreds of devices, and see logs from all of them in one place. It splits configuration into two families: device groups for policies and objects, and templates for network and device settings. Keeping these straight is essential for the exam and for avoiding a messy fleet.