That the Palo/Pano can't email alert me to certain events. For instance, if I have an emergency admin account that should never be logged in with and yet suddenly it is the system should be able to send me an email saying, "Hey, account911 just logged in" or if I want to know if a particular rule has been enabled for more than a week have the system send me an email. But heck if I can find anything on the box that will do that.
top of page
bottom of page
That first part should be achievable by setting a log forwarding rule in system logs with a filter for that username