VENDOR	PaloAltoNetworks	25461
BEGIN-VENDOR	PaloAltoNetworks
ATTRIBUTE	PaloAlto-Admin-Role	1	string	BOTH	#A default (dynamic) administrative role name or a custom administrative role name on the firewall.
ATTRIBUTE	PaloAlto-Access-Domain	2	string	BOTH	#The name of an access domain for firewall administrators (configured in the Device > Access Domains page). Define this VSA if the firewall has multiple virtual systems.
ATTRIBUTE	PaloAlto-Panorama-Admin-Role	3	string	BOTH	#A default (dynamic) administrative role name or a custom administrative role name on Panorama.
ATTRIBUTE	PaloAlto-Panorama-Access-Domain	4	string	BOTH	#The name of an access domain for Device Group and Template administrators (configured in the Panorama > Access Domains page).
ATTRIBUTE	PaloAlto-User-Group	5	string	BOTH	#The name of a user group that an authentication profile references
ATTRIBUTE	PaloAlto-User-Domain	6	string	BOTH	#Don?t specify a value when you define these VSAs.
ATTRIBUTE	PaloAlto-Source-IP	7	string	BOTH	#Don?t specify a value when you define these VSAs.
ATTRIBUTE	PaloAlto-PaloAlto-Client-OS	8	string	BOTH	#Don?t specify a value when you define these VSAs.
ATTRIBUTE	PaloAlto-Client-Hostname	9	string	BOTH	#Don?t specify a value when you define these VSAs.
ATTRIBUTE	PaloAlto-GlobalProtect-Version	10	string	BOTH	#Don?t specify a value when you define these VSAs.
END-VENDOR	PaloAltoNetworks