Palo Alto tip: If you create tags with the names of your interfaces and give them nice colors, your security and NAT policies look like this : sysadmin
Multi-site with Cross-VC NSX and Palo Alto Networks Security | Network and Security Virtualization | VMware