The PA-220 struggles with large policy sets (>5,000 rules). Perform a manual restart of the management plane :

The PA-220 rebooted. The orange light blinked. Then stayed orange.

Here’s a short story based on the prompt

Navigating the tabs can feel sluggish. The limited CPU and RAM of the PA-220 are clearly being pushed to their limits by the modern, feature-rich OS. 3. Software Lifecycle (Grade: B-)

Before initiating a firmware update on a PA-220, several preparatory steps are essential. First, always export and save a named configuration snapshot. This ensures that the firewall can be restored if the update fails. Second, verify that the device has sufficient disk space; the PA-220 has limited onboard storage compared to larger models, and old software images should be deleted to make room for new ones. Finally, review the release notes for the specific firmware version. These notes contain "Known Issues" and "Changes in Behavior" that might affect specific network configurations, such as VPN tunnels or complex routing protocols. Troubleshooting Common Issues

She’d once reverse-engineered a router in a similar situation, ten years ago, in a different country with a different name. She found a logic analyzer, clipped leads to the test points, and watched the serial output stream in hex.