Specifications include, but are not limited to: The vendor shall review existing Palo Alto product installations for adherence to best practices for HCUS use cases. The vendor shall evolve existing Palo Alto product installations to incorporate application awareness following Palo Alto’s best practices and HCUS requirements. The vendor shall educate HCUS on architectural and operational aspects of Palo Alto next generation firewall features including applications. The vendor shall define Palo Alto’s best practice guidelines for "single pass" rule base including Uniform Resource Locator (URL) filtering, layer 4, application, geographic, list based, and Active Directory (AD) group/user based rules including exceptions.