How does Saasyan Paximus reach the primary and secondary Palo Alto Networks® Next Generation Firewalls?

Directly over the Internet or via an agent installed on premise.