Where does a user assign a tag group to a policy rule in the policy creation window?

In the Palo Alto Networks PAN-OS interface, the General tab of the Security Policy Rule creation window is used to configure the fundamental attributes of the rule. This includes the rule's name, description, rule type (e.g., intrazone, interzone), and the assignment of tags. Tags are metadata labels used for organization, filtering, and as criteria for Dynamic Address Groups, making the General tab the correct location for their assignment.

A. Application tab: This tab is used to specify the application or application group that the policy rule will match, not for assigning tags.
C. Actions tab: This tab defines the enforcement action (allow/deny), logging options, and the attachment of Security Profiles to the rule.
D. Usage tab: This tab displays rule statistics, such as hit count and last hit timestamp, and is not used for configuration.

1. Palo Alto Networks. (2023). PAN-OS® Administrator’s Guide 10.2. In the "Security Policy" chapter, the section "Create a Security Policy Rule" details the configuration steps. The description for the General tab explicitly lists "Tags" as a field where you can "Select the tags you want to assign to the rule."

2. Palo Alto Networks. (2023). PAN-OS® Web Interface Reference Guide 10.2. Under "Policies > Security," the guide provides a detailed breakdown of the Security Policy Rule dialog box. The screenshot and accompanying table for the General tab clearly show the "Tags" field as a primary component for rule identification and organization.