You can tag objects to group related items and add color
to the tag in order to visually distinguish them for easy scanning.
You can create tags for the following objects: address objects,
address groups, user groups, zones, service groups, and policy rules.
You can apply one or more tags to objects and to policy rules,
up to a maximum of 64 tags per object. Panorama supports a maximum
of 10,000 tags, which you can apportion across Panorama (shared
and device groups) and the managed firewalls (including firewalls
with multiple virtual systems).