Apm session variables

Hi   I'm trying to create a new "Network Access" type APM policy to connect people to office network. So far, policy built and working. But, (always there is a "but") the firewall (Palo Alto) be...