Ignore DF (don’t fragment) Bit (Available
with PAN-OS 9.1.3 and later releases) | You can configure the firewall globally
to fragment IPv4 packets when the DF (don't fragment) bit is set
for packets that exceed the egress interface maximum transmission
unit (MTU). This feature is applied to Layer 3 and tunnel interfaces
when enabled through the CLI. | 
