Doubts with Palo Alto SDWAN CloudGenix Appliances NAT Traversal and tunnels FQDN ( Dynamic IP )

Doubts with Palo Alto SDWAN CloudGenix Appliances NAT Traversal

Hello, good evening, as always, thank you for your time and comments.

For Prisma SDWAN, in order to put together IPSEC tunnels that support SDWAN fabric, is it possible and supported To use the following points:

1- NAT traversal ? does it support it ? I mean from my HQ with my Prisma-sdwan/Cloudgenix Appliance, does it support tunnels with Palo Alto Firewalls, among other vendors, that are behind a NAT? I mean there is a device that makes a 1:1 NAT to the external IPs of these firewalls, and currently the IPSEC tunnels work, perfectly, without problems but my question is, if NAT-T is supported for these SD-WAN cases?

2- NAT Traversal/IP Dynamic IP Public IP, NAT 1:1 to Firewall external Interface

3- For the same case supports Tunnels against FQDN, example sites with DynDNS, which have IP-dynamics, which in turn, are the Palo Alto FWs and the firewalls behind a NAT ( NAT-T ), for Prisma SDWAN ?

Thanks for your comments and for the good vibes

Cheers