How can I configure application-layer DDoS protection on a Palo Alto Networks firewall?

Application-layer DDoS protection is configured using Application Command Center (ACC) and Security Policies. ACC identifies and protects critical applications. Security Policies can then be created to enforce rate limits, block malicious bots, and inspect traffic for anomalous behavior specific to those applications. Custom signatures can also be created to detect and block specific attack patterns.