SSH protocol seen as "SSH-2.0-PaloAltoNetworks_0.2"

This can appear when decryption is applied for SSH proxy.

If you don't intend for this traffic to be decrypted, an exception should be configured: https://docs.paloaltonetworks.com/network-security/decryption/administration/decryption-exclusions

If you do intend for the traffic to be decrypted, be sure that the client, server, and decryption configuration are configured to negotiate compatible cipher suites.

Additionally, if this is actually an SSH tunnel (instead of a typical SSH shell session), please note that SSH tunneled traffic is blocked and restricted according to the profiles configured on the firewall. Traffic is re-encrypted as it exits the firewall. More details in https://docs.paloaltonetworks.com/network-security/decryption/administration/enabling-decryption/configure-ssh-proxy