What does the WildFire Submission Log severity fields "informational" or "high" mean?

What do the WildFire Submission Log severity fields "informational" or "high" mean?

• All PAN-OS
• Threat Prevention License
• (Optional) WildFire License 

The severities informed in the WildFire Submission Logs for malicious samples are to be interpreted as follows:

• Informational: The sample was blocked by a Threat Prevention feature while traversing the firewall.
• High: The sample traversed the firewall undeterred. It was later found via WildFire sandboxing that it was malicious, however, at the time it made it through the firewall undeterred either because there were no Antivirus signatures present for this sample in the firewall at the time, or no other threat Prevention feature (like File Blocking) was configured to enact a block or the AV profile is set to alert not block.

Note:

WildFire Submission Logs are post-analysis reports generated after cloud sandboxing completes. The Action field reflects only the action taken when the file was forwarded to WildFire and may not represent the firewall's final action, as other configured threat policies may intervene. To confirm the true final action taken on the session, filter Traffic and Threat logs using the connection's Session ID.

https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA14u0000008UshCAE

https://docs.paloaltonetworks.com/pan-os/9-1/pan-os-admin/monitoring/view-and-manage-logs/log-types-and-severity-levels/threat-logs#id5cea1511-a153-4005-9d5f-ab2482e838ae