What is the exact packet flow when a user attempts to access an external website through a Palo Alto firewall?