OK I did find how to add this in Palo side and tested and for some reason one subnet doesn’t work.
By the way, I found this configuration process which use VTI instead of ETH for Palo and it works like that so I’ll keep as it.
Thanks anyway for your help