Which Device Group option is assigned by default in Panorama whenever a new device group is created to manage a Firewall?