You may use a custom signature with this context to specify above which compression ratio you may want to alert or block. https://docs.paloaltonetworks.com/pan-os/u-v/custom-app-id-and-threat-signatures/custom-application-and-threat-signatures/custom-signature-contexts/integer-contexts/panav-rsp-zip-compression-ratiio.html
... View more