About hshah

hshah · ‎06-27-2014

HA Cable should not be greater than 100 meter.

hshah · ‎06-26-2014

Please refer following document to submit URL change request for PAN-DB. How to Submit a Mis-Categorized URL for PAN-DB

hshah · ‎06-12-2014

Hi, There is no option for ADC, ADC does application level load balancing. I dont think this is anywhere close to firewall functionalists. ADC task needs lots of processing power, its always recommended to use dedicated device for it.

hshah · ‎04-28-2014

Indeed it is

hshah · ‎04-28-2014

content 433 is available now ...

hshah · ‎02-21-2014

Hi JRanch, Please verify following things. 1. Users have all of the following permission..- I know you have mentioned users have all the permission, but please double check. Distributed com user Event log reader Server operator Domain admin WMI permission set 2. Please do tcpdump on firewall for those DC, and check what information is being exchanged. This might provide info if anything is wrong at server end. 3. Also run "netstat -n" continously on DC to see connection requests made by Firewall. Regards, Hardik Shah

hshah · ‎12-25-2013

Hi Jmurphy, By any chance is this a Global Protect or HIP issue? If yes, there might have been stale registery key, because of that Firewall is detecting 7zip on end Host. If not, where do you see vulnerability flag ? Please provide more detail on vulnerability detection by firewall. Regards, Hardik Shah

hshah · ‎12-25-2013

You can force group-mapping refresh with following command. https://live.paloaltonetworks.com/docs/DOC-3294

hshah · ‎12-25-2013

Hi Roh, By default existing group mapping is updated after 1 hour, you can change the settings. Please refer bellow mentioned document for more details. https://live.paloaltonetworks.com/docs/DOC-4994 Let me know if you have further questions. Regards, Hardik Shah

hshah · ‎12-25-2013

Hello admin@peri, Normally only local subnet..... Because User based policies are normally configured inside to outside direction. But if User based policy is configured for outside to inside network then its required to learn all the networks. Let me know if that answers the question. Regards, Hardik Shah

hshah · ‎12-25-2013

Hello Panos, Portal does custom check for HIP, hence license is required. Portal licenses are life time licenses. Gateway does HIP Notification and match, hence license is required. Gateway licenses are yearly licenses. Regards, Hardik Shah

hshah · ‎11-11-2013

There is no issue with DHCP address on WAN interface - GP is supported with that ... You can use self signed cert in Gateway/Portal, make sure you keep CN name as FQDN. GP configuration is like wizard, if you miss any detail commit will fail with an error.

hshah · ‎11-11-2013

Just configure Global Protect Gateway, that would be easier, let me know if you need any help with that.

hshah · ‎09-17-2013

Hi peterpan13888, In policy there are only 4 options to configure users "any", "known", "unknown" and "select". As per my knowledge there is no option to configure policy for "local user database", because "local user database" is design only firewall authentication. Please provide me more information how did you configure "local user database in policy". I would appreciate if you can share few screen shots. Regards, Hardik Shah

hshah · ‎09-15-2013

Hi peterpan13888, When you change active/passive configuration to active/active configuration, firewall looses active/passive configuration. Basically its new active/active failover configuration. I would suggest suspend passive unit first. Then configure existing active unit in active/active configuration. Then change configuration for suspended firewall to active/active configuration, and make it functional again. I would advice to do this in downtime. Regards, Hardik Shah

Member Since	‎02-23-2013 04:41 PM
Date Last Visited	‎01-29-2026 08:32 AM
Posts	881
Total Likes Received	187

Online Status	Offline
Date Last Visited	‎01-29-2026 08:32 AM

About hshah

Re: AWS Transit VPC -VPN with PA VM-300

Re: accessing a new Palo Alto firewall in the AWS.

Re: AWS securing outbound communication in private subnet

Re: AWS securing outbound communication in private subnet

Re: SMB Slowness via PA firewall in Azure Cloud

Re: Enable/Disable security rules via XML API

Re: How to disable ssl v3 on vpn web page?

Re: Shared Gateway with multiple virtual routers

Re: Virutal Wire Mode (transparent mode?)

Re: PDF Footer logo dimensions

Re: Monitoring BGP stats from Palo Alto/Panorama

Re: virtual system configuration

Re: Disable SSL - IPSEC only

Re: URL Filtering Order of Operations

Re: Public IPv6 DHCP Support

PAN-OS 9.0 Features: Networking and Virtualization

Re: Enable/Disable security rules via XML API

Re: How to disable ssl v3 on vpn web page?

Re: Aggregation interface on virtual wire

Re: Monitor License expiration through SNMP

Re: Recommended cable length for HA

Re: Newly registered domains - how does PANDB classify them?

Re: Application Delivery Controller

Re: New Zero-Day Exploit targeting IE9-11 CVE-2014-1776

Re: Are there signatures available for CVE-2014-1776?

Re: User-id don't read security log

Re: 7-Zip ARJ File Buffer Overflow Vulnerability(31030)

Re: About updating AD group membership

Re: About updating AD group membership

Re: best practice User-ID strategy?

Re: Why both portal and GW license for HIP ?

Re: PA-200 with DHCP assigned Internet IP and GlobalProtect using self signed certs

Re: PA-200 with DHCP assigned Internet IP and GlobalProtect using self signed certs

Re: Local user authentication

Re: Active passive to active active mode

Unlock your full community experience!

About hshah