About hshah

Hi Biglr0n, Please find Configuration Guide Description for "Tag Allowed" field : Enter the tag number (0 to 4094) or range of tag numbers (tag1-tag2) for the traffic allowed on the virtual wire. A tag value of zero indicates untagged traffic (the default). Multiple tags or ranges must be separated by commas. Traffic that has an excluded tag value is dropped. Note that tag values are not changed on incoming or outgoing packets.When utilizing virtual wire subinterfaces, the Tag Allowed list will cause all traffic with the listed tags to be classified to the parent virtual wire. Virtual wire subinterfaces must utilize tags that do not exist in the parent's Tag Allowed list. Which means you have to enter value 0-4094 to allow tagged and all tagged frames. Let me know if this helps. Regards, Hardik Shah ... View more

Hi Martin, Is Victim a Domain Controller? If you dont expect a SIP traffic on Domain controller than do further investigation. Regards, Hardik Shah ... View more

Hi martinriveran, Do you trust source and destination of VOIP traffic. If yes, this might be a potential false positive and you can ingore it. Regards, Hardik Shah ... View more

Hi MBS, It takes egress interface of PBF rule. In this case its Circuit Bs Egress interface. Kindly refer following diagram. Where is Policy Based Forwarding (PBF) Monitoring Traffic Sourced From? Regards, Hardik Shah ... View more

Hi SDorsey, VPN Tunnel is initiated in two circumstances. 1. In case of interested traffic. >>>>>>>>>>>>>Sorry for Cisco Jargon. 2. By using a Test vpn command. Now it stays up until SAs life time. Cisco also behaves in exactly same way. If there is a traffic than it stays up and remains up until SA expires. Inbetween if you want to terminate it than clear flows. Could you please tell me more specific information on "On demand" word. Regards, Hardik Shah ... View more

Hi Yik, PANW doesnt honor DSCP marking forwarded from upstream. For more information refer following article. DSCP Honoring We have a open FR for the same, please ask your SE to vote on your behalf. Priority: Low FR ID: 580 Regards, Hardik Shah ... View more

Hi Yik, Following documents might help. Setting Priority through DSCP for QOS on the Palo Alto Networks Firewall What DSCP Markings are Available on the Palo Alto Networks Firewall? Regards, Hardik Shah ... View more

Hi Panlst, That is corrrect, you can either allow or block web-based email. As of now there is no App to block just "send email". I didnt find any FR too. Contact your SE to help with FR on this. Regards, Hardik Shah ... View more

Hi Bdunbar, API is turn ON by default. Its something with API string. Regards, Hardik Shah ... View more

Hi Dthi, Did you use "No-captive-Portal" option along with custom URL for that website.? If not try following steps. 1. Create custom URL for that website. 2. Create a captive portal policy with that custom URL. and configure it for "No-captive-Portal" . Let me know if that helps. Regards, Hardik Shah ... View more

Hi Arnljot, In this case split tunneling should work. This appears to be a bug so far. But I dont have any configuration or logs to verify the same. Regards, Hardik Shah ... View more

Hi Mbs, None of the process is over utilized, hence logically I cant ask for process restart. Do you see any error logs in routed daemon. less mp-log routed.log Regards, Hardik Shah ... View more