This website uses Cookies. By clicking Accept, you agree to the storing of cookies on your device to enhance your community and translation experience. Read our Privacy Policy.
Click Preferences to customize your cookie settings.
Accept
Reject
Preferences

About hshah

cancel
Turn on suggestions
Showing results for 
Show  only  | Search instead for 
Did you mean: 
hshah
‎03-26-2025
since ‎02-23-2013
L6 Presenter
User Activity
User Profile
Latest posts by hshah
View All
My Liked Posts
View All
User Badges
Community Statistics
Member Since ‎02-23-2013 04:41 PM
Date Last Visited ‎03-26-2025 12:02 PM
Posts 881
Total Likes Received 187

Re: AWS Transit VPC -VPN with PA VM-300

by in VM-Series in the Public Cloud
‎08-06-2018 09:40 AM
‎08-06-2018 09:40 AM
Please refer to the following document. Its 2000 for PAN-Os 8.0.x. I think AWS has some limitation on how may route it can learn over IPsec. In that case, you may want to advertise just default route from PANW firewall.   https://www.paloaltonetworks.com/documentation/80/pan-os/newfeaturesguide/virtualization-features/vm-series-firewall-performance-enhancements/vm-series-model-capacity-and-performance.html#idfc206fb5-455c-4c2d-87d7-20378118fccd ... View more

Re: accessing a new Palo Alto firewall in the AWS.

by in VM-Series in the Public Cloud
‎01-29-2018 04:56 AM
‎01-29-2018 04:56 AM
Steps look correct, it should work.   Please focus on following part. 1. Make sure key is properly converted with putty.gen 2. Make sure that key is associated in putty from "Auth" option.   Let me know if this helps. ... View more

Re: AWS securing outbound communication in private subnet

by in VM-Series in the Public Cloud
‎01-22-2018 02:02 PM
‎01-22-2018 02:02 PM
Hi Foobar,   You can create custom URL and allow internet traffic for those URL for a specific subnet.   Please refer the following doc. https://live.paloaltonetworks.com/t5/Configuration-Articles/How-to-Create-Custom-URL-Categories/ta-p/54355   -- Hardik Shah     ... View more

Re: SMB Slowness via PA firewall in Azure Cloud

by in VM-Series in the Public Cloud
‎11-28-2017 01:13 PM
‎11-28-2017 01:13 PM
How is East and West Azure connected?    Are they connected via IPsec? Is IPsec terminated on the firewall?   Is there an Express Route between East and West region? ... View more

Re: Enable/Disable security rules via XML API

by in Automation/API Discussions
‎05-07-2015 12:40 PM
‎05-07-2015 12:40 PM
Great Answer ... ... View more

Re: How to disable ssl v3 on vpn web page?

by in General Topics
‎03-27-2015 10:28 AM
1 Kudo
‎03-27-2015 10:28 AM
1 Kudo
Hi Choffr, You can not disable any encryption algorithm on PANW firewall. You can either disable on client or server. You can block it via custom application/signature, but its not going to help. Because client will keep on try to connect on those algorithms which will result in failure attempts. Regards, Hardik Shah ... View more

Re: Shared Gateway with multiple virtual routers

by in General Topics
‎03-26-2015 12:10 PM
‎03-26-2015 12:10 PM
Hi Riverj, It worked for me in single-VR, I didnt find any reference where its configured in multi-vr environment. Regards, Hardik Shah ... View more

Re: Virutal Wire Mode (transparent mode?)

by in General Topics
‎03-23-2015 01:07 PM
‎03-23-2015 01:07 PM
Hi Jharlow, Let me know if you come across any issue. Regards, Hardik Shah ... View more

Re: PDF Footer logo dimensions

by in General Topics
‎03-23-2015 12:58 PM
‎03-23-2015 12:58 PM
Hi Dz3015, I just tried in LAB, it works just fine, I think original image might have error in pixel. I used ms-paint to adjust pixels. Let me know if that helps. Else provide me image what you are using, I will try out in LAB. Regards, Hardik Shah ... View more

Re: PDF Footer logo dimensions

by in General Topics
‎03-23-2015 12:36 PM
1 Kudo
‎03-23-2015 12:36 PM
1 Kudo
Hello Dz3015, Please follow bellow instructions to find recommended dimension. Basically you need to click on preview button. Preview buttons are in RED Square.  Let me know if that helps. Regards, Hardik Shah ... View more

Re: Virutal Wire Mode (transparent mode?)

by in General Topics
‎03-23-2015 11:50 AM
1 Kudo
‎03-23-2015 11:50 AM
1 Kudo
Hi Jharlow, It does passes IKE/IPsec packets, you dont have to worry about that. You are good to go for VPN traffic. Let me know if this helps. Regards, Hardik Shah ... View more

Re: Virutal Wire Mode (transparent mode?)

by in General Topics
‎03-23-2015 11:23 AM
‎03-23-2015 11:23 AM
Hi Jahrlow, Vwire is very much similar to "Transparent mode" in Cisco, however Vwire doesnt mantain any ARP or MAC table unlike to transparent mode. Vwire takes packet from one interface and forwards it to second interface. For this forwarding mechanism, it doesnt not check ARP or MAC table. Your idea of implementation looks good to me. Make sure all provide are in Alert mode, and you are logging all kind of traffic. Which means you should have default "deny any any" rule at the end which does logging. Regards, Hardik Shah ... View more

Re: Zero Access question

by in General Topics
‎03-23-2015 11:12 AM
‎03-23-2015 11:12 AM
Hi Fred, In Threat log direction should be "server-to-client", if yes. Than it means attacker is on internet. If you think its a false positive, than you might want to create exception for that. Let me know if you need any help with that. Regards, Hardik Shah ... View more

Re: SSLMGR-cert-ocsp-verify-failed error

by in General Topics
‎03-23-2015 10:58 AM
‎03-23-2015 10:58 AM
Hi Mel Li, OCSP is query/response protocol. Did you confirm firewall can reach OCSP server without issue. I would suggest to do packet capture to verify the same. Regards, Hardik Shah ... View more
Register or Sign-in
Contact Me
Online Status
Offline
Date Last Visited
‎03-26-2025 12:02 PM
Latest Tags
No tags yet
Likes Given To
View All
Likes From
View All
LEGAL NOTICES
RESOURCES
Khoros awards 2022
Copyright 2007 - 2025 - Palo Alto Networks