topic Re: Firewall fails with "APT-HTTP/1.3" in useragent string, like ubuntu do during update in General Topics

Firewall fails with "APT-HTTP/1.3" in useragent string, like ubuntu do during update

mhuels — Thu, 16 Jun 2011 13:44:13 GMT

user@unix:~/kannweg> wget -d -U"nonsense APT-HTTP/1.3" www.dackel.de

fails allways with

2011-06-16 13:44:16 FEHLER 503: Service Unavailable.

user@unix:~/kannweg> wget -d -U"nonsense APT-HTTP1.3" www.dackel.de

works.

There is no log entry of this in any firewall log.

Seems to be an intolerance of the Palo Alto firewall to "APT-HTTP/1.3".

Re: Firewall fails with "APT-HTTP/1.3" in useragent string, like ubuntu do during update

pkruse — Tue, 28 Jun 2011 17:16:47 GMT

I was able to successfully run this string from my OSX laptop without issue. I would suggest viewing the counters as a starting point in troubleshooting this issue.

You can also look for the session from the CLI as well as setting up a PCap filtering on the client. If you require assistance with these steps you can find several documents on the knowledge point or if more direct assistance is required please contact support.

~Phil