topic Re: Download and update problem in General Topics

Download and update problem

dimat — Tue, 28 Jun 2011 13:52:30 GMT

hello,

i have PA-2020 v3.1.6 that install between CP and backbone switch,

while my users try to do ms-update or download big size file, my PA stop the session after then complete about 25%

Maybe anyone recognize this issue ?

Re: Download and update problem

swhyte — Mon, 04 Jul 2011 13:47:13 GMT

The PA may have detected a threat or a file type that you are blocking or QOS may be throttling the session (that is if you have QOS configured). To aid in isolating you can create a policy for these sessions and not add a profile to the policy. If the downloads are still stopping, you can call in to support to aid in troubleshooting this.

thanks,

Stephen

Re: Download and update problem

mrajdev — Tue, 05 Jul 2011 14:02:30 GMT

Are you using IE browser to download the MS-Update? If you are then can you please try firefox or Chrome, as I have seen this issue when IE was used to download the MS-Update.

Hope this helps.

Thanks

Re: Download and update problem

bhavin_bhatt — Tue, 05 Jul 2011 14:12:54 GMT

Hi mrajdev,

microsoft updates are usually triggered by the operating sytem, so no browsers involved.

Cheers

Bhav

Re: Download and update problem

bryan — Wed, 06 Jul 2011 03:35:51 GMT

Hello Bhav,

Can you confirm via Monitor->Traffic & Monitor->Threat whether discards/resets/drops, etc... are occurring during the time of the updates?

You could also manually launch a windows update from the client (Browser or Start->All Programs->Windows Update), then either filter the source IP of the client via the WebUI/Monitor Tab ( addr.src in x.x.x.x ) or via a session trace from CLI:

show session all filter source <ip>

(Keep pressing Up Arrow & Enter & verify session status ACTIVE, DISCARD, etc…)

You can also apply a similar filter to the URL filtering logs as well in the WebUI (Monitor->URL Filtering) as you may have a blocked category that happens to be hosting content (i.e., content-delivery-networks) that is being referenced/pulled from an external sites during update downloads.

Regards,

Bryan

Re: Download and update problem

bhavin_bhatt — Wed, 06 Jul 2011 09:02:47 GMT

Hi Bryan,

Thanks for the update. i have now allowed everything through a single server, which will then deploy updates to the rest of the PCs...

thanks for the response again.

Cheers

Bhav