Download and update problem

[dimat]

hello,

i have PA-2020 v3.1.6 that install between CP and backbone switch,

while my users try to do ms-update or download big size file, my PA stop the session after then complete about 25%

Maybe anyone recognize this issue ?  

[swhyte]

The PA may have detected a threat or a file type that you are blocking or QOS may be throttling the session (that is if you have QOS configured). To aid in isolating you can create a policy for these sessions and not add a profile to the policy. If the downloads are still stopping, you can call in to support to aid in troubleshooting this.

thanks,

Stephen 

[mrajdev]

Are you using IE browser to download the MS-Update? If you are then can you please try firefox or Chrome, as I have seen this issue when IE was used to download the MS-Update.

Hope this helps.

Thanks

[bhavin_bhatt]

Hi mrajdev,

microsoft updates are usually triggered by the operating sytem, so no browsers involved.

Cheers

Bhav

[bryan]

Hello Bhav,

Can you confirm via Monitor->Traffic & Monitor->Threat whether discards/resets/drops, etc... are occurring during the time of the updates?

You could also manually launch a windows update from the client (Browser or Start->All Programs->Windows Update), then either filter the source IP of the client via the WebUI/Monitor Tab ( addr.src in x.x.x.x ) or via a session trace from CLI:

show session all filter source <ip>

(Keep pressing Up Arrow & Enter & verify session status ACTIVE, DISCARD, etc…)

You can also apply a similar filter to the URL filtering logs as well in the WebUI (Monitor->URL Filtering) as you may have a blocked category that happens to be hosting content (i.e., content-delivery-networks) that is being referenced/pulled from an external sites during update downloads.

Regards,

Bryan

[bhavin_bhatt]

Hi Bryan,

Thanks for the update. i have now allowed everything through a single server, which will then deploy updates to the rest of the PCs...

thanks for the response again.

Cheers

Bhav