LGTV and Netflix bugs out when going through Palo Alto

[AntonHS]

Hi. 

I have worked with Palo Alto for about 15 years, but now I have run into a really weird problem at home with my lab PA-440. 

I recently changed from PA-415 to PA-440 at home, and after that, my LGTV (2024) and Netflix on my Xbox console just stopped working. The TV can connect to WiFi, but can't access internet, it's own App Store and so on.

Networkwise, everything works and the TV get's IP and all network checks is green, even DNS, but the TV itself can browse a local web server using IP, but not DNS. The DNS is 1.1.1.1 and 1.0.0.1 in the IP pool, and DNS proxy isn't solving this. 

Yesterday i made a complete reset of the firewall and manually made rules again, and after that the TV and xbox started to work again perfectly, until i installed the latest "Application and Threats" and "Antivirus", then everything breaks again. 

It won't even work even tough I created a Any Any rule for the TV. It just won't start to work.

Nothing is getting blocked, nothing is hitting threat logs, URL logs or nothing. Session and reason is valid with timeout on dns request and tcp-fin and tcp-rst-from-client with data. 

I have a public IP on the WAN interface so the firewall is the only device using NAT, and no, the network is not CG-NATed by the ISP. 

The IP of the TV is 10.10.20.20. 

Can someone help me with troubleshooting tips?

[reaper]

since the issue starts the moment you install the latest content package, my first assumtion would be something changed in one of the decoders that is breaking your netflix/lgtv 

if you roll back to an older content package, does that fix the issue again?

you may need to open a support case to have that investigated