PA blocking windows updates?

[mattscratt]

Howdy,

Trying to figure this out. It almost seems that our pa220 is blocking windows updates. See my first pic, does session end reason threat mean it stopped the connection? I ask because I cannot get this update to download on any windows 10 pc in my environment see pic 2, it starts to download and stops at 2% then errors out. . Yet it will download at my house. 

BUT all other MS updates download fine to pc's and my wsus is getting updates just fine. So I'm trying to figure out is this the PA blocking or is it an issue with the update? 

Thanks for any input. 

[OtakarKlier]

Hello,

When viewing logs, click the page/magnifying icon in the far left column. This will show you exactly what happens. Depending on how you have the threats configured, it could have been identified and no action taken. The maginifying glass will show a lot more detail on what happened. Also check the Log Subtype column, it will also tell you what happened, i.e. end, url, deny, drop, etc.

Regards,

[OtakarKlier]

Hello,

Another thing with MS updates is that they use Akamai. This means that things gets bounced around frequently and the PAN URL/threat cannot keep up with a lot of the ways it does things. You can always try and download the patch manually, https://www.catalog.update.microsoft.com/Home.aspx .

Regards,

[BPry]

@mattscratt,

Do you have any file blocking profiles applied to the security rule allowing this traffic? By default, that also blocks the files MS updates are trying to download if applied. 

[mattscratt]

have this set up.