01-14-2016 07:21 PM
customer can not update lic through method of Retrieve license keys from license server, Maybe their ASA stop some ports.
I want to know updates.paloaltonetworks.com is using what ports. Expect someone can help me !!!
01-14-2016 08:38 PM - edited 01-14-2016 08:40 PM
It uses desitnation port 443. TCP traffic
Check if dns resolution is happening or not. You have to allow tcp port 53 for dns resolution as well. If the paloaloto update traffic goging through PA firewall then check the security policy.
Check the service route which interface is used for DNS and palo alto update. You can allow traffi coming from that interface IP going to destination port 443.
Hope this helps!
01-17-2016 09:54 AM
Also remember that this traffic will source from the mgmt interface by default.
Click Accept as Solution to acknowledge that the answer to your question has been provided.
The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!
These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!
The LIVEcommunity thanks you for your participation!
