I'm having an issue with Nexflix not running on an iOS device behind a new PA install. Basically no filtering should happen from the PA at all; Nexflix runs fine with no PA in line.
The configuration, which has most other applications and web access working:
- PA-3020, V7.1.4-h2 with 610 definitions
- Virtualwire mode, with allow any, no profiles or URL filtering
- no QoS or Decryption
The log files show netflix-streaming or netflix-base as 'allow' but the session end reason is 'tcp-rst-from-client'. A packet capture reveals not a great for me to work on, a TLSv1.2 Encrypted Alert before the RST packets.
Any suggestions or simple gotchyas I have overlooked?