cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 

Who Me Too'd this topic

Netflix iOS tcp-rst-from-client

L2 Linker

I'm having an issue with Nexflix not running on an iOS device behind a new PA install. Basically no filtering should happen from the PA at all; Nexflix runs fine with no PA in line.

 

The configuration, which has most other applications and web access working:

 

  • PA-3020, V7.1.4-h2 with 610 definitions
  • Virtualwire mode, with allow any, no profiles or URL filtering
  • no QoS or Decryption

The log files show netflix-streaming or netflix-base as 'allow' but the session end reason is 'tcp-rst-from-client'. A packet capture reveals not a great for me to work on, a TLSv1.2 Encrypted Alert before the RST packets.

 

Any suggestions or simple gotchyas I have overlooked?

 

 

Who Me Too'd this topic