Situation: The client has a problem to download Windows update, even they try to download it manually.
Troubleshooting: we find they just replace their Cisco ASA firewall with Palo Alto firewall. There are the troubleshooting steps.
1. We resolved the URL From where updates were being downloaded to 134.170.51.186.
2. Checked on Firewall and saw that traffic was allowed to this URL and few sessions were identified as incomplete and few as web-browsing.
3. Created a security policy with no Security Profiles and we were able to download Microsoft Updates.
4. Checked Data Filtering Logs an saw that PE File type is blocked.
5. Removed PE from blocked file types and we were able to download Microsoft Updates.
