Situation: The client has Symantec Endpoint Protection running on Windows 2008 R2. It is failed to download the definition files.
Troubleshooting: 1. research online and it could be firewall issue.
2. The company LAN servers and workstations don’t have issue. Only the DMZ servers have this problem.
3. The client just migrated their Cisco ASA firewall to Paloalto firewall.
4. Review the Paloalto firewall settings, we find it misses s DMZ policy to allow accessing Symantec download website. Creating a firewall policy fixes the problem.