• All Community
    • All Community
    • Forums
    • Ideas
    • Blogs
Advanced

Not what you are looking for? Ask the experts!

Kudos0

Firewall blocks persitent attempts (see attached pdf)

Does anyone know what is causing this.  The firewall states that Norton is the "Target" program.  Over the last 5 days I have had 34 attacks blocked.

- Art

File Attachment: 
Words of Wisdom: ["THE ROAD TO HELL IS PAVED WITH GOOD INTENTIONS"] - Grandparents [There has never been an original thought.] - Someone, I'm sure [I've spent my whole life 'polishing turds'] - Me

Replies

Accepted Solution
Kudos1 Stats

Re: Firewall blocks persitent attempts (see attached pdf)

You're looking at Norton Product Tamper Protection events. > /solutions/v5187720_
Any item that gets too close to Norton is logged as Unauthorized access blocked.

Norton Product Tamper Protection lets you protect your Norton product from any attack or modification by unknown, suspicious, or malicious applications.

The Norton Product Tamper Protection view in the Security History window displays details about unauthorized attempts to modify Symantec processes. The tasks that your Symantec product blocks also appear in the list.

Kudos0

Re: Firewall blocks persitent attempts (see attached pdf)

Thanks for the information. (Kudos)  While I have your attention, perhaps you can help me with this one ... Many years ago, using a Win 2000 Server OS and the current (at that time) version of Norton.  I recall getting an audible 'beep' every time the firewall detected an attempted attack.  I would then check the log, trace the offending IP address and then turn them in to their ISP.  The firewall log was very detailed, enough so a text log could be sent to the ISP to take action.  It was very effective.  Is my recollection wrong and was I using a Windows firewall and not Norton's?  Does Norton 360 have the ability to audibly notify the user of such an attempt?  My preference is to have an audible notification so that I can take relatively immediate action.

- Art

Words of Wisdom: ["THE ROAD TO HELL IS PAVED WITH GOOD INTENTIONS"] - Grandparents [There has never been an original thought.] - Someone, I'm sure [I've spent my whole life 'polishing turds'] - Me
Kudos1 Stats

Re: Firewall blocks persitent attempts (see attached pdf)

Article_86: Does Norton 360 have the ability to audibly notify the user of such an attempt? 

No....Smart Firewall with APC On means you won't be prompted by FW alerts. 
You may turn off APC to be alerted for traffic by a dialog box.  No ding.
Smart Firewall / APC > info > /solutions/v15471406

With Automatic Program Control enabled, in addition to checking the characteristics of the traffic itself, the Smart Firewall also identifies the program requesting access and either allows it or blocks it, based on the trust level that Symantec has assigned to the program through actual testing.  A hash is used to prevent a malicious program from masquerading as a legitimate one. (credit SOJ)

Kudos0

Re: Firewall blocks persitent attempts (see attached pdf)

Thanks again, bjm_ -

Sounds like (pun intended) I should leave APC on.  That being said, it would be a nice feature to have available as an option (maybe later).  Another nice feature would be to integrate an optional automatic trace function for offending IP addresses.  I realize that the overall 'footprint' of Norton would be larger and it would use more resources, but most of us have machines and bandwidth now that could handle it.  I, for one, would take the time to utilize these features in my battle against injustice.  hehehe

- Art

Words of Wisdom: ["THE ROAD TO HELL IS PAVED WITH GOOD INTENTIONS"] - Grandparents [There has never been an original thought.] - Someone, I'm sure [I've spent my whole life 'polishing turds'] - Me
Kudos1 Stats

Re: Firewall blocks persitent attempts (see attached pdf)

Article_86:  Sounds like (pun intended) I should leave APC on.

Note: toggle APC will reset Firewall so, either On or Off and On is recommended.  
Yeah, connection watcher / process watcher etc.  You'll need another program.
IMO ~ they can drop TuneUp and add back Network Map.  hehehe run away

This thread is closed from further comment. Please visit the forum to start a new thread.