• All Community
    • All Community
    • Forums
    • Ideas
    • Blogs
Advanced

Not what you are looking for? Ask the experts!

Kudos0

I Don't Understand == Open Port 554 Again Only With NS

I don't get it . I do not understand this.

Today I had two other security suites Installed: Emisoft Internet Security 9 and Bit Defender Total Security 2015 Multi-Device.

I uninstalled EMIS 9 becaue I wanted to try BD TS 2015 MD again. It had been telling me that the one year license I got conned into buying due to the big splash it made with it's "Brain" Technology, which it turns out is nothing new, and EMIS 9, while blocking all Ports was only Stealthing a handful. For the past 3 weeks BD TS 2015 MD had been telling me that the one year license I purchased on Dec. 5, 2014 had expired after 5 weeks. That situation was fixed today.

EMIS 9 is uninstalled only with the Windows Control Panel Uninstall. There is an EMI Clean, but that is to be used only in special cases.

I Installed BD TS 2015 MD. It Stealthed  All Ports and Port 554 was not open. I Uninstalled BD TS 2015 MD with both the Windows Uninstaller and with the BD Removal Tool. I did that because I was getting ridiculously slow frame rates in a game I sometimes play. I am not certain yet if it was because of BD TS 2015 MD or not.

I have know reinstalled NS. All Ports Are Stealthed with the exception of that damn Port 554 which is Open Again. I have not yet checked my gaming frame rates.

This always happens with NS and as of yet, no one has been able to offer an explanation or a working solution as to how too close it.

The last time it happened bjm gave me some reassurance that having an open port is not the end of the security world and only means that some service I have yet been able to identify is using that Port.

BTW: There is a new and very serious unpatched vulnerability in Adobe Flash. Adobe is expected to be issuing a patch some time this week. This new zero-day vulnerability is so wide-spread and considered to be so dangerous that is recommended that you disable your Adobe Flash Player until the new zero-day exploit is patched. That is easy to do in FireFox. I have yet to figure out how to do it with IE11.

As of last evening, as far as I know, the only Security Program that has made it known that it is able to detect and block it is Trend Micro's Deep Analysis Enterprise Software. It was Trend Micro that discovered the Flash Vulnerability and exploit.

Just a heads up.

Replies

Kudos1 Stats

Re: I Don't Understand == Open Port 554 Again Only With NS

From Microsoft:

"Ports Description

In: TCP on port 80, 554, and 1755 The Windows Media server uses the TCP In ports to accept an incoming HTTP connection (port 80), an RTSP connection (port 554), or an MMS connection (port 1755) from Windows Media Player and other clients."

" Port: The Windows Media Player client communicates across random ports as designated by the operating system. The server port is a "well-known port" as follows:

  • Transmission protocol and port: The transmission protocol is HTTP and the port is 80.

  • Real Time Streaming Protocol (RTSP) UDP or TCP: The port number is 554.

  • Microsoft Media Server (MMS) UDP or TCP: The port number is 1755. "

My guess is that NS considers to allow the connection, because it's enabled by user.

Now, it's one thing the term "open" and another the term "stealthed".

You should contact Symantec, for the stealth status, the open status is normal if, in use. (background or not) and probably monitored by NS.

Open also an elevated cmd and type: netstat -ano and check what PID is using port 554, and connection status. I have RTSP disabled and port 554 is closed.

Play also with NS firewall and RTSP,, disable Homegroup in Windows, if not needed and disable RTSP in WMP.

If no joy, I'll provide some extra steps, not needed for now.

Kudos2 Stats

Re: I Don't Understand == Open Port 554 Again Only With NS

Hello hok

The instructions on how to disable adobe flash player in IE is in this article. The article is old, but it still applies to IE 11 also. You should be able to follow this instructions ok.

http://www.zdnet.com/article/protect-yourself-from-flash-attacks-in-internet-explorer/

Here is an old Forum thread from the old Forum asking the same question.

http://community.norton.com/en/forums/port-554-opened-nis-2011  There are some questions and suggestions offered in this thread although no particular post is marked as the solution. That thread is closed since it's such an old thread. This question does seem to be asked every year almost by someone it seems.

Success always occurs in private and failure in full view. Windows 10 Pro 64 bit Norton Core Security Plus 22.17.3.50 Core Firmware 282 I E 11 Chrome latest version.
Kudos0

Re: I Don't Understand == Open Port 554 Again Only With NS

Thank You Apostolos and floplot :-)

I used TCP View to try to determine what service might be using my open port 554. TCP View lists all your programs and services that use a port and I see none that uses Port 554.

I used Windows Media Player to watch a Streaming Video from the net. There was no indication the Port 554 was used by Windows Media Player. (Does porn use Port 554 on WMP?)

I'm not certain that the statement that it is open because I have enabled it is accurate. I see no program or service listed in TCP view that uses that port. Perhaps TCP View is not he correct tool to investigate this. Dunno. My knowledge of such matters is little to none,

According to Shields Up the Port 554 is open and not stealthed (It is shown as a red block) and all other ports are steathled (shown by a green block)

I'm not a DOS guy and have no idea how to or what an  "Open also an elevated cmd and type: netstat -ano" is or how to do that.

LOL :-) What is a PID ??

I have no networks in my home. I am on a private network that has one PC connected to it.

How do I disable RTSP??  :-) Task Manager? I also have installed a utility that shows all servicees on your PC and allows you to prevent one from working-I'll try that. Don't ask. I'd be ashamed to tell you which utility it is :-)

I guess I can figure out a way to "play with NS Firewall" :-) LOL  cmd prompt: hello NS would you like to play a game of chess?

(I must have watched the movie "War Games" at least 10 times in my life, second only to "The Hunt for Red October" :-))

Thanks floplot for your link on how to disable Adobe PatchPlayer in IE :-)

Dunno. LOL. Open Port  554 is making me even more nutz than I was before.

I'll see what I can do.

Thanks Again.

Kudos2 Stats

Re: I Don't Understand == Open Port 554 Again Only With NS

Hok,

Try this and let us know what happens;

Open NS > Settings > Firewall > Network Trust > Configure > change it to Public > Apply.

Reboot and test again.

A little bit of knowledge is... well a little bit of knowledge.
Kudos0

Re: I Don't Understand == Open Port 554 Again Only With NS

Apostolos:

From Microsoft:

"Ports Description

In: TCP on port 80, 554, and 1755 The Windows Media server uses the TCP In ports to accept an incoming HTTP connection (port 80), an RTSP connection (port 554), or an MMS connection (port 1755) from Windows Media Player and other clients."

" Port: The Windows Media Player client communicates across random ports as designated by the operating system. The server port is a "well-known port" as follows:

  • Transmission protocol and port: The transmission protocol is HTTP and the port is 80.

  • Real Time Streaming Protocol (RTSP) UDP or TCP: The port number is 554.

  • Microsoft Media Server (MMS) UDP or TCP: The port number is 1755. "

My guess is that NS considers to allow the connection, because it's enabled by user.

Now, it's one thing the term "open" and another the term "stealthed".

You should contact Symantec, for the stealth status, the open status is normal if, in use. (background or not) and probably monitored by NS.

Open also an elevated cmd and type: netstat -ano and check what PID is using port 554, and connection status. I have RTSP disabled and port 554 is closed.

Play also with NS firewall and RTSP,, disable Homegroup in Windows, if not needed and disable RTSP in WMP.

If no joy, I'll provide some extra steps, not needed for now.

OK :-))))))))))

I did not realize it but Windows Media Player Network Sharing was in my start-up menu. Blocked it and my Port 554 is now CLOSED and STEALTHED :-)))

Thank You Apostolos: !!!!!!!!!!!

Kudos0

Re: I Don't Understand == Open Port 554 Again Only With NS

Krusty13:

Hok,

Try this and let us know what happens;

Open NS > Settings > Firewall > Network Trust > Configure > change it to Public > Apply.

Reboot and test again.

Hi Krusty :-)

Thank you for taking the time to come up with and write a possible alternative solution for my open port problem. But I never got to try it as the problem was resolved by another method.

Kudos1 Stats

Re: I Don't Understand == Open Port 554 Again Only With NS

Hi, hok. This is from the Norton KB on network settings, which is why Krusty13 suggested the Public setting.

I have my network set to Public for that reason. Following quote from Symantec-----

Adds the network to the Public list.

Your Norton product blocks files, folders, media, and printer sharing, and remote desktop connections with other devices over the network by default.

To share files, folders, media, and printers and set up remote desktop connection with devices over the network you can configure the Traffic Blocking Exceptions setting.

You are protected from known attacks and all unexpected traffic.

Windows 10 Home X 64
Kudos0

Re: I Don't Understand == Open Port 554 Again Only With NS

F4E:

Hi, hok. This is from the Norton KB on network settings, which is why Krusty13 suggested the Public setting.

I have my network set to Public for that reason. Following quote from Symantec-----

Adds the network to the Public list.

Your Norton product blocks files, folders, media, and printer sharing, and remote desktop connections with other devices over the network by default.

To share files, folders, media, and printers and set up remote desktop connection with devices over the network you can configure the Traffic Blocking Exceptions setting.

You are protected from known attacks and all unexpected traffic.

 Thanks for the explanation F4E: I'll give it a try :-)

Kudos0

Re: I Don't Understand == Open Port 554 Again Only With NS

@ all,

If you're on a private LAN, the correct setting is private, public is when you are on a public or shared computer, if you set your network settings to private and look at NS History, you will see that NS is smart enough to convert your connection to a protected status.

When the adapter is in use, NS uses the private setting and converts the network status to public & protected & monitored.

You can use whatever setting you wish, I just mentionned the correct settings for private LAN's/wireless which is private.

@ hok,

If you disable WMP Network Sharing service you must also disable in Services:

UpnP Device Host  &

SSDP Discovery

cause these 3 services are dependent on each other and if you only disable WMP Network Sharing, you will get a bunch of errors in Event Viewer.

Cheers,

Kudos0

Re: I Don't Understand == Open Port 554 Again Only With NS

floplot:

Hello hok

The instructions on how to disable adobe flash player in IE is in this article. The article is old, but it still applies to IE 11 also. You should be able to follow this instructions ok.

http://www.zdnet.com/article/protect-yourself-from-flash-attacks-in-internet-explorer/

Here is an old Forum thread from the old Forum asking the same question.

http://community.norton.com/en/forums/port-554-opened-nis-2011  There are some questions and suggestions offered in this thread although no particular post is marked as the solution. That thread is closed since it's such an old thread. This question does seem to be asked every year almost by someone it seems.

"Current Update

Microsoft recommends that customers apply the current update immediately using update management software, or by checking for updates using the Microsoft Update service. Since the update is cumulative, only the current update will be offered. Customers do not need to install previous updates as a prerequisite for installing the current update.

On February 5, 2015, Microsoft released an update (3021953) for Internet Explorer 10 on Windows 8, Windows Server 2012, Windows RT, and for Internet Explorer 11 on Windows 8.1, Windows Server 2012 R2, Windows RT 8.1, Windows Technical Preview, and Windows Server Technical Preview. The update addresses the vulnerabilities described in Adobe Security bulletin APSB15-04. For more information about this update, including download links, see Microsoft Knowledge Base Article 3021953.

  •  

    Note Updates for Windows RT, Windows RT 8.1, Windows Technical Preview, and Windows Server Technical Preview are available via Windows Update. "

  •  

Adobe has today announced a similar update.

I had my FF Fash Player disabled. When I enabled I saw it had been updated through Adobes Auto-Update Feature which I  enabled when I installed Flash for FF. The correct current version is 16,0,0,305

Kudos1 Stats

Re: I Don't Understand == Open Port 554 Again Only With NS

Apostolos:

@ all,

If you're on a private LAN, the correct setting is private, public is when you are on a public or shared computer, if you set your network settings to private and look at NS History, you will see that NS is smart enough to convert your connection to a protected status.

When the adapter is in use, NS uses the private setting and converts the network status to public & protected & monitored.

You can use whatever setting you wish, I just mentionned the correct settings for private LAN's/wireless which is private.

@ hok,

If you disable WMP Network Sharing service you must also disable in Services:

UpnP Device Host  &

SSDP Discovery

cause these 3 services are dependent on each other and if you only disable WMP Network Sharing, you will get a bunch of errors in Event Viewer.

Cheers,

Hi Apostolos,

If I am not sharing files between computers I will leave my Network Trust set at Public.

Thank you,
Dave

A little bit of knowledge is... well a little bit of knowledge.
Kudos0

Re: I Don't Understand == Open Port 554 Again Only With NS

Krusty13:
 

Hi Apostolos,

If I am not sharing files between computers I will leave my Network Trust set at Public.

Thank you,
Dave

Hi Dave,

I have not a Homegroup @ home, so I'm not sharing any files, still I have the setting to Private because my network is private, not public, (internet cafe, airport etc).

Still, the correct setting is, private, regardless of file sharing or not between home pc's.

I cannot explain further because I would risk to be accused, like yesterday, that I'm giving smart ass comments.

Just a hint, it has to do with your internet access, you are using a public IP address assigned by your ISP, and with the setting set to private, NS "understands" the connection type, when you are connected, and change internally it's monitoring from private to shared/protected, thus protecting your internet traffic.

It's not a coincidence that it's the default setting, as it covers the vaste majority.

I would not go as far as saying that the public setting is less secure, simply not appropriate.

More info, if you wish, by PM only.

Cheers,

Kudos0

Re: I Don't Understand == Open Port 554 Again Only With NS

When you say "Default", that depended on what setting you tell Windows when you first connected, at least in my case.  That is before Norton was installed.

But anyway, I'm certainly not wanting to argue with you.  Here's the Windows help about this too  -  note the bottom lines. 

A little bit of knowledge is... well a little bit of knowledge.
Kudos0

Re: I Don't Understand == Open Port 554 Again Only With NS

Krusty13:

When you say "Default", that depended on what setting you tell Windows when you first connected, at least in my case.  That is before Norton was installed.

But anyway, I'm certainly not wanting to argue with you.  Here's the Windows help about this too  -  note the bottom lines. 

Dave,

We're talking about NS Network setting not Windows Firewall/Network settings... anyway if you feel more secure with the public setting, I'm fine with this.

A quick note, on my XP pc, wireless connection through router, private setting was also enabled by default. 

Kudos0

Re: I Don't Understand == Open Port 554 Again Only With NS

Apostolos, I understand that but Norton accepts what ever was configured by Windows when it is first installed.

Cheers,
Dave

A little bit of knowledge is... well a little bit of knowledge.
Kudos0

Re: I Don't Understand == Open Port 554 Again Only With NS

Krusty13:

Apostolos, I understand that but Norton accepts what ever was configured by Windows when it is first installed.

Cheers,
Dave

Hi,

If you have the model "pc - router - Internet", both NS settings will work, I just prefer private for many reasons.

Also, in your image it's also mentionned that one of the uses of Public Windows Network setting is for pc's connecting directly to the internet without a router.

I'm certainly not trying to change your mind, just consider also my comment, you may need it in the future.

I'm also testing with every new version of Norton the efficiency of traffic monitoring with advanced software from work.

Cheers,

Kudos1 Stats

Re: I Don't Understand == Open Port 554 Again Only With NS

Apostolos said,

I cannot explain further because I would risk to be accused, like yesterday, that I'm giving smart ass comments.

A, it depends on how you answer. I acknowledge that you are well informed, but it IS possible to share info courteously.

Not too much to ask, surely.

Windows 10 Home X 64
Kudos0

Re: I Don't Understand == Open Port 554 Again Only With NS

Krusty13:

Apostolos, I understand that but Norton accepts what ever was configured by Windows when it is first installed.

Cheers,
Dave

Actually, I was curious and thought I would change Windows to a Home Network and restarted my computer.  After opening Norton I see it has also changed Network Trust to Private.

Just passing on my experience here, not saying Public or Private is 'technically' the correct or best way to do it.  That said, both Windows and Norton say if you aren't sharing files to choose Public.

Cheers,
Dave

A little bit of knowledge is... well a little bit of knowledge.

This thread is closed from further comment. Please visit the forum to start a new thread.