• All Community
    • All Community
    • Forums
    • Ideas
    • Blogs
Advanced

Not what you are looking for? Ask the experts!

This forum thread needs a solution.
Kudos0

Intrusion Protection Gone Wild !!

I was looking at the graphs under the performance section of my NIS and found a huge amount of entries of "detection's", starting on 9-18-2019 and occurring from 1 to 5 times almost everyday since. When I click on any of them and try to find out what is causing this they all say the same as being "detected" and stopped. Under the recommended action it just says "no action required". How do I find out "whats" doing this and stop it?.

Replies

Kudos0

Re: Intrusion Protection Gone Wild !!

Please tell us what Norton is telling you regarding this event.


> How to post an image in the forums.

Kudos0

Re: Intrusion Protection Gone Wild !!

Hello Don P. This Norton article will explain what you are possibly seeing as far as " intrusion protection". At present I don't have any detections on this machines history to compare or get a screenshot of due to a recent removal and reinstall because of another issue. Getting a screenshot of what you are seeing in your Norton History as bjm suggested would be greatly helpful.

Cheers 

"From DOS to Windows10 what a journey it has been" / MS Certified Professional / Windows Server 2016 Essentials / Windows 10 Professional x 64 version 1909 / build 18363.476 / N360 Deluxe 22.19.9.63 / Norton Core v.288 on Android 2.22 / Opera GX
Kudos0

Re: Intrusion Protection Gone Wild !!

I tried opening up the NIS history page to copy and could only get "one" shot to be able to save to send.  When I clicked on "details" of any action in the history, I couldn't get it to allow me to copy it to send.  See the one attachment "history1.txt

File Attachment: 
Kudos0

Re: Intrusion Protection Gone Wild !!

> How to post an image in the forums.
https://community.norton.com/en/forums/how-post-image-forums-0

for example:

Intrusion Threats: View Details


10/31/2019 10:08:33 AM,High,An intrusion attempt by 104.250.126.62 was blocked.,Blocked,No Action Required,Web Attack: Formjacking Website 76,No Action Required,No Action Required,"104.250.126.62, 80",www.nurserydecalsandmore.com/kids-wall-decals/jungle-wall-decals/elephant-wall-decal/elephant-w-pattern-decal.html,"DESKTOP-DELL (192.168.1.2, 62150)",104.250.126.62,"TCP, www-http"

Other Threats: View Details

per @SoulAsylum
https://support.norton.com/sp/en/us/norton-360/22.19.8.65/solutions/v15471442

Kudos0

Re: Intrusion Protection Gone Wild !!

Kudos0

Re: Intrusion Protection Gone Wild !!

Kudos0

Re: Intrusion Protection Gone Wild !!

Appears mine is acting similarly, first intrusion detection event occurring on 9-16-2019 and recurring on most days. Most of mine is occurring only once in a day and occasionally twice or three times. History appears to only show events related to Intrusion Prevention being enabled, engine version/definition set, and driver version.

Win10Pro | N360 | MBAM | Spybot S&D | SpywareBlaster | Acronis Ransomware Protection | KeyScrambler Prem | OSArmor | O&O ShutUp10 | Ghostery | MAXA Cookie Manager | HostsMan | OpenDNS | NordVPN | CCleaner | JV16 PowerTools | PerfectDisk Pro~ www.needGod.com
Kudos0

Re: Intrusion Protection Gone Wild !!

Issue status Update: Fixed

We have released Norton Security 22.19.9.63 product update for Windows fixing an issue where "Threats that are detected on Performance Graph were not recorded in the Security History under Intrusion Prevention” via LiveUpdate. Please run LiveUpdate to receive an update and let us know the issue fix. Thanks for your patience. 

Please refer Norton Security 22.19.9.63 for Windows is now available! Product Update Announcement blog for more details

Sunil_GA | Norton Forums Administrator | Symantec Corporation