Reply
Axios
Posts: 300
Topics: 80
Kudos: 15
Ideas: 0
Solutions: 21
Registered: ‎09-13-2008

NIS 2010 Intrusion prevenction log entries are not present

[ Edited ]

Hi everyone,

I'm an Italian user of NIS 2010 ver 17.0.0.136. It is installed on a Vista 32 bit SP1 pc. Sometimes after the start of the pc, Intrusion prevenction log entries are not present.


Example: at every pc start there are 3 entries:
1) Intrusion prevenction activated
2) Intrusion prevenction engine version 4.1.0.61 definition set version 20090109.001
3) Intrusion prevenction is monitoring 1307 firms Driver version 9.0.0.172

Sometimes it doesn't happen.
However Intrusion prevenction function perfectely. Block any intrusion attempt.

The same problem was in 16.2 version.

Also, in Settings -> Web Setting -> Program Control -> Configure
when I try to add a manual firewall rule to block the access to the internet for an executable files, some files exe cannot be added without any error message.

Thanks in advance for replies.

 

[edit: Changed subject for clarity.]

 

Message Edited by shannons on 09-10-2009 12:18 PM
Symantec Employee
Ameya
Posts: 37
Registered: ‎04-24-2009

Re: NIS 2010 Intrusion prevenction log entries are not present

Hi Axios,

 

About the IPS log entries missing ... 

 

We will look into this issue and work on a fix if necessary. Be assured that this is just a logging problem and IPS is enabled even though you dont see logs indicating that. So you are protected.

 

How often do you see this problem? Is it happening on all your PCs or one particular one?

 

I will have someone from the Firewall team to address your other question.

 

-Ameya

Symantec Employee
ChesterK
Posts: 204
Registered: ‎06-09-2008

Re: NIS 2010 Intrusion prevenction log entries are not present

Hi Axios,

 

Which error are you seeing when trying to manually add a firewall rule for an exe?

 

/Chester

Axios
Posts: 300
Topics: 80
Kudos: 15
Ideas: 0
Solutions: 21
Registered: ‎09-13-2008

Re: NIS 2010 Intrusion prevenction log entries are not present

[ Edited ]
About IPS Problem: the problem happen every time I start the pc after the second time since NIS 2010 installation. I installed NIS thursday 10 and IPS entries was recorded only thursday 10 at 13:48 and at 13:58. At all other start of the pc on thursday 10 or friday 11 and today, no entries.

How can I test if IPS is working?

About Firewall rules problem: it happen randomly when I try to insert a manually rule about an exe files. I click "add", select the exe, Norton ask me three option: "Allow" "Block" "Manually Configuration". If I choose one of the three and click ok, the window disappear and no rule was added. There is no specific exe that cause the problem. It is randomly. I'm sorry but I don'have more detailed info. Absolutely no error message of any type.

Thank for replies.
Message Edited by Axios on 09-12-2009 07:05 PM