Not what you are looking for? Ask the experts!
Norton Security 220.127.116.11 Showing Intrusion Threats on Performance Graphs but not in the Security History under Intrusion Prevention.
Norton Security 18.104.22.168 Showing Intrusion Threats on Monthly Performance Graphs but not in the Security History under Intrusion Prevention.
Running Windows 10 Home on a new Machine, 2 months old.
This issue has happened to me twice. First was on September 18, 2019, the Performance Graphs showed two Intrusion Detentions and when I click on View Details it does not show anything in the Security History logs. It then happened to me again yesterday on September 24, 2019. On both days I compared my browser history and I visited sites that I normally frequent. Not that many sites either. There is nothing in my event logs, nothing in any of the Norton Security logs, I have run full system scans etc... and have found nothing on my system. The concern is that the only location Norton shows something wrong is in the Performance Graphs. I basically open Norton then click on Performance, Then clock on Graphs and it shows the detection, when I click on the detection to take me to the details, in the pop-up info bubble it shows Date 9/24/2019 Intrusion Threats: 3 then I click on View Details and it takes me to the Security History logs under Intrusion Prevention and everything in there is only informational. When I take an extract of that, this is all I see for that day:
Category: Intrusion Prevention
Date & Time,Risk,Activity,Status,Recommended Action,Category,Default Action,Action Taken
9/24/2019 8:14:56 PM,Info,Intrusion Prevention has been enabled,Detected,No Action Required,Intrusion Prevention,No Action Required,No Action Required
9/24/2019 8:14:56 PM,Info,Intrusion Prevention Engine version: 22.214.171.1249 Definitions Set version: 20190924.061,Detected,No Action Required,Intrusion Prevention,No Action Required,No Action Required
9/24/2019 8:14:56 PM,Info,Intrusion Prevention is monitoring network traffic. Driver version: 126.96.36.1991,Detected,No Action Required,Intrusion Prevention,No Action Required,No Action Required
It just shows the standard updates. Where is Norton picking this up from? Without further information, I cannot tell if this issue is with Norton or if it has truly blocked something. And what that something is, I cannot tell because I don't have a detailed log.
I have also checked my router firewall logs and there is nothing in there either showing anything blocked.
Is anyone else seeing this? Can anyone advise where else I might be able to look in the file system for logs that might not be seen through the Norton interface? I searched everywhere in the file system I could think of and have found nothing.