• All Community
    • All Community
    • Forums
    • Ideas
    • Blogs
Advanced

Not what you are looking for? Ask the experts!

This forum thread needs a solution.
Kudos0

Outbound Firewall for Specific Network Adaptors

Hello.

I'm using Norton Security v22.2.0.31 on a Windows 8.1 computer. I would like to control outbound connections on specific (metered) networks.

When at home and connected to my main wifi network, I don't mind if "all programs" can access the network/internet. But when I'm not at home and I'm tethered to my phone, I would like to manually specify what programs can go online, and block everything else.

I can't find a way to do this from within Norton Security, but I think I can pull it off with Windows Firewall. The catch: Windows Firewall reports that its settings are being managed by Norton.

I guess this could be boil down to two questions:

  1. Am I missing something in the Norton config, and there is an option to block most outbound connections on a metered network?
  2. Is it possible to remove the "firewall" piece of Norton, so I can use the Windows Firewall instead?

Thanks in advance!

Replies

Kudos0

Re: Outbound Firewall for Specific Network Adaptors

To answer question #2 you could disable Norton Firewall. But I'd recommend against it strongly.

Have you looked at "Program Control"? Open Norton Security and click Settings, Firewall, Program Control. On the right side by each program listed you can choose to block, allow or custom.

This might allow you to manually choose what to block and what to allow.

Windows 10 Pro 64-bit / Norton Security v.22.17.x
Kudos0

Re: Outbound Firewall for Specific Network Adaptors

Thanks for the reply! :)

When I tried to disable Norton's firewall, it still wouldn't let me enable the Windows built-in firewall. I'm guessing I need to somehow completely remove or un-register Norton's firewall in order for the built-in firewall to take over again.

I found those options you mentioned under Program Control, but I couldn't find how to specify some rules for "public networks" and others for "private networks". I'm guessing that would be the best way for me to specify which connections should be controlled tighter than others...?

Kudos0

Re: Outbound Firewall for Specific Network Adaptors

I think you might be able to achieve what you want by going here;

Open Norton Security, click settings, click firewall, click traffic rules, select block, select "connections to other computers", click next, select "only the computers or sites listed below", click add, you can choose individually or using a range, enter the computer or device LAN IP address i.e. 192.168.0.101, click OK, click next, select all (which will block all internet activity), click next, name the firewall rule something you'll easily remember, click next and finish. (If the created rule doesn't work as expected you can go back and remove it by looking under traffic rules.)

I don't think Norton can do what you want it to do. If I'm understanding correctly you want to block certain programs from accessing the internet on specific computers or devices while away from home. What I described above would block all internet activity except for your phone while you're not at home. But there's no way to allow only certain programs access to the internet on all computers and devices and still allow your phone full access.

My first reply about using Program Control would block access to those programs for all computers and devices. It wouldn't allow specific computers or devices access.

As far as I know there's no way to allow Windows Firewall to work while a Norton product with a firewall is installed. Windows Firewall service can be on but that doesn't mean Windows Firewall is enabled.

Windows 10 Pro 64-bit / Norton Security v.22.17.x
Kudos0

Re: Outbound Firewall for Specific Network Adaptors

Hmm... I think we're almost on the same page! I say "almost" because your suggestion for a rule for 192.168.x.x doesn't quite line up with what I was thinking of... :)

It's not that I want my computer to connect to my phone... I want my computer to connect through my phone, to the internet (ie. "tether").

I ended up getting a USB internet stick (to 4G LTE)... maybe this simplify things a bit. For now, just forget I even mentioned my phone :)

The USB stick shows up in the Network Connections as a new network adaptor. It's listed with the device "Novatel Wireless Ethernet Adapter". 

I would like to restrict the programs that can connect to the internet through the USB stick. For example, I don't want Windows (or any other apps) to download any application updates while I'm mobile. I want my navigation software to be able to download traffic updates and possibly share my location with friends / family (whenever I enable it), hence the need for a mobile connection. But that's about it.

When I'm "within range" of a wireless access point (ie. home), I want to be able to download automatic updates, sync files, etc. 

I might be able to work with limiting the target IPs and ports for the mobile internet connection... although I don't quite know all of the IPs and ports that I'd need.

It doesn't sound like Norton will let me do this... mainly because Norton doesn't seem to have a means of providing specific firewall rules for various network profiles. But I might be able to pull it off with advanced rules in the Windows Firewall (ie. by scripting or by using the public/private profiles).

Is there a way that I can disable/unregister the Norton firewall and re-enable the Windows built-in firewall? I'd like to keep the anti-virus protection, but I don't think I can get the firewall to work for me. I don't suppose I could have the former without the latter, can I?

Thanks again!

Kudos0

Re: Outbound Firewall for Specific Network Adaptors

Hi,boonebytes. You CAN disable the Norton Firewall if you wish by right clicking on your tray icon, and selecting the option to disable permanently. Check that the Windows firewall is on and working, then you may be able to get the Windows firewall to do what you want.

Norton won't like this and will probably show a red X all the time, but hey.............

Windows 10 Home X 64
Kudos0

Re: Outbound Firewall for Specific Network Adaptors

boonebytes:

It doesn't sound like Norton will let me do this... mainly because Norton doesn't seem to have a means of providing specific firewall rules for various network profiles. But I might be able to pull it off with advanced rules in the Windows Firewall (ie. by scripting or by using the public/private profiles).

Is there a way that I can disable/unregister the Norton firewall and re-enable the Windows built-in firewall? I'd like to keep the anti-virus protection, but I don't think I can get the firewall to work for me. I don't suppose I could have the former without the latter, can I?

Thanks again!

Yeah I don't think Norton Firewall will allow you to do what you want as far as restricting things.

After reading this http://community.norton.com/en/forums/how-disable-norton-firewall-and-enable-windows-firewall and the post above mine. It doesn't really sound like you can disable Norton's firewall and have things run smoothly. The link recommends buying Norton Anti-Virus without a firewall. I don't think Norton Anti-Virus is available anymore.

Windows 10 Pro 64-bit / Norton Security v.22.17.x
Kudos0

Re: Outbound Firewall for Specific Network Adaptors

NAV is still available in Australia and other markets.

http://au.norton.com/antivirus/

Windows 10 Home X 64
Kudos0

Re: Outbound Firewall for Specific Network Adaptors

NAV isn't available here unless you already have it. http://ca.norton.com/antivirus/ It recommends Norton Security so does the U.S. site.

But yeah that'd be the way to go. Although since this is Norton Security Suite I don't think Norton Support would switch you over to NAV like if you purchased a non-suite version.

Windows 10 Pro 64-bit / Norton Security v.22.17.x
Kudos0

Re: Outbound Firewall for Specific Network Adaptors

Thanks guys! 

F4E:

You CAN disable the Norton Firewall if you wish by right clicking on your tray icon, and selecting the option to disable permanently. Check that the Windows firewall is on and working, then you may be able to get the Windows firewall to do what you want.

Norton won't like this and will probably show a red X all the time, but hey.............

I tried this, but Windows Firewall still complains that the settings are being managed by Norton. It looks like it won't let me simply disable the Norton firewall without somehow uninstalling it, before it lets Windows Firewall take over again.

In the meantime, I did find a way  to get Norton to ignore the "firewall is off" error. You just hover over it in the "Advanced" dialog, and choose "Ignore" from the popup.

SGFC:

Yeah I don't think Norton Firewall will allow you to do what you want as far as restricting things.

After reading this http://community.norton.com/en/forums/how-disable-norton-firewall-and-enable-windows-firewall and the post above mine. It doesn't really sound like you can disable Norton's firewall and have things run smoothly. The link recommends buying Norton Anti-Virus without a firewall. I don't think Norton Anti-Virus is available anymore.

I stumbled across this thread too at some point. Disappointed that I can't just pick Norton Anti-Virus. Even more disappointed that I just renewed my subscription to Norton a few weeks ago. I had a look at one of the high-ranking competitors, and they seem to offer an anti-virus solution without including their firewall. I might give that one a shot, with or without their firewall (depending on what their firewall will support).

Worst case scenario, I can just go with the Microsoft Security Essentials. That should give me a bare-minimum anti-virus protection, and still let me override the Windows Firewall. I'm not planning on using this computer for much else, so a basic anti-virus might fit the bill better than a clunky security solution.

F4E:

NAV is still available in Australia and other markets.

SGFC:

NAV isn't available here unless you already have it. http://ca.norton.com/antivirus/ It recommends Norton Security so does the U.S. site.

But yeah that'd be the way to go. Although since this is Norton Security Suite I don't think Norton Support would switch you over to NAV like if you purchased a non-suite version.

Yeah,  I'm Canadian too...eh! (Not that I actually use "eh" that much, "sorry"! :P). So the basic anti-virus package isn't available here.

Just grasping at straws now...

I'm a programmer by-trade... so I don't suppose there's any way I could write a script that will add/delete firewall rules in bulk from Norton? If I could go that route, I might have a script to load/unload the metered firewall rules.

Short of that... I was looking up some information on the Windows Filtering Platform (WFP), which seems to be what Norton hooks into behind the scenes. I haven't dug into it much yet, but I might be able to write my own custom firewall app or something. I just need to wrap my head around that platform before I go that route. In the interest of saving my own time and sanity though, I think I'd rather just drop Norton on that box and go with some alternative. It'd be much easier than learning how to hook into that framework. :)

Thanks again for the help!

Kudos0

Re: Outbound Firewall for Specific Network Adaptors

Hello

You might be able to find an older version of NAV in stores or online like maybe in Amazon. Or you might be able to purchase it in a location which doesn't have Norton Security available. Those countries are still selling NAV.

Success always occurs in private and failure in full view. Windows 10 Pro 64 bit Norton Core Security Plus 22.17.3.50 Core Firmware 282 I E 11 Chrome latest version.

This thread is closed from further comment. Please visit the forum to start a new thread.