A network issue detected id vulnerability: HNS-WAN-ACCESS

Norton 360 for Windows
1

Norton 360 24.9.9452 (build 24.9.9452.875) OS: W11Pro

Warning after a network scan: A network issue detected vulnerability ID: HNS-WAN-ACCESS

I scanned my Router ports on “grc.com” and they are all closed.
With the previous Norton version I had no warning.

Thanks in advance for further info!
Regards!

Screenshot (1)
Screenshot (1)1014×685 47.2 KB

2

fwiw ~
https://support.avast.com/en-nz/article/hns-wan-access/#pc
Please post progress

1 Like
3

Thanks

Update: hoping this helps someone!

I have a fritz Box 7590 and I noticed only now that the open ports were 5060 (needed for VoIP) and 8089. I simply disabled automatic configuration… for the router (see screenshot) and port 8089 is now closed.

Now the network is detected as safe.

Cheers!

Screenshot
Screenshot1973×1000 197 KB

3 Likes
4

Edit

5

Yes U are Right! …I edit my mistake in previous post!
Anyway …by unchecking the first one, the others are also deactivated automatically.

Thank You

1 Like
6

Hi all,

My Norton 360 was updated tonight and the Smart Scan showed the same vulnerability as well. The previous version didn’t detect this and I have no idea which port is vulnerable. Do I need to install Avast Antivirus just to have the Network Inspector installed?

Thanks,
Tang

7

latest version norton360 have some issues for part of users,but latest version provide nice network inspection scan for vulnerabilities access device,but my region still didn’t have update

8

Hello @tanghonglai
Since, you’re recent to v24.
Have you reviewed Settings to your preference?
Please run Norton LiveUpdate + Restart (not Shut down) machine.
Please run Quick Scan.
Please run one Full Scan.
Please try Smart Scan, again.
Maybe, power cycle router.
Maybe, refresh your Norton install. [here]

fwiw ~
Avast Network Inspector alert: Device is accessible from the internet
https://support.avast.com/en-ph/article/hns-wan-access/#pc

9

Edit: just noticed region /en-ph/

Avast Network Inspector alert: Device is accessible from the internet
https://support.avast.com/en-us/article/hns-wan-access/#pc

10

Thanks for your reply. I followed all the steps including power cycling the router and reinstalling Norton, but I still got the same alert. It told me to enable secure VPN and didn’t tell me which port’s opened. I guess Norton somehow uses Avast Network Inspector but disables the result screen?

11

Finally I figured out how to find open ports using netstat. Here’s a list of program that are in listening status (open) but I don’t think I should disable any of them. So I guess I am okay?

Name Description
System NT Kernel & System
wininit.exe Windows Start-Up Application
services.exe Services and Controller app
lass.exe Local Security Authority Process
svchost.exe Host Process for Windows Services
NortonSvc.exe Norton Services
spoolsvc.exe Spooler SubSystem App
jhi_service.exe Intel® Dynamic Application Loader Host Interface
GoogleDriveFS.exe Google Drive
Dropbox.exe Dropbox
12

What netstat command did you use to get this list?

13

@GaryEricson Use netstat -ab

SA

14

Thanks!

1 Like
15

I found this video about the issue. have not tried it yet, but thought i would share in case someone has time to try it out. please post results

www. youtube . com/watch?v=LYx4jg2nLCU

16

The issue of HNS-WAN-ACCESS is simply that your router has remote access enabled. Disabling that setting and UPNP on your routers, rebooting will correct the issue. As far as Norton’s detection that is a positive thing in that protection begins before being seen on your networks devices.

AI Overview

The HNS-WAN-ACCESS alert in Norton indicates a potential security vulnerability where your router’s management interface is exposed to the internet. This “Home Network Security” (HNS) warning can often be resolved by logging into your router settings, disabling “Remote Management” or “Web Access from WAN,” and ensuring specific ports (like 80, 443, 8080) are closed.

Key Steps to Resolve HNS-WAN-ACCESS

  • Disable Remote Management: Log into your router’s administration panel, navigate to security or advanced settings, and turn off “Remote Management,” “Remote Access,” or “Web Access from WAN”.
  • Check Port Forwarding: Remove any port forwarding rules in your router that allow traffic on ports 135, 445, 3389, 22, or 23.
  • Verify with GRC ShieldsUp: Use GRC ShieldsUp to test if your router ports are actually exposed or just appearing as “stealthed”.
  • Update Router Firmware: Ensure your router is running the latest firmware to patch security holes.
  • Use VPN: Activating a VPN may sometimes bypass or resolve this alert.

If the alert persists, it may be a false positive or a misconfiguration of a specific service, such as VoIP (e.g., port 5060).

SA