For more than 2 weeks now I have been getting notifications many times per day about Zyxel Command Injection CVE-2023-28771 and several different IP addresses. Each have been blocked, but still the notifications keep coming, I have made them restricted. I know Norton logs these notifications, but how long will it take for Norton to do something about them?. I would also like to see an option for us users to add an ip address to the intrusion list in order to block an ip address?.
Hello Bill. That issue is being discussed in the following thread here on the forums. Tons of suggestions are posted that may help. What Norton is doing is protecting you from the attacks and network scans. It cannot prevent them.
https://community.norton.com/en/forums/zyxel-command-injection-cve-2023-28771
SA