From what I know :
ccsvchst.exe is a file necessary to open the graphical user interface that lets you interact with the Norton program.
With that said , I have blocked ccsvchst.exe from internet access on my pc.
ccsvchst.exe does not need internet access on my pc it seems because I have tested the firewall and antivirus and it works well even with blocking ccsvchst.exe from internet access.
In my Norton recent history Norton is trying to access dozens of ip's every minute or two.
I have several Norton ip's blocked.
In my opinion there should be a better way to stop sending request all day long to different servers since I am the type of person that likes to be in control of who my computer is talking to in the background. I used a program called Currports to display the list of all currently opened TCP/IP and UDP ports on my desktop PC to figure out the list below over a course of time.
Category: Firewall - Activities
Date & Time,Risk,Activity,Status,Recommended Action,Category
5/17/2013 5:57 PM,Info,"Rule \"Norton things\" blocked (www.mynortonaccount.com
(206.204.54.252), Port https(443) ). Outbound TCP connection.",Detected,No Action
Required,Firewall - Activities
Category: Firewall - Activities
Date & Time,Risk,Activity,Status,Recommended Action,Category
5/16/2013 4:41 PM,Info,"Rule \"Norton things\" blocked (hb.lifecycle.norton.com
(67.134.208.160), Port www-http(80) ). Outbound TCP connection.",Detected,No Action
Required,Firewall - Activities
Category: Firewall - Activities
Date & Time,Risk,Activity,Status,Recommended Action,Category
5/16/2013 4:20 PM,Info,"Rule \"Norton things\" blocked (shasta-rrs.symantec.com
(143.127.102.25), Port https(443) ). Outbound TCP connection.",Detected,No Action
Required,Firewall - Activities
Category: Firewall - Activities
Date & Time,Risk,Activity,Status,Recommended Action,Category
5/16/2013 4:38 PM,Info,"Rule \"Norton things\" blocked (lcsitemain.symantec.com
(206.204.54.103), Port www-http(80) ). Outbound TCP connection.",Detected,No Action
Required,Firewall - Activities
Category: Firewall - Activities
Date & Time,Risk,Activity,Status,Recommended Action,Category
5/17/2013 4:37 PM,Info,"Rule \"Norton things\" blocked (www.mynortonaccount.com
(206.204.54.252), Port https(443) ). Outbound TCP connection.",Detected,No Action
Required,Firewall - Activities
67.134.208.160 norton.stats 67.134.208.128 - 67.134.208.255 Symantec Corp
Swapdrive Norton Data Services
206.204.54.252 mynortonaccount.conxion.com 206.204.54.0 - 206.204.54.255
www.mynortonaccount.com
mynortonaccount.conxion.com
www.mynortonaccount.com.gtm.symantec.com
lcsitemain.conxion.com 206.204.54.103
lc1alt.symantec.com 216.12.144.16
subsync.symantec.com 206.204.52.31
sosftp.symantec.com (206.204.54.249)
sluplist.symantec.com (206.204.54.248)
sshomemain.symantec.com (206.204.54.240)
service1.symantec.com
166.98.6.31
I mean is it really necessary to try and make all these connections when I have Norton Insight Protection, Community Watch, Special Offer Notification, Live updates, Pulse Updates, Automatic download of New Version, Download intelligence and Safe Surfing turned off. (A tip to limit the Norton thrashing) (Added bonus of turning all these off is Norton is very quiet, activating Live Updates once a week is sufficient for me)
I realize that after a virus scan or after bootup Norton makes a call to check the Norton AntiVirus database.
Even if I let Norton Live Update and I Un-block my Custom General Rules for Norton it goes right back to making dozens of tcp request.
There should be a button to shut off all Norton Outgoing Tcp request to Norton data centers or Norton should respect the settings
I have, and not make so many Outgoing Tcp request.
Also I don't know where to put this request to the developers of Norton but adding Turn on Silent Mode for 1 week would be a big
plus in my book because turning on silent mode for 1 day really helps from thrashing away at my windows system32 folder during background activities.
I have had Norton for the last 8 years and it works really well as a Firewall and as a Antivirus with the settings I have.
Thank you.