Boot Time protection is off

Recently I notice that on a computer here with Norton 360  (currently at the latest update), Windows 10, that Boot Time protection is turned off.  Is this normal?  Is this perfectly fine under Windows 10?  Would turning boot time protection ON in Norton 360 be better, or just as good?  Make any difference in Windows 10?

Windows 10 by default has fast startup on and hibernate on. I have all my Windows 10 PC’s setup like this. No issues whatsoever. If I experience any issues I merely do a restart. I maintain hundreds of Windows 10 PC’s with fast startup enabled. Considering 80% of Windows 10 don’t evem know what fast startup is or even know how to turn it off I would say the vast majority have fast startup on. I enjoy my 30 second cold boots. Restarts can be around 2 minutes.

I am curious if others are aware of the following:

Fast startup requires that hibernate be enabled.
http://www.tenforums.com/tutorials/2859-hibernate-enable-disable-windows-10-a.html


If you disable hibernate, then it will also disable fast startup.
http://www.tenforums.com/tutorials/2859-hibernate-enable-disable-windows-10-a.html

That said, I have to wonder how many users in fact have Fast startup enabled and Hibernate disabled - thus they truly do not have Fast startup enabled? 

Is this (Fast startup enabled and Hibernate off) the reason some users claim they have Fast startup enabled and it has no effect on other programs - such as AV's? 

g_cafe_c: Recently I notice that on a computer here with Norton 360  (currently at the latest update), Windows 10, that Boot Time protection is turned off.  Is this normal? Is this perfectly fine under Windows 10? 

Yes


Norton made changes in Norton 22, now BASH (Behavior Analysis and System Heuristics) enables BTP dynamically when it detects suspicious files.
If there is any suspicious change that is made to the system, that BASH considers suspicious/malicious, then the product should turn the BTP setting to ON (set to Normal) for the next reboot and/or until the suspicious file has been scanned.

BTP "Off" is default because the user may feel a performance ding, with BTP "Normal or Aggressive" set by default.

Boot Time Protection increases security when you start your computer. A boot time scan is a virus scan that runs before the operating system fully loads. This allows Norton to scan files before they are used by another program or the operating system.  To fully protect your computer during start up, you must configure Boot Time Protection.

Intelligent Boot-time Protection
We know you need to get to work (or play) quickly when you turn on your PC.  But those first few moments after you boot your PC are crucial: that’s when your system is most vulnerable, and when malicious threats can attack. New features in our software can monitor for threats before your operating even system loads. Detection of such changes triggers Norton to automatically enter aggressive boot-time protection mode, which ensures complete protection during the boot up process.


Yes, everything makes sense except for the explanation. 
Yes, "Off" by default reads like protection is Off. 
Norton "Use Defaults" is recommended protection for most users.
Yes, "you must configure Boot Time Protection" reads like user must change setting.
Note: Permalink BTP runs with restart or cold-start, not with Fast Startup On, hybrid-start.


To fully protect your computer during start up, you must configure Boot Time Protection, reads to me, try "Normal or Aggressive".   Just me.

Norton out-of-the-box is Norton recommended protection for most users.  Go through Settings, you'll find multi-position toggle switches.  Default is recommended protection.
Switches for users to set setup Norton to user preference.

Hi @8 Ball              

bjm_ said

My performance criteria is in-line with Fast Startup Off & Boot Time Protection Aggressive. Just me.

Plus one. That is the suggested way to minimise issues, and maximise protection. Trust me on that !

8 Ball: I'm on win 8.1. latest version of N360 Premium. When FAST START off BTP default is normal.  What are NORTON's recommendations for: WIN 10,  Other NORTON security products.

Norton to my knowledge does not offer official recommend re BTP or Fast Startup.
My comment re BTP & Fast Startup stands > https://community.norton.com/comment/7248911
My performance criteria is in-line with Fast Startup Off & Boot Time Protection Aggressive. Just me.

I'm on win 8.1. latest version of N360 Premium. When FAST START off BTP default is normal.

What are NORTON's recommendations for:

     WIN 10

    Other NORTON security products.

@bjm_

@peterweb

Please see my post in the Guru area (same subject) - it may apply to some of the guessing going on here in regards to why the Default Setting is OFF. 

Feel free to repost that info here if you feel it helps explain things.

 

peterweb:  I stand to be corrected, but I would think that if you use Windows Fast Startup and shut down your computer, which does not actually shut it down, then the subsequent startup would not even invoke the Boot Time Protection. I suggest this because With Fast Startup on, it is just like you are restoring a session from sleep/hibernate mode. So the boot up routines that BTP protects are not being run.

Therefore the Norton suggestion to turn off Fast Startup.  

Agree, where does that leave Community regarding BTP & Fast Startup.  
> configure to your preference.

and ELAM = only Fast Startup Off or Restart afaik.

I stand to be corrected, but I would think that if you use Windows Fast Startup and shut down your computer, which does not actually shut it down, then the subsequent startup would not even invoke the Boot Time Protection. I suggest this because With Fast Startup on, it is just like you are restoring a session from sleep/hibernate mode. So the boot up routines that BTP protects are not being run.

Therefore the Norton suggestion to turn off Fast Startup.  

g_cafe_c: am guessing that N360 is set to BootTimeProtection as OFF for some intelligent reason. 

To protect your computer during boot time, you must configure the Boot Time Protection option.

When this option is set to Normal or Aggressive, all required drivers and plug-ins start functioning as soon as you start your computer. A driver is a program containing information that the computer needs to recognize and control a device. A plug-in is an add-on for a program or a service that adds functionality to it. This option ensures higher level of security from the moment you turn on your computer.

When this option is set to Off, specified drivers and plug-ins start functioning only after a specified time delay.

If you restart your computer after LiveUpdate or a product upgrade activity, the drivers and plug-ins function normally. However, in the subsequent restart the drivers and plug-ins function normally after the specified time delay.

 http://symscope.com/astro/NSRetail/Boot_Time_Protect_HOL.htm

Fast Startup is turned ON in Windows.

Restart is not under the influence of Fast Startup.  


current documentation has simplified explanation... and Intelligent Boot-time Protection is not mentioned.....why?...don't know..... I'll ask.

To fully protect your computer during start up, you must configure Boot Time Protection.

Aggressive: provides the highest level of security when you start your computer.
Normal: provides normal security when you start your computer.
Off: Boot Time Protection does not run when you start your computer.

 

https://support.norton.com/norton-security-with-backup/solutions/v36662094


My guess is that Norton BTP took its setting to not be in conflict with some other setting such as Fast Boot. 

Okay, sounds plausible.  Note: default is Off.  My comment re BTP stands >
https://community.norton.com/en/comment/7248911


To fully protect your computer during start up, you must configure Boot Time Protection.

BTP = configure to your preference.
Fast Startup = configure to your preference.

Hello

We usually suggest that Fast Startup should be disabled and Boot Time Protection should be on Aggressive. The choice is yours however.

Thanks.

The N360 is version  22.8.1.14.  Nice discussion happening here.  The particular Windows 10 computer is less than a year old, and I am guessing that N360 is set to BootTimeProtection as OFF for some intelligent reason.  Maybe I should look in to see if Fast Boot is on or off.  How do I do that?  My guess is that Norton BTP took its setting to not be in conflict with some other setting such as Fast Boot.  

Found the setting.  Fast Startup is turned ON in Windows.  I believe for the best of functioning, I will keep the settings this way.

I suggest Boot Time set to Aggressive, as this ensures Norton starts protection before anything else is loaded.

This gives maximum protection.

Hello 8 Ball

Please make sure that you have run Live Update and restarted if you say that BTP default was on. You might not have the latest version.

Thanks.

8 Ball: I agree FAST Start should be off. When you select Aggressive, there are a lot of CERIFICATE issues, even financial web sites. I don't select aggressive for that reason.

 Okay, yes...set BTP to user preference.

I agree FAST Start should be off. When you select Aggressive, there are a lot of CERIFICATE issues, even financial web sites. I don't select aggressive for that reason.

8 Ball: NORTON support. may have been lvl 2 or Supervisor lvl 1. One of them.

Okay, my preference is Fast Startup Off. 

Intelligent Boot-time Protection
We know you need to get to work (or play) quickly when you turn on your PC.  But those first few moments after you boot your PC are crucial: that’s when your system is most vulnerable, and when malicious threats can attack. New features in our software can monitor for threats before your operating even system loads. Detection of such changes triggers Norton to automatically enter aggressive boot-time protection mode, which ensures complete protection during the boot up process.

https://community.norton.com/en/blogs/norton-protection-blog/get-ready-some-big-updates


What is the difference between ELAM and Boot Time Protection
https://community.norton.com/en/forums/what-difference-between-elam-and-boot-time-protection

NORTON support. may have been lvl 2 or Supervisor lvl 1. One of them. JAYLORD LVL 2 or Ronald Daryl LVL 1 Supr

I believe just turning off FAST START will do the trick.

 okay

NORTON strongly recommends turning off FAST START on any WIN version.

source..?