Issue abstract: Ivanti Secure Access No Longer Recognizes Norton 360 After latest Norton Update
Detailed Description: An organization I consult for requires the use of Ivanti (formerly Pulse Secure) VPN. Ivanti requires an antivirus to be present on my machine and have run a scan within 5 days. Ivanti prefers Windows Defender. However, I run Norton 360 and have been for years. Ivanti has worked flawlessly for over 3 years I have used it with Norton. It would see Norton as an active antivirus and if Norton had not run a full scan in the past 5 days Ivanti would request Norton to start the scan and Norton would comply and Ivanti would connect.
Last week Norton did a major automatic update and app overhaul. Now Ivanti doesn’t see it as an active antivirus and wants Windows Defender turned on. What did Norton do? Why does it no longer work with Ivanti? Ivanti didn’t change in this situation, Norton did and it no longer works.
I have been running Norton for years and prefer it over Windows Defender, but I need access to my client and will have to dump Norton if no resolution can be found fast. Any help would be much appreciated.
Product & version number: Norton 360 Version 24.9.9452 (build 24.9.9452.877)
Also have you look at your Norton History to see why Ivanti is being blocked? From what I am reading I’d bet Norton Tamper Protection is the issue. Norton takes calls from Windows for certain functions and considers them safe.
FWIW!! Ivanti does have outstanding CVE’s as show in this article which Norton may be protecting against in the new version at the most literal sense. Related maybe? These may be mitigated already.
Hi all, I have just hit this issue too - which is a complete roadblock for me. I have to use Ivanti to connect to a VPN - which means Norton is currently unusable - I echo the sentiment of @White_Peak - I would rather keep using Norton but I will have to drop it from this PC soon if there is no fix here.
From the guru replies (@SoulAsylum), I think the issue has been misunderstood a little - I don’t believe Norton is blocking Ivanti in my experience (and I see nothing in logs to suggest it) - but that Norton has changed and Ivanti no longer recognises it as a valid AV solution.
I don’t think its up to end users to chase their VPN vendors (which is usually through layers of corporate contracts and they are unlikely to have an easy support channel anyway…). Wouldn’t it be more appropriate for Norton support (who introduced the issue by changing their AV solution) to reach out to a major VPN vendor like Ivanti and collaborate on how to fix it - assisting them in how to identify their AV software is protecting the system?
It would definitely be a gesture of goodwill to all the frustrated Norton + Ivanti users out there.
Thanks
Thanks for the post back. Your sentiment is what I was trying to convey although I in another way. My apologies, what I have personally experienced is Norton will just stop loading whatever it wants whenever it wants without any notifications. My references to CVE’s is that Norton has always mirrored certain calls from Windows for a lot of its functionality for the sake of compatibility. I’m referencing that has changed.
One thing I did come across having some free time to dig around, is new Norton runs a proxy service. This service is deeply involved with RPC Endpoint Mapper. Its services define a lot of the Norton processes running in the background. Further it use its own login credentials as shown in the last screenshot.
Ivanti and other apps like it look at the version number of your security software to determine if it is up to date or not.
There was an issue with another similar app in the past when Norton made a major version update. That app’s developer had to change something on their end so the app would recognise the new version. That is why I suggested contacting their Support to let them know there is a newer version of Norton.
