NIS 2008 and NIS 2009 on one network

Duis mollis, est non commodo luctus, nisi erat porttitor ligula, eget lacinia odio sem nec elit. Sed posuere consectetur est at lobortis. Vestibulum id ligula porta felis euismod semper. Donec ullamcorper nulla non metus auctor fringilla. Aenean lacinia bibendum nulla sed consectetur. Cras justo odio, dapibus ac facilisis in, egestas eget quam. Cras mattis consectetur purus sit amet fermentum. Morbi leo risus, porta ac consectetur ac, vestibulum at eros. Sed posuere consectetur est at lobortis. Etiam porta sem malesuada magna mollis euismod. Cum sociis natoque penatibus et magnis dis parturient montes, nascetur ridiculus mus. Duis mollis, est non commodo luctus, nisi erat porttitor ligula, eget lacinia odio sem nec elit. Cras justo odio, dapibus ac facilisis in, egestas eget quam. Aenean eu leo quam. Pellentesque ornare sem lacinia quam venenatis vestibulum. Curabitur blandit tempus porttitor. Sed posuere consectetur est at lobortis.

Why not upgrade the next machine as well?

Hi JBlank912,

 

On your NIS 2009 machine, can you please ensure it shows your NIS 2008 machine as a "shared" system via the following method:

 

1. Double click the "Norton Internet Security" icon on the desktop

2. Under the Internet heading, click on "View Home Network"

3. You should see the name of your NIS 2008 machine on the network map

4. Click it and view the "Trust Level:" status

5. Please let me know if it is already set to  "Shared" or "Full Trust"

6. If it is "Protected" click [Edit] to the right of the status, select Shared and click OK

 

Now check to see if your file shares on the NIS 2009 machine can be accessed from the NIS 2008 machine. 

 

If this still fails, can you please private message me the following:

 

1. "ipconfig /all" output for each system

2. Screen shots of both system's network maps
3. Are both systems connected to the same router?

4. Are they connected via wired or wireless adapters?

5. Can the NIS 2008 system ping the 2009 system if the 2009 system has the 2008 system set to "Full Trust?"

 

Thanks,

Matt

1 Like

.1) “ipconfig /all” output for each system I’m not at the systems at the moment but since they are inside a router they use the usual 192.168.1.3 and 192.168.1.4 addresses.

2. Screen shots of both system’s network maps
3. Are both systems connected to the same router? It is a star configuration. They are both connected to the same gigabit Switch which in turn is connected to a Router

4. Are they connected via wired or wireless adapters? wired

5. Can the NIS 2008 system ping the 2009 system if the 2009 system has the 2008 system set to “Full Trust?” I worked with a chat Symantec rep last night/this morning for 3 hours. He had full Trusted and Shared, neither setting helped. The 2008 can not ping the 2009 but the 2009 can ping the 2008.

 

The Rep seemed to run out of ideas so I was trying to find if anyone has run this configuration successfully. He had not run into it. I did not want to risk bringing both systems down if the software has a problem as has occurred in the past with Norton products. Thats why I test on 1 system before putting on all my computers with something like this. At the end of the chat I realized/he realized my options are:

1) Completely remove 2009 and see if ping/share works

2) Upgrade the 2008 and hope for the best-test ping and share

3) Remove the 2008 and see if ping/share work-I doubt this would help because the 2008 system was working before I upgraded the other system, but this whole problem seems odd (like most software bugs)

 

I am still looking for anyone who has 1 system on NIS2008 and 1 on NIS2009-cna they ping each other and/or share files?

I do not want to upgrade the other system in case I run in a show stopper bug and wind up with 2 systems down rather then 1. I have had issues with Symantec (as well as others) where what should be a “simple” upgrade brought a system to its knees unexpectedly.

I upgraded one of my computers to NIS2009. The other is on NIS2008. Now the NIS2008 can not ping the NIS2009 but the NIS2009 can ping the NIS2008. They are both in each others trusted network and all programs enabled. I worked with Norton support for over 2 hours and they could not get it to work. These systems networked OK before the upgrade to NIS2009 complete with file sharing.

 

Does anyone have a mixed environment that networks OK? Has anyone seen this on there network?

Hi JBlank912,

 

Having NIS 2008 on one system and NIS 2009 on the other should have no impact on file shares or pings. If both systems are set to "Shared" trust 2-way file shares should work however, pings will not. If both systems are set to "Full Trust" 2-way pings should work.

 

In this scenario, if the 2009 system can ping the 2008 system, that leads me to believe the 2008 system has the 2009 system set to "Full Trust" If the 2008 system cannot access a file share nor ping the 2009 system, that would indicate the 2009 system potentially has the trust level setting for the 2008 system incorrectly configured.

 

Also, instead of uninstalling NIS 2009 to see if the problem goes away, you can always disable the "Smart Firewall" within the Internet settings. However, I strongly recommend you disable the Internet connection to your router so that you aren't open to outside threats during your test. Although, you will be open to systems on your network. Remember though, if the problem goes away, that will not explain the exact issue.

 

When you are in front of both systems, please private message me a screen shot of both network maps as well as "ipconfig /all" output from both systems and I will be more than happy to assist you in troubleshooting this issue.

 

Thanks,

Matt

We did try the Ping and share while the 2009 was set to Full Trust. We also turned the Firewall off on the 2009 system as well as the 2008 system, none of these things changed the symptoms at all. The 2008 will not ping or share the 2009 systems.

Hi JBlank912,

 

When you disabled the NIS firewall, did you confirm the Windows firewall was also disabled? This is one of the only other things I can think of that could block a ping or file share if NIS' firewall is disabled. Lastly, can you please check the Intrusion AutoBlock list via the following method to see if the NIS 2008 system was AutoBlocked?

 

1. Launch the main display

2. To the right of the Internet heading click "Settings"

3. Under the Intrusion Prevention heading, to the right of Intrusion AutoBlock, click "Configure"

4. Check for any ip's under the Address heading

 

Thanks,

Matt

 

 

I upgraded the laptop to NIS2009. It still can not ping the desktop.

 

I tried sending the PM to you but it would not properly let me send you either a zip or bmp of the screen captures. Is there an email address? I have captures of network maps and ipconfig/all.

 

 

1 Like

SOLVED!

 

After I upgraded the laptop I rechecked and the Windows firwall on the laptop, it had turned on when NIS was upgraded from 2008 to 2009. However this by itself did not change the symptoms, what did was on the Desktop the Windows Firewall that NIS turned on, was set to Don't Allow exceptions. Turning off both Windows firewalls fixed it. Why upgrading NIS2008 to 2009 would turn opn the windows Firewalls (and set one to Don't Allow exceptions) I don't know, but I will keep it very much in mind from now on. Also Symantec support, keep it mind, a chat person controlled both systems last night for 3 hours troubleshooting this and never looked himself.

Hi JBlank912,

 

The 2008 uninstall should have turned Windows Firewall back on, however, the 2009 install should have turned it off.  We haven't seen an issue with the Windows Firewall being on after an install.  Perhaps something else on  your system is monitoring/changing it or perhaps you clicked "fix" button in the Windows Security Center that may have changed these settings?  (just some possibilities).

 

Also, NIS never touches the "Don't allow exceptions" checkbox, so that must have been set outside of NIS.

 

Thanks,

 

/Chester

Yes.  If you are running 2009 on both machines, you should be fine.  2008 doesn't 'know' about 2009, from what I could gather.