No Wifi as DeepInsight blocks incoming DHCP connection

Archive
1

Dear All,

 

I've been having major problems connecting to my work Wifi (Eduroam) on my Mac running Norton Internet Security v5 (?). If I try to connect via wifi - I never get a connection as Norton's firewall blocks incoming connections from DHCP due to DeepInsight blocking connections from IP address 1.1.1.1.

 

 

I'm not sure if this is something specific to the way DHCP is configured to work on Eduroam, but this is a complete show stopper for me. Disabling Norton Firewall wasn't sufficient to fix this, I had to manually turn off DeepInsight, then I got a properly assigned IP address immediately.

 

I've used NIS in the past at work with no problems, so I'm not sure what's changed? I guess DeepInsight can be problematic in these situations, effectively locking you out of your company's WiFi......

 

Imagine if DeepInsight identified 192.168.1.1 (i.e. the IP address most commonly used for WiFi routers) as a rogue IP address - all of a sudden everyone's WiFi connections at home would stop working!!!!

 

Any suggestions on how to avoid this problem in the future would be much appreciated.

 

Cheers, Jon

2

You can always disable just the DeepSight feature, instead of all of Norton Firewall. Or alternatively, you can add 1.1.1.1 to the Trust Zone in Connection Blocking, which will always allow that IP address.

 

DeepSight works by gathering information from tens of thousands of data points, as well as our internal honeypots, and finding the "most common" attackers. Apparently 1.1.1.1 was a commonly used IP address for attacks.