Curious, do you run Norton Smart Firewall -> Automatic Program Control On or Off?
https://support.norton.com/sp/en/us/norton-360/current/solutions/v15457333
Maybe, you have a Firewall Traffic or Program rule set to Monitor?
Maybe, you added a custom Firewall Traffic or Program rule?
https://support.norton.com/sp/en/us/norton-360/current/solutions/v1028140
Please review old message: https://community.norton.com/en/comment/1165823#comment-1165823
You can create a rule that controls the communication between your computer and the computers on the network, based on various criteria. Some of the criteria are type of protocol, ports, Internet address, and direction of communication.
Select the action that the rule should take if all of the criteria are met. Your options are:
Allow
Allows the communication of this type to take place
For example, consider a Traffic rule with the following criteria: all inbound connections from Internet address 192.168.1.1 over port 8080. When you select Allow, Smart Firewall allows all connections that satisfy the other criteria of this Traffic rule.
Block
Prevents the communication of this type to take place
For example, consider a Traffic rule with the following criteria: all inbound connections from Internet address 192.168.1.1 over port 8080. When you select Block, Smart Firewall blocks all connections that satisfy the other criteria of this Traffic rule.
Monitor
Updates the event log each time that communication of this type takes place
This option lets you monitor how often this rule is used. Norton notifies you every time that the traffic matching the monitor rule criteria passes through your computer. You can view the event log under Firewall - Activities category in the Security History window.
Norton creates separate action rules to allow or block the programs that have only a Monitor rule associated with them. The Monitor rule must be of higher order than the action rule for successful log entry of the network event that is related to the program.
The monitor rule logs the network events. However, you need to create another Allow or Block rule to allow or block the network traffic.
https://support.norton.com/sp/en/us/norton-360/current/solutions/v7762389