Problem identified: Attack signatures disabled even though they are enabled in Norton 360?

There is currently a contradiction in Norton. In the settings, the attack signatures + protection against remote access (see screenshot 1) are shown as enabled, but at the same time, under the Security History menu item, these two settings are shown as disabled (screenshot 2). At first, I thought it was related to the Windows 11 update, but it also shows up on the MAC, even though the license on the MAC is different and was installed later.

Does anyone else have the same problem, and if so, what does it mean? How can I fix the problem?

Thanks in advance.

1 Like

I’m having a little difficulty with the translation of your images. But I gather the second image is showing that your 360 is set to protect you from attackers trying to use Windows Remote Desktop feature to access your computer. The other image appears to be showing that Norton blocked those attack signatures from accessing your computer.

If my understanding is correct, it would appear Norton is working as designed and is protecting you.

@naja may be able to clarify here for us.

Hello @S_F
Are you asking why Norton 360 for Mac → Security History reports → Intrusion Signatures and Remote Access Protection disabled?
Are you asking why Norton 360 for Windows → Security History reports → Intrusion Signatures and Remote Access Protection disabled?
~ for example: pic from may be related here

===============================================

AI Mode
The appearance of “Intrusion Signatures” and “Remote Access Protection” as disabled in the Security History reports, even when they are actively enabled in the main settings, is often a known display contradiction or bug within the Norton 360 software on both Mac and Windows. It is less likely that the features are truly disabled and more likely a reporting issue.

Potential Reasons & Solutions

  • Reporting Discrepancy (Most Likely Cause): The features are actually running, but the security history log incorrectly flags them as disabled during certain events, such as system shutdown or startup.
    • Solution: Verify that the settings are actually enabled in the main Norton 360 interface by navigating to Security > Intrusion Prevention and checking that the sliders are turned on.
  • Permissions Issues: On macOS, Norton requires specific system permissions (like Full Disk Access, Login Items, and Network Monitoring) to function correctly in the background. If these permissions were not granted or were revoked after a macOS update, the features might not be fully operational.
    • Solution: Ensure all necessary permissions are granted in your Mac’s System Settings (or Security & Privacy on older macOS versions). Follow Norton’s support guides to allow Full Disk Access and enable Norton in Login Items.
  • Software Glitch/Bug: A specific version of the Norton product might have a bug that causes this incorrect reporting.
    • Solution:
      • Run LiveUpdate: Open Norton, run LiveUpdate, and restart your Mac to apply any micro-updates or patches that fix known issues.
      • Restart the Mac: A simple restart can sometimes resolve temporary glitches.
  • Corrupted Installation: The Norton software installation itself might be corrupted.
    • Solution: If the problem persists after updates and restarts, you may need to uninstall and reinstall Norton 360 completely to fix the issue.

If you have tried these steps and the history reports still show the features as disabled, especially if they are enabled in the settings, it is best to contact Norton Support, as they are aware of such reporting issues and may have a specific fix or be working on a patch.

AI Mode may make mistakes

=====================================

Remote Access Protection and Intrusion Signatures Getting Disabled in Norton 360 (Windows) here

Sicherheitsverlauf - Schutz gegen Remote-Zugriff deaktiviert + Angriffssignaturen deaktivert (Windows) here

1 Like

Hello @S_F

Hi peterweb, exactly! You have correctly matched the two images. However, I am confused by this information. I would have assumed that with these settings, there would be no red exclamation marks in screenshot 1. Red exclamation marks always mean (to me) that something is wrong. But I still don’t really understand why this is supposed to be the correct display…!

Hello @S_F
are you asking @peterweb or @bjm ?

==============================

Hello @S_F

You’ve asked a reasonable logical question.
Why Severity High for a [known display contradiction or bug] event? as per AI Mode here

Are you repeatedly seeing:?

I imagine…Why… is because Norton reporting is limited to non “bug” events.

May be best to ask Norton support.

Please share your progress.

Thank you for your suggested solutions. I assume it is a display error, but why has Norton not noticed this yet? I always run all LiveUpdates; Norton has full access on my Mac. I have not completely uninstalled Norton yet, but why should I do this? I recently set up a brand new Mac with Norton and the exact same problem appears there. This is really a case for Norton Support, but I couldn’t find any contact address on their entire website. It just refers to the community. However, this message has not appeared in the last 3 days!

1 Like

Hello @S_F
AI Mode
The reporting of “Intrusion Signatures” and “Remote Access Protection” as “disabled” in your Norton 360 Security History, even when they are actively enabled in the main settings, is typically due to a known software bug/reporting discrepancy or temporary disablement during normal system events like shutdown and startup.

Primary Reasons
The main reasons for this discrepancy include:

  • Temporary Disablement: Features may be temporarily disabled during the Windows shutdown process and re-enabled upon startup, with the history logging the disablement but not always the re-enablement.
  • Known Software Bug: This incorrect logging has been identified as a long-standing issue in Norton software. The features are often working correctly despite the history report.
  • LiveUpdate Process: Security features might be briefly disabled during Norton LiveUpdate.
  • Windows Fast Startup: Using a standard “Shut down” with Fast Startup enabled is more likely to show this issue than a full “Restart”.

Troubleshooting and Verification
To check if the features are actually working and resolve potential issues:

  • Verify Settings: Confirm the features are enabled in the main Norton 360 settings under Security > Intrusion Prevention and Remote Access. A green status indicates they are active.
  • Update and Restart: Run Norton LiveUpdate multiple times and then restart your computer (a full restart, not just shut down and power on).
  • Check macOS Permissions: On a Mac, ensure Norton has required system permissions.
  • Reinstall Norton: If needed, use the Norton Remove and Reinstall Tool for a clean installation.

Generally, this reporting issue does not mean your system is unprotected.

AI Mode may make mistakes

=======================================

Thanks for sharing your progress.

=================================================

Hello @S_F

Contact Chat Support and Norton Phone Number (related notes here)

-----------------------------------------------------------

Please step thru Norton Support here to reach Norton Chat agent.

  1. Verify registered email address with one-time passcode sent to your email account.
  2. AI agent “How can I help you today?”
  3. Type your message
  4. AI agent offers preset solutions.
  5. AI agent “Do you need assistance with anything else?”
  6. Type your message
  7. AI agent “How may I be of assistance to you today?”
  8. Type your message
  9. AI agent “In a few words, could you let me know how I can help you today?”
  • type “agent” three times to reach a human agent

-----------------------------------------------------------------------------------

Explore other contact methods →

View phone number → Select your country:

  1. AI agent requests verification code:
  2. AI agent authenticates you.
  3. AI agent “How may I help you today?”.
  4. AI agent offers preset solutions.
  • speak “agent” three times to reach a human agent

-----------------------------------------------------

Contact Chat Support and Norton Phone Number (related notes here)

Thanks! :wink:

1 Like

Hopefully, Norton will publish documentation regarding Remote Access Protection and Intrusion Signatures → Disabled → Severity High… [known display contradiction or bug] event… as per AI Mode here… to address users concerns.

The second image shows the two setting are enabled. Or am I missing something in the translation.

I imagined @S_F …posted the two screenshots in reverse order to the description here.

But the post says 2 settings and the first image has 3 items.

Okay…I imagined “reverse order” & “these two settings” refers to Remote Access Protection and Intrusion Signatures.

=======================================

reverse screenshot # with (Remote Access Protection and Intrusion Signatures)

Hello @S_F , @peterweb