PulseSecure HostChecker Ignores Norton under Win10

Norton Security | Norton Internet Security
1

I've been running Norton Internet Security 22.12.0.104 under Windows 10 v.1709 and accessing my employer's VPN using PulseSecure HostChecker 8.1.11.52981.  Starting 23-Jan-2018 I've found HostChecker doesn't recognize the Norton installation, and instead complains that:

Windows Defender 4.12.16299.15 does not comply with policy. Compliance requires real time protection enabled.

Defender provides non-real-time antivirus scanning only when another antivirus product is installed, and HostChecker has presumably found that antivirus capability and failed the system because it doesn't provide real time protection, even though Norton is installed and providing real time protection on the machine. Defender doesn't allow me to enable its real time protection even if I disable Norton from its context menu, and the only solution I've found is to de-activate Norton. So: (1) Has anyone else seen this problem ? and (2) Is PulseSecure/Juniper aware of the problem, and are they planning an update to HostChecker to correct it?

2

Hello awr0

Thanks for the update on this issue. If that Pulse Update fixes this issue, then you can close this thread as you are the thread creator. Please pick the post that gives the solution and mark that post as the Solution. You can do this by clicking on Mark As Solution located on the bottom of each post.

Have a Good Night and

Thanks.

3

valcon5 reports on the cross-posting on the PulseSecure site (https://community.pulsesecure.net/t5/Pulse-Connect-Secure/Norton-version-22-12-0-104/m-p/38163/highlight/false#M24946) that they've tested ESAP file 3.2.2 and it appears to have fixed this issue and have been told by Pulse support that file 3.2.3 is their supported fix and that is should be out the beginning Sunday 25 March.

4

I've run into the same issue and have a ticket open with Pulse as well. I just provided logs for support but don't believe it will be a quick turn around. I have a custom check setup in Pulse to look for nortonsecurity.exe but that doesn't ensure the firewall is enabled. Does anyone know the registry setting to show the firewall/AV running? That would allow a custom check that ensures the firewall is running as well.

Thanks

5

Thanks for your reply, floplot - all makes sense. I've posted the problem to the PulseSecure Community at https://community.pulsesecure.net/t5/Pulse-Connect-Secure/Norton-version-22-12-0-104/m-p/38044#M24889, and asked if PulseSecure can tell us when they will release an update that fixes the problem, and what its version will be.  

6

Hello

There has been another Norton Update which has started as a phased in manner. The new version is 22.12.1.14. I'm not sure just what has changed yet. It still has nortonsecurity.exe in the Task Manager.

Have a Good Night and

Thanks.

7

Hello

Jan 23rd was the date that version 22.12.0.104 was released. Your Host Checker needs to be updated to accept the new version. I seem to remember that the Host Checker needs to be updated every time that Norton comes out with a new patch. There is an Announcement pinned to the top of this Board which describes the new things that were updated. Perhaps that description will be enough for the Host Checker to update it's program.

The change that may be bothering the Host Checker is now the main Norton .exe is now called nortonsecurity.exe. The HostChecker now needs to look for that to see that the program is running. I would say that is what needs to be changed. Previously, I believe it was called something like nis.exe for Norton Internet Security program,

Host Checker has always made the change that was necessary for them to recognize your Norton program. There have been other customers in the past who have had this issue when Norton has made a major change like this..

Have a Good Night and

Thanks.