Make sure that all computers are using the same port for Remote Monitoring. You will find this setting in Network Settings > Network Security Map > Communications Port.
Also, if you purged the network did you first turn off Remote Monitoring?
Yeah I did that last week but I verify the ports before and after every trouble shooting session. The current version will not let you reset the fire wall until you have remote monitoring set to off. But thanks for the suggestions!!! I still believe that there is a problem with the general rules of the Smart fire wall. I was hoping that a Norton person would pick up on this and come to my rescue. I just don't know how to tackle the problem.
I have been working this issue for more than a month. This includes a one day visit to support lat week. I have another post titled "remote monitoring". I have posted everything I have done so far. But when I got done I was right back where I was before.
So I guess my question at this point is My desktop sees my laptop (computer discovery:on) but it will not show the security status. It shows Remote monitoring off. But the laptop shows everything to include the security status and that remote monitoring is on. What the heck?
I see the same problem when setting up the Network Security Map between my laptop (wireless) running W7 Home Premium 64 bit and my desktop on W7 Ultimate 32 bit.
When I connect the laptop via a wired connection to my router I do not see the problem. I can do any combination of restarts and the security status updates from both sides correctly.
Can you try your laptop as a wired connection and see if it works? You probably want to disable your wireless interface for this test. On the desktop it may show as a different device since your MAC address and possibly your IP address will be different when using the wired interface on your laptop. So be sure to check the desktop for a new device and set to FULL trust as appropriate.
Before I go into much detail on the next part I want to check on a few things. But I have gotten the laptop to show correctly from the desktop by adding a new firewall rule on the laptop. I don't think this rule should be necessary when the device it set to full trust but that is what it took to get mine to work reliably.
I am holding off giving you the details on this rule until I do some more research but please stay tuned for this.
Hey thanks for the response!!! I did the wire thing and still couldn't see the laptop until went to full trust across the network and individual computers. When I did that I restarted and the desk top lost the laptop. So I knew then that it had to be a rule. I just don't know enough about rules to wander into that area.
"I repeated what I had done this morning but restarted the firewall then I was able to turn the Red x's into green. I saw them all with green circles. I then restarted the computers. At which point the desktop got stuck refreshing the security status of the laptop. I repeated the entire process with my laptop wired, radio off, and got the same results.
All this leads me to believe that there is a problem with the general rules with the smart firewall. End of story"
Hey thanks for the response!!! I did the wire thing and still couldn't see the laptop until went to full trust across the network and individual computers. When I did that I restarted and the desk top lost the laptop. So I knew then that it had to be a rule. I just don't know enough about rules to wander into that area.
Hi atomicbubba,
If you manually click refresh or close and reopen the network security map, does the desktop not update the status of the laptop when in "wired" mode?
I definitely see the same problem as you do minus this one part - that mine seems to work with the laptop in wired mode.
Before I ask you to add a firewall rule I want to get Symantec's take on this so I have posted a question to them and should hear something back within a day or two.
Just to be clear. When you configured your laptop as a WIRED device did you check the network security map on the desktop to ensure that ALL device listings for the laptop were in FULL trust?
This is very important because when I did this test on mine, a NEW device showed in the network map of the desktop. It was basically a second entry for the laptop because now the MAC address (and in my case IP as well) was now different that what it saw when the laptop was connected wirelessly.
Please let me know on the last part and I will get back to you on this thread after hearing from Symantec.
I too encounter the SAME problem. Win7 & WinXP pro SP3. Wireless. On full trust, I can see both computers. On protected trust, Win7 can see XP but not vice versa. Although I can see both computers initially after lowering the trust, restarting either computers throws the map off and the xp computer can no longer monitor the Win7 PC.
I too encounter the SAME problem. Win7 & WinXP pro SP3. Wireless. On full trust, I can see both computers. On protected trust, Win7 can see XP but not vice versa. Although I can see both computers initially after lowering the trust, restarting either computers throws the map off and the xp computer can no longer monitor the Win7 PC.
Exactly the same symptoms I am seeing.
Tywin7 can you try yours with a WIRED laptop and see what you get? Please read my notes to the OP on things to check and do when doing this test.
Identical issue!! I had to reset the remote monitoring but I now have two laptops on my desktop with different addresses!! The weird part is my laptop address changed and the full trust shows on my new laptop address. I am so confused as to why this is happening!!
Just as a foot note, when I went back to wireless my laptop address changed back and the second laptop on the desktop assumed the old laptop address as stated in earlier post. Feels like the old IRQ days!!!
I mentioned that the MAC address and possibly the IP address as well will change. This is normal because there are two different IP interfaces on your laptop - one wireless and the other is a phsical interface.
While your laptop was WIRED, did you change both laptop devices in the network security map on the desktop to FULL TRUST?
You can check your router configuration and see how it is configured to divvy out IP address to devices on your network. I configure mine to give the same IP address to a particular MAC address so that the IP address of a particular interface will never change. However, your router will still see the wireless interface and wired interface as TWO different devices. Each can be configured in the router to have a designated IP address when it comes on line and requests an address.
You can also remove the second (wired) device from your network security map since that one will not normally be there.
To be clear, did either of the devices for your laptop change status in your network security map?
I would check into your router configuration as I mentioned above and see how to configure static IP addresses for your laptop. Configure one for the wired interface and the a different address for your wireless interface. Configure yet a third IP address for your desktop.
This might even clear up some confusion on your network security map.
I think after making these router configuration changes, this warrants another test with the network security map to see if a wired laptop works better.
I am not sure if the trust association with the network security map works against MAC address or IP address. I wll try to clarify this with Symantec also.
Best wishes.
Allen
P.S. I can recommend one firewall change after you've tried the above. This could be a temporary solution until Symantec has had a chance to weigh in on this.
The network map uses MAC addresses, I'm sure of it.
I use dynamic IP's with my laptops and the trust settings and monitoring always stay the same regardless of the IP address currently used.
That is good to hear and as it should be since only the MAC address uniqely identifies the computer or other device.
I don't know how to explain why the different results with my testing vs the OP. I think configuring the router to give static IP addresses for each MAC address just makes things less confusing, at least for us humans!
I want to see final results from the OP based on my last post before I recommend trying the firewall rule.
I didn't know you could configure the router. On my laptops I can only set a fixed IP address through the network adapter.
I leave them all dynamic so that when I take the laptops to other places they don't need to be reconfigured.
HI Dave,
The computer or laptop is indeed set for dynamic (DHCP). Most routers will allow static IP addresses to be configured but I can't say all of them.
On my Netgear for example this is in the LAN setup configuration tab. I basically look at the currently connected devices and I can then assign whatever IP address I want that device to have. It is basically just an IP address reservation.
This should not be necessary for the network security map but I think it would tend to make things less confusing.
Thanks, I never knew that. Mine are all Linksys and they don't have anything like that, but it seems like a nice feature.
I never had trouble with remote monitoring but the laptop I monitor the most hasn't been updated to 2011 yet.
A few times I have seen it appear to be stuck on "refreshing" but if I close the window and browse a shared folder on the laptop it will then connect and show the current statis.