blocking norton anti virus live updates

rated by 0 users
Not Answered This post has 0 verified answers | 5 Replies | 1 Follower

Top 75 Contributor
34 Posts
thomas975 posted on 23 May 2012 11:50 AM

Is it possible to block users from going to norton anti-virus live updates? For some reason some of our machines are going to the Norton site when we have a internal NAV update server. Its causing huge bandwidth issues and I want it blocked until we can fix the issue. If so how would we do that? I dont see it in our categories. Thanks

|

All Replies

Top 75 Contributor
34 Posts

im assuming i can block

http://liveupdate.symantecliveupdate.com
http://liveupdate.symantec.com
ftp://update.symantec.com

 Will Websense block the ftp site as well?

|
Top 10 Contributor
2,443 Posts
Editor
Moderator

Do you know what protocol and port it goes out on to get the AV live updates?

JACOB SLOAN, CCNA, WCSE

 

|
Top 75 Contributor
34 Posts

No I thought it was the urls below:

http://liveupdate.symantecliveupdate.com
http://liveupdate.symantec.com
ftp://update.symantec.com

 

So I guess it would be http port 80? Im not sure if this is correct. If so can Websense block a ftp: site as well if I just re-categorize those sites and set it to block?

|
Top 75 Contributor
34 Posts

I was told it was the URLs below

 

http://liveupdate.symantecliveupdate.com
http://liveupdate.symantec.com
ftp://update.symantec.com

 

I assume I can just re-categorize it then block that category. But I wanted to post on here to see if any one else has blocked it before and if this is how they did it? Also if I just add the ftp: site in it will block just like an http: site will?

 

J Sloan:

Do you know what protocol and port it goes out on to get the AV live updates?

 

|
Top 10 Contributor
986 Posts
Trusted Users (MVP)

Look at the logs of a machine that is going out and what the URL is.  Recategorize it to a category you block for everyone and voila

|
Page 1 of 1 (6 items)