Endpoint Protection

I am using End Point Protection with default firewall settings. In the firewall setting, I see an "allow" rule

for UDP,. "Allow IPV4 LLMNR from private IP addresses" . Within that rule, Ports and protocol indicate UDP, 5355,

and the ports list has one range for 192.168.0.0 - 192.168.255.255. So this all looks the way I would want and expect.

But I keep getting blocked messages for  address 192.168.0.3 on port 5355. So what am I missing. The is a "block" rule for

LLMNR, but it is sequentially after the allow rule, which afgain is how I thought it should work. Again, these are the canned rules.

I have not added or edited any rules.

Any help would be appreciated.

dave

Try by keeping the allow rule above the block rule.

Are these rules above the Blue line?

By default BLOCK rule always takes the precdence over ALLOW.

http://www.symantec.com/business/support/index?page=content&id=HOWTO55483

Check the NTP logs and see if you can find anything from that