Video Screencast Help
Symantec to Separate Into Two Focused, Industry-Leading Technology Companies. Learn more.

Getting a port message and something about being blocked, I do not want to block

Created: 16 May 2013 • Updated: 16 May 2013 | 14 comments
This issue has been solved. See solution.

This is my VM that I am testing on and this message comes up.

Operating Systems:

Comments 14 CommentsJump to latest comment

.Brian's picture

That is from NTP

Please click the "Mark as solution" link at bottom left on the post that best answers your question. This will benefit admins looking for a solution to the same problem.

The Conquistador's picture

What it was doing was preventing me from copying a folder over, the folder is 300MB and it was saying it will take 11-12 hrs to copy it, I shut off SMC and BOOM it speeds up, what can I do to allow the traffic this is a VM OS that I am running from MY PC... I want an open connection.

.Brian's picture

Go into the firewall policy and select the Protection and Stealth tab and uncheck "Automatically block an attacker's IP address"

This will stop it from being blocked for the 10 minute time period.

Please click the "Mark as solution" link at bottom left on the post that best answers your question. This will benefit admins looking for a solution to the same problem.

.Brian's picture

Not sure than but that is the setting to adjust, unless this is an unmanaged client than you need to do it on the client instead of the SEPM

Please click the "Mark as solution" link at bottom left on the post that best answers your question. This will benefit admins looking for a solution to the same problem.

.Brian's picture

The real question is why unchecking the setting isn't working.

Please click the "Mark as solution" link at bottom left on the post that best answers your question. This will benefit admins looking for a solution to the same problem.

The Conquistador's picture

Agreed. I don't wanna battle test this any longer as I am already on the front lines with 2 other high priority issues that need a resolution right away because they can affect all machines. Usually when my machine has a problem I don't care enough to fix it unless I absolutely HAVE to cool

.Brian's picture

Port scan detections by SEP are not bocked, only monitored and logged/alerted. It's when you have the oprtion checked above that I mentioned where the block comes into play.

IDK, it's working for you I guess that's all that matters.

Please click the "Mark as solution" link at bottom left on the post that best answers your question. This will benefit admins looking for a solution to the same problem.

.Brian's picture

What if you disable the fw on the VM? If it's bridged, you may be scanning traffic twice, on the host where SEP is installed and VM. Seems to be overkill.

Please click the "Mark as solution" link at bottom left on the post that best answers your question. This will benefit admins looking for a solution to the same problem.