Endpoint Protection

 Recently, my tamper protection log recorded two instances of unauthorized access blocked (open process token). Actor was  c:\...system32\cfmon.exe, target was c:\...\ccSvcHst.exe (Norton engine). CTFMon is involved with the language/alternative input services in Office XP. I've had similar attacks previously & Symantec tech support wanted $100 to scan my PC online. That was a no-go because I keep (healthy) backups of my partitions. What is the best and cheapest way to test the integrity of my firewall?

Tamper Protection is not a threat..It is a feature to protect its processes from other applications so in your case it might be false positive..as cfmon is known process you can disable Tamper Protection without harm.

You can use the Symantec Security Check to test your computers vulnerability to Online threats

http://security.symantec.com/sscv6/home.asp?langid=ie&venid=sym&plfid=23&pkj=ROXSXIBVEMBQAUWZKTK

Thomas