Endpoint Protection

 View Only
  • 1.  Symantec End Point blocks internet

    Posted Aug 31, 2011 09:02 PM

    I receive an error message each time I login to FaceBook saying Symantec Endpoint IP address 66.60.130.158 blocked.  The blocked time is exactly 10 minutes and can happen several times before I simply stop. Any solution?  I tried to post a screen print but was booted out.



  • 2.  RE: Symantec End Point blocks internet

    Trusted Advisor
    Posted Sep 01, 2011 01:21 PM

    Hello,

    Since you haven't sepcified the Exact Error Message, there are many reasons:

    1) It seems that Facebook website has been Blocked by the Administrator. Incase, you are the Administrator then, check the Firewall Rules in the Symantec Endpoint Protection Manager.

    2) A DoS Attack or spyware or Adware being blocked from Facebook.

    Denial of Service (DoS) is an attack designed to render a computer or network incapable of providing normal services. The most common DoS attacks will target the computer's network bandwidth or connectivity. Bandwidth attacks flood the network with such a high volume of traffic, that all available network resources are consumed and legitimate user requests can not get through.

    In the DoS detector of the firewall, when it detects an attack, it will block all the traffic with the same packet type for a while. The duration is about 1 minute. For example, if an ICMP packet is used to attack the SEP-installed host (as in our example of a "ping of death"), when SEP detect this attack, all the ICMP traffics to/from this host will be blocked for one minute.

    3) Check this Article to create an Exception:

    http://www.symantec.com/docs/TECH103728

    Hope this helps!!!



  • 3.  RE: Symantec End Point blocks internet

    Posted Sep 01, 2011 04:11 PM

    Check if the IP is really belongs to Facebook. And are you facing the same issue on another computers with the same SEP version?