Recover from an emergency | HP Norton Personal Firewall 2003

12

Responding to emergencies

Recover from an emergency

See “Identify the source of communications” on page 43.

See “Restrict a blocked computer” on page 88.

6Use Visual Tracking to identify the IP address of the computer that the attacker used.

You can use this information to report the attack to the ISP that owns the IP address.

7To block all future connections from this IP address, add this computer to your Restricted Zone.

If you suspect that the attacker has already compromised your computer, install Norton Personal Firewall, then visit http://security.symantec.com for tools to repair damage and eradicate any threats that the attacker may have placed on your computer.

Recover from an emergency

Once you’ve dealt with the problem, you can install Norton Personal

Firewall and perform the following activities.

Action	Description

Install Norton	Norton Personal Firewall can keep your computer safe from
Personal Firewall.	future attacks.
	See “Installing Norton Personal Firewall” on page 19.

Update your	After installing, run LiveUpdate to ensure that you have the
protection.	most updated protection.
	See “Keeping current with LiveUpdate” on page 53.
Configure your	The default installation of Norton Personal Firewall should
firewall.	provide sufficient protection for most users, but you can
	customize protection by adjusting firewall settings.
	See “Customize firewall protection” on page 72.
Periodically review	Norton Personal Firewall maintains extensive logs of all of
program logs and	the actions that it takes to protect your computer. Check
statistics.	these logs occasionally to identify potential problems.
	See “Monitoring Norton Personal Firewall” on page 103.

Image 12

HP Norton Personal Firewall 2003 manual Recover from an emergency, Action Description

Contents

User’s Guide Norton Personal Firewall User’s Guide Symantec License and Warranty Disclaimer of Damages Contents Chapter Norton Personal Firewall basics Chapter Controlling access to protected computers Chapter Protecting your privacy Appendix Troubleshooting Norton Personal Firewall Contents Responding to emergencies If you think your computer is under attackTo block and investigate an attack Recover from an emergency Action Description Prevent future problems Prevent future problems About Norton Personal Firewall What’s new in Norton Personal Firewall Norton Personal Firewall features About Norton Personal Firewall Norton Personal Firewall features include Installing Norton Personal Firewall System requirements Supported email clients Requirements Before installation If you’re using Windows XPSupported instant messenger clients Prepare your computer Install Norton Personal Firewall To disable the Windows XP firewallTo install Norton Personal Firewall Install Norton Personal Firewall Click Next Register your software If the opening screen does not appearTo register your software Register your software Register your software After installation Set up Home NetworkingRestart your computer Use the Security Assistant Set up Program Control To set up Home Networking To set up Program Control Set up Privacy Control Set up Password Protection To set up Privacy Control If you have Norton SystemWorks installed To protect Norton Personal Firewall options with a passwordTo open Norton Personal Firewall from Norton SystemWorks To open Norton SystemWorks from Norton Personal Firewall If you need to uninstall Norton Personal Firewall To uninstall Norton Personal FirewallTo uninstall LiveReg and LiveUpdate Access Norton Personal Firewall To access Norton Personal FirewallNorton Personal Firewall basics Access Norton Personal Firewall from the system tray To use the Norton Personal Firewall system tray menu Access Norton Personal Firewall protection features To change settings for individual featuresWork with Norton Personal Firewall Use the Security Monitor To view the Security MonitorTo view the Security Center Respond to Norton Personal Firewall alerts Select a task with the Security MonitorLearn more with the Alert Assistant Adjust the Alerting Level To adjust the Alerting LevelTo use the Alert Assistant Use Alert Tracker To view or hide Alert Tracker Check your computer’s vulnerability to attack To review recent Alert Tracker messagesTo move Alert Tracker To hide Alert Tracker from the system tray menu Identify the source of communications To get more information about an at-risk areaTo trace a connection attempt from Statistics To trace a connection attempt from the Log Viewer Stop Internet communication with Block Traffic About LiveUpdate options Customize Norton Personal FirewallAbout General options About Firewall options Password-protect options About Web Content optionsAbout Email options Temporarily disable Norton Personal Firewall Reset options passwordTo reset your Norton Personal Firewall options password To temporarily disable Norton Personal Firewall To disable a protection feature To access HelpFor more information Look up glossary terms Use online Help To access window or dialog box Help Readme file and Release NotesWindow and dialog box Help To read the Readme file To install Adobe Acrobat Reader To read the Release Notes To access the Symantec Web site in your browser About Norton Personal Firewall on the WebExplore online tutorials To read the User’s Guide from your hard disk Subscribe to the Symantec Security Response newsletter To subscribe to the Symantec Security Response newsletter Keeping current with LiveUpdate About program updates About protection updates About your subscription When you should update If you run LiveUpdate on an internal networkRequest an update alert To request an update alert If you can’t use LiveUpdate Obtain updates using LiveUpdateSet LiveUpdate to Interactive or Express mode To obtain updates from the Symantec Web site Turn off Express mode To set LiveUpdate to Interactive or Express modeTo turn off Express mode Notify me To disable Automatic LiveUpdate Run LiveUpdate automatically Control how people use your computer Connect to a network Enable file and printer sharing To enable file and printer sharingOrganize computers into network zones To open the Home Network Wizard from the Security Center To open the Home Network Wizard from the Security Monitor Identify computers to Norton Personal Firewall To manually add computers to zonesTo remove computers from zones To find an IP address with Ipconfig Find a computer’s IP addressSpecify an individual computer To find an IP address with Winipcfg Specify computers using a network address To specify computers using a network addressSpecify a range of computers If you use Dhcp Control how users access the Internet Control how outside users access your networkIf you access the Internet via a cable or DSL router If multiple computers share a single Internet connection If you run a Virtual Private Network PGP Guarding against intrusion attempts Norton Personal Firewall monitors communications Intrusion Detection analyzes communications Visual Tracking locates attackers Customize firewall protection Change the Security Level sliderTo change the Security Level slider Change individual security settings To change individual security settings Click Custom Level Reset security settings to defaults To reset security settings to defaultsCustomize firewall rules How firewall rules are processed Enable Automatic Program Control Create new firewall rules Scan for Internet-enabled programs To enable Automatic Program Control Manually add a program to Program Control To add a program to Program Control Change Program Control settings To change Program Control settings Manually add a firewall rule To add a General RuleTo add a Trojan Horse Rule Write a firewall rule To add a Program RuleTo write a firewall rule TCP UDP Change an existing firewall rule Select the ports the rule should monitor. Your options are Temporarily disable a firewall rule Change the order of firewall rulesRemove a firewall rule Reset firewall rules to the default settings Customize Intrusion DetectionExclude specific network activity from being monitored To remove a firewall rule To include attack signatures Enable or disable AutoBlock To enable or disable AutoBlockUnblock computers To unblock computers currently blocked by AutoBlock Exclude computers from AutoBlock Restrict a blocked computerTo exclude specific computers from AutoBlock To restrict a blocked computer Protecting your privacy Identify private information to protect Privacy Control and SSL Add private informationTo add private information Customize Privacy Control Modify or remove private informationSet the Privacy Level To modify or remove private information Adjust individual Privacy Control settings Change the Private Information settingTo change the Private Information setting To set the Privacy Level Change the Cookie Blocking setting To change the Cookie Blocking setting Enable or disable Browser Privacy Disable or enable secure Web connectionsTo enable or disable Browser Privacy Blocking by dimensions Blocking Internet advertisementsHow Ad Blocking works Enable or disable Ad Blocking To enable or disable Ad BlockingBlocking by location Enable or disable Popup Window Blocking To enable or disable Popup Window Blocking Enable or disable Flash blocking To enable or disable Flash blockingUse the Ad Trashcan To use the Ad Trashcan Use text strings to identify ads to block or permit Click Open the Ad Trashcan. The Ad Trashcan window appears How to identify Ad Blocking strings Add an Ad Blocking stringTo add an Ad Blocking string Modify or remove an Ad Blocking string To modify or remove an Ad Blocking string Use text strings to identify ads to block or permit Monitoring Norton Personal Firewall View the Status & Settings window To view the Status & Settings windowView the Statistics window To view the Statistics window Reset information in the Statistics window To reset information in the Statistics windowReview detailed statistics Reset detailed statistics counters To reset countersTo review detailed statistics View Norton Personal Firewall Logs View the logs To view the logs Refresh the logs Clear the logs Change the size of the logs To change the size of a log Troubleshooting Norton Personal Firewall To explore the Symantec service and support Web site Troubleshoot Norton Personal Firewall problems What is wrong with this Web site?To search the Symantec service and support Web site Why can’t I post information online? Why did an email message I sent never arrive? Why can’t I connect to the Internet via my cable modem? To make your NetBIOS name visible How can a Web site get my browser information? To allow ISP port scans Troubleshoot Norton Personal Firewall problems About the Internet How information is transmitted over the Internet 119 How Web information is located on the Internet About UDPAbout Icmp About Igmp Requesting a Understanding URLs How ports identify programs on servers How ports identify programs on servers How computers are identified on the Internet Well-known ports 124 About the Internet Understanding Internet risks Risks from hackersProcess of a hacker attack Information gathering Initial access Privilege escalation Risks from active content Covering tracks Risks from inappropriate content and activities Restricting access to programsRisks to your privacy Blocking site and newsgroup categories Understanding cookies Blocking cookiesGood cookies Bad cookies Risks from Trojan horses and viruses Tracking Internet use Likelihood of being attacked Glossary Domain Download IP Internet Protocol IP address Internet Protocol address Network address Operating system Glossary Web Web site World Wide Web WWW Glossary Service and support solutions Customer service Technical support Subscription policySupport for old and dis versions Worldwide service and support Service and support offices Service and support solutions Index Index Index Index Index 150 Index Norton Personal Firewall