Palo Alto blocking Symantec Antivirus

EdwinD — Wed, 12 Jun 2013 22:32:47 GMT

My URL filter on my PA2050 is blocking https://143.127.102.40/mrclean as malware-sites. This is Symantec SEP talking to the Symantec cloud. A discussion of the URIs used by Symantec is located here: Clients connecting to an IP. | Symantec Connect Community This specific IP is one of these URIs.

I've checked with Brightcloud, and they have the category as "Symantec". I am running the most current dynamic updates. The URL filter updated last night to 4112.

Where is this malware-sites coming from?

Re: Palo Alto blocking Symantec Antivirus

dyang — Wed, 12 Jun 2013 22:40:29 GMT

Hi Edwin,

I'm not sure where you're seeing the category "Symantec" with BrightCloud. I just did a category lookup on the BrightCloud website and it comes up as malware:

Webroot, Inc.

--Doris

topic Re: Palo Alto blocking Symantec Antivirus in General Topics

Palo Alto blocking Symantec Antivirus

Re: Palo Alto blocking Symantec Antivirus