top links
top shadow
 
lft_mid
Google logorgt_mid
homeswitchstoreEARTHLINK TOOLSMEMBER CENTERtab_rgt
DIAL UPHIGH SPEEDwirelessbusinessextras

Information required | Symantec Connect Community
Video Screencast Help
Search Video Help Close Back
to help
Not able to make it to Vision this year? Get a sampling of what went on in the Best of Vision on Demand group.

Information required

Updated: 17 Apr 2012 | 8 comments
Shiva S's picture
0 0 Votes
Login to vote
This issue has been solved. See solution.

Hi,

 

What is the purpose of the below websites. I could see some usage of these sites in the network.

securityresponse.symantec.com

om.symantec.com

shasta-rrs.symantec.com

stats.qalabs.symantec.com

sigs.symantec.com

secure.symantec.com 

Comments

Swapnil's picture
08
Feb
2012
3 Votes -3
Login to vote

Check host files from where

Check host files from where you have found these URL'S these are not website for symantec except the last one .

http://msmvps.com/blogs/hostsnews/archive/2007/08/...

I doubt there is Virus in your network or on the machine where you have found these URL'S kind contact Support as soon as possible to remediate this issue .

Make sure to disable Autorun from GP for the entire network , if this is a 1 machine kindly Isolate it .and perform scan with NSS or SEP will safe mode .

what SEP product are you using ?

Swapnil

SOC Team .

Please don't forget to mark your thread solved with whatever answer helped you.

Shiva S's picture
08
Feb
2012
0 Votes 0
Login to vote

Swapnil

These sites are been tracked through our network monitoring fucntion.

And the SEP version is a combination of RU6 & RU7.

pete_4u2002's picture
08
Feb
2012
0 Votes 0
Login to vote

i do not think it is virus,

i do not think it is virus, it might be SEP /SEPM information sending to Symantec sites. Some of them ae related to security response where information related threat/signatures are saved.

Cameron_W's picture
08
Feb
2012
1 Vote +1
Login to vote

The shasta-rrs.symantec.com

The shasta-rrs.symantec.com is for clients submitting reputation requests with insight. Below is documentation on some other sites that you may see traffic over related to symantec.

http://www.symantec.com/docs/TECH162286

If I was able to help resolve your issue please mark my post as solution.

Mithun Sanghavi's picture
08
Feb
2012
2 Votes +2
Login to vote

Symantec Websites

Hello,

All the Above Sites are Symantec / Norton related sites.

securityresponse.symantec.com - would route you to http://www.symantec.com/security_response/

om.symantec.com part of norton - You should see connections to this site when visiting sites within the Symantec/Norton domain.

shasta-rrs.symantec.com - Symantec Licensing 

Check this Articles: http://www.symantec.com/docs/TECH163042

http://www.symantec.com/docs/TECH162286

stats.qalabs.symantec.com - Part of http://qalabs.symantec.com/

sigs.symantec.com -- belongs to Symantec 

secure.symantec.com - https://www-secure.symantec.com/connect/

Hope that helps!!

Mithun Sanghavi
Symantec Technical Support Engineer, SEP
MIM | MCSA | SCTS | ITIL v3

Follow me on Twitter: @mithun_sanghavi

Don't forget to mark your thread as 'SOLVED' with the answer that best helped yo

Shiva S's picture
08
Feb
2012
0 Votes 0
Login to vote

Hi Mithun

What is the purpose of

stats.qalabs.symantec.com - Part of http://qalabs.symantec.com/

sigs.symantec.com

Mithun Sanghavi's picture
09
Feb
2012
2 Votes +2
Login to vote

Question

Hello,

Probably these sites are - 

QALabs is for Testing of Symantec / Norton Products and sigs for checking signatures. 

http://www.symantec.com/docs/TECH154659

Again, I have no idea why you see traffic of these in your network?

Did you have Norton Products?

Mithun Sanghavi
Symantec Technical Support Engineer, SEP
MIM | MCSA | SCTS | ITIL v3

Follow me on Twitter: @mithun_sanghavi

Don't forget to mark your thread as 'SOLVED' with the answer that best helped yo

Shiva S's picture
09
Feb
2012
0 Votes 0
Login to vote

Mithun

Nope. We don't have Nortan in our network.