Information required
Updated: 17 Apr 2012 | 8 comments
This issue has been solved. See solution.
Hi,
What is the purpose of the below websites. I could see some usage of these sites in the network.
securityresponse.symantec.com
om.symantec.com
shasta-rrs.symantec.com
stats.qalabs.symantec.com
sigs.symantec.com
secure.symantec.com
Discussion Filed Under:

Comments
Check host files from where
Check host files from where you have found these URL'S these are not website for symantec except the last one .
http://msmvps.com/blogs/hostsnews/archive/2007/08/...
I doubt there is Virus in your network or on the machine where you have found these URL'S kind contact Support as soon as possible to remediate this issue .
Make sure to disable Autorun from GP for the entire network , if this is a 1 machine kindly Isolate it .and perform scan with NSS or SEP will safe mode .
what SEP product are you using ?
Swapnil
SOC Team .
Please don't forget to mark your thread solved with whatever answer helped you.
Swapnil
These sites are been tracked through our network monitoring fucntion.
And the SEP version is a combination of RU6 & RU7.
i do not think it is virus,
i do not think it is virus, it might be SEP /SEPM information sending to Symantec sites. Some of them ae related to security response where information related threat/signatures are saved.
Cheers!
Pete
Help Link: http://www.symantec.com/business/support/overview.jsp?pid=54619
The shasta-rrs.symantec.com
The shasta-rrs.symantec.com is for clients submitting reputation requests with insight. Below is documentation on some other sites that you may see traffic over related to symantec.
http://www.symantec.com/docs/TECH162286
If I was able to help resolve your issue please mark my post as solution.
Symantec Websites
Hello,
All the Above Sites are Symantec / Norton related sites.
securityresponse.symantec.com - would route you to http://www.symantec.com/security_response/
om.symantec.com part of norton - You should see connections to this site when visiting sites within the Symantec/Norton domain.
shasta-rrs.symantec.com - Symantec Licensing
Check this Articles: http://www.symantec.com/docs/TECH163042
http://www.symantec.com/docs/TECH162286
stats.qalabs.symantec.com - Part of http://qalabs.symantec.com/
sigs.symantec.com -- belongs to Symantec
secure.symantec.com - https://www-secure.symantec.com/connect/
Hope that helps!!
Mithun Sanghavi
Symantec Technical Support Engineer, SEP
MIM | MCSA | SCTS | ITIL v3
Follow me on Twitter: @mithun_sanghavi
Don't forget to mark your thread as 'SOLVED' with the answer that best helped yo
Hi Mithun
What is the purpose of
stats.qalabs.symantec.com - Part of http://qalabs.symantec.com/
sigs.symantec.com
Question
Hello,
Probably these sites are -
QALabs is for Testing of Symantec / Norton Products and sigs for checking signatures.
http://www.symantec.com/docs/TECH154659
Again, I have no idea why you see traffic of these in your network?
Did you have Norton Products?
Mithun Sanghavi
Symantec Technical Support Engineer, SEP
MIM | MCSA | SCTS | ITIL v3
Follow me on Twitter: @mithun_sanghavi
Don't forget to mark your thread as 'SOLVED' with the answer that best helped yo
Mithun
Nope. We don't have Nortan in our network.
Would you like to reply?
Login or Register to post your comment.