Adding service exceptions in Windows Internet Connection Firewall to allow Symantec AntiVirus to communicate

Symantec.com > Enterprise > Support > Knowledge Base

Adding service exceptions in Windows Internet Connection Firewall to allow Symantec AntiVirus to communicate

Question/Issue:
You enable Internet Connection Firewall on a Windows XP computer or install Windows XP Service Pack 2 (which enables the firewall automatically). You need to create exceptions for Symantec AntiVirus services, so that the Symantec AntiVirus components can communicate.

Solution:

Notes:

When you install Windows XP Service Pack 2, Symantec AntiVirus appears automatically in the list of exceptions. However, the application associated with the rule is not one that handles communication. In order to allow Symantec AntiVirus to communicate, you must create exceptions for the correct services.
These file names also apply to Norton AntiVirus Corporate Edition 7.61.

Each of the Symantec AntiVirus components has a different list of services that need exceptions to work with the firewall. These services are as follows:

Symantec AntiVirus Server

Rtvscan.exe
You can find this service in the Symantec AntiVirus program folder.
Pds.exe
You can find this service in the Windows\System32\Cba folder.
Lucomserver.exe, Lucomserver_2_5.exe, or Lucomserver_2_6.exe
You can find this service in the Program Files\Symantec\LiveUpdate folder.

Symantec AntiVirus Client

Rtvscan.exe
You can find this service in the Symantec AntiVirus program folder.
Lucomserver.exe, Lucomserver_2_5.exe, or Lucomserver_2_6.exe
You can find this service in the Program Files\Symantec\LiveUpdate folder.

Symantec System Center

Nsctop.exe
You can find this service in the Program Files\Symantec\Symantec System Center folder.

Symantec Quarantine Server

Qserver.exe
Icepack.exe
You can find these services in the Program Files\Symantec\Quarantine folder.

AMS2

IAO.exe
Msgsys.exe
Hndlrsvc.exe
You can find these services in the Windows\System32\AMS_II folder.

To create an exception for a service or program in Windows XP Service Pack 2

On the Windows taskbar, click Start > Settings > Control Panel.
Double-click Security Center.
Click Windows Firewall.
On the Exceptions tab, click Add Program.
Click Browse.
Find the service for which you want to create and exception, and then click OK.
Click OK, and then confirm that the service that you added is checked.
Click OK.

To create an exception for a service or program in Windows XP Service Pack 1 or earlier

Right-click My Network Places, and click Properties.
Right-click Local Area Connection, and then click Properties.
On the Advanced tab, click Settings.
On the Exceptions tab, click Add Program.
Browse to the location of the application or service, select it, and click OK.
On the Exceptions tab, make sure that the application or service that you selected appears checked under Programs and Services.

References:
For information about topics related to Windows XP Service Pack 2, see the article Documents relating to Symantec Client Security and Windows XP Service Pack 2.

Available Translations:

Document ID: 2004070609092148
Last Modified: 05/04/2006
Date Created: 07/06/2004
Operating System(s): Windows XP Home, Windows XP Professional Edition, Windows XP Tablet PC, Windows XP 64-Bit Edition 2003, Windows Server 2003 32-bit Edition, Windows XP Media Center Edition 2005
Product(s): Symantec AntiVirus 10.1, Symantec AntiVirus Corporate Edition 10.0, Symantec AntiVirus Corporate Edition 8.0, Symantec AntiVirus Corporate Edition 9.0, Symantec Client Security 3.0, Symantec Client Security 3.1
Release(s): SAV 10.0 [All Releases], SAV 8.0 [All Releases], SAV 9.0 [All Releases], Symantec AntiVirus 10.1, Symantec Client Security 3.1, Symantec Client Security 3.x [All versions]