• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 251
  • Last Modified:

Installed Symantec Firewall, now getting errors in Event Log.

I have two machines on my network, both running XP SP2.  I recently installed Symantec Client Firewall on one of the machines.  Now, on that machine I'm getting an event 4321

The name "WORKGROUP        :1d" could not be registered on the Interface with IP address 192.168.1.100. The machine with the IP address 192.168.1.102 did not allow the name to be claimed by this machine.

On the other machine, I was getting an event 8002 but then I made it a trusted IP in the Symantec firewall.

Both machines have static IPs and are wired through a Linksys BEFSX41 router.
0
Tool_Fan
Asked:
Tool_Fan
1 Solution
 
Jay_Jay70Commented:
Hi Tool_Fan,

why are you using that sw? anything symantec will cause you nothing but grief! you are going to have to scroll through and disable and firewall utils to get this up and working then carefully make the changes you feel you want

my advice - get rid of it
0
 
cdesignerCommented:
check the names of computers and workgroup names. by this message it looks like other machine locked access to the workgroup. maybe you have created domain instead workgroup or something else.
0
 
Tool_FanAuthor Commented:
The names of the computers are fine, and they are apart of the same workgroup.  I tried changing the names and the workgroup name, then switching them back.
0
Concerto Cloud for Software Providers & ISVs

Can Concerto Cloud Services help you focus on evolving your application offerings, while delivering the best cloud experience to your customers? From DevOps to revenue models and customer support, the answer is yes!

Learn how Concerto can help you.

 
Jay_Jay70Commented:
disable firewall and see if things come back
0
 
Tool_FanAuthor Commented:
Yes.  If I disable the Symantec firewall on my machine, the errors in Event Log stop coming up.

I had an older version of Symantec Client Security about six months ago.  I didn't have that problem then, I don't think.

It has rules set up by default to block incoming and outgoing NetBIOS, NetBIOS Name, Windows file sharing, ICMP, and others.

I have Windows file sharing set to "permit".  Question is what do I change to fix this issue?

I haven't noticed any connection/sharing problems. It's just that I like to check the event log, and it's a hassle to do so when there's hundreds of those 4321 events.
0
 
Jay_Jay70Commented:
hmm along with file sharing you will need to unblock the netbios and netbios name, i would also allow ICMP and anything DNS related
0
 
Tool_FanAuthor Commented:
Oops.  Turns out only Windows filesharing is blocked by default.  All those other rules are overridden by higher up rules that allow those protocols.  I disabled them anyway, but still no luck.

I have raised the point value of this question.
0
 
Jay_Jay70Commented:
hmm i dont have the firewall set up so im not sure exactly where to configure it

http://www.utexas.edu/its/bevoware/security/winsecurity.html
0
 
Tool_FanAuthor Commented:
That document doesn't go into detail about the advanced tab.  Although, I think I may have fixed it after messing with the rules a little.

I'll report back sometime tomorrow.  If I don't get any more system events before then, I'll consider the prolem fixed.
0
 
Jay_Jay70Commented:
what worries me is having rules, and then overriding rules! good luck!
0
 
Tool_FanAuthor Commented:
Well, it is basically like an old school router/firewall config table.  A list of rules, and rules that are higher on the list take precedence.  By default there were duplicates of each rule, one permitting and one denying.  Which ever one was one top was in affect.

If I don't have any more problems then Ill give you credit, Jay_Jay70, since you participated the most in trying to help.
0
 
Jay_Jay70Commented:
only if you want to mate, if you resolved yourself you can get a refund :)
0
 
Jay_Jay70Commented:
no complaints
0
 
GranModCommented:
Closed, 300 points refunded.
GranMod
The Experts Exchange
Community Support Moderator of all Ages
0

Featured Post

VIDEO: THE CONCERTO CLOUD FOR HEALTHCARE

Modern healthcare requires a modern cloud. View this brief video to understand how the Concerto Cloud for Healthcare can help your organization.

Tackle projects and never again get stuck behind a technical roadblock.
Join Now