Skip to main content
Computing at Cornell • CIT Contact Center (HelpDesk)

Symantec Client Security (AntiVirus + Firewall)

Get Started on Windows XP

    I. Download

  1. Before starting this installation, you need to remove any other antivirus or firewall software you have installed previously, except recent versions delivered by Bear Access (Symantec or Norton AntiVirus Corporate Edition 9.x, 8.x, or 7.6x). See additional update warnings.
  2. If you already have Bear Access installed, download Symantec Client Security from uPortal.Cornell:
    1. Log in to uPortal.Cornell
    2. Click the Bear Access tab
    3. Scroll down to the Protect My Computer folder
    4. Click Install Symantec Client Security 10.1.
    Or, if you don't have Bear Access, follow these steps:
    1. Download Symantec Client Security
    2. In the window with "Run, Save, or Cancel," click Run.

    II. Install

    An illustrated version of these instructions is available.

  3. A "Preparing to install" window will open. You do not need to click anything. Wait for the installation wizard to prepare its files.
  4. In the Welcome window, click Next >.
  5. In the License Agreement window, first scroll through the agreement to read it, then click I accept the terms in the license agreement, then click Next >.
  6. Four more setup windows will open. You do not need to adjust any of the settings in any of these windows. Click the Next > button at the bottom of each window.
  7. In the Ready to Install window, click Install. Status messages appear as the installation proceeds.
  8. When the installation finishes, several windows will open. The top one should be LiveUpdate. To run LiveUpdate (see illustration):
    1. In the Welcome window, click Next >.
    2. After the updates finish downloading, click Finish.
    3. Messages about virus protection being updated will appear. Wait for the update to finish.
  9. An "Old Virus Definition File" window may still be open. Close this window.
  10. In the Installation Completed window, click the Finish button.
  11. Click Yes to restart your computer.

    III. Set up Firewall

    As soon as your computer restarts, firewall-related messages will start to appear.

  12. You may see a message that Symantec Client Firewall has detected the Windows Firewall running on your computer and has disabled it. Your computer is still protected; Symantec's firewall provides much better protection than the firewall that comes with Windows. Click the OK button.

  13. At the same time, a small window pops up in the lower right corner of your screen:
    The window says, Please wait while Symantec Client Firewall performs initial configuration tasks. This may take several minutes.
    Do not begin any Internet activity while this window is open. Several additional popups will note specific firewall rules that are being created, for example,
    Rules automatically created for the program: Microsoft Internet Explorer
    These windows will close by themselves when the initial firewall setup is complete.

  14. The firewall will warn you each time an application requiring access to the Internet runs for the first time. You may see a small "Rules automatically created" popup like those shown above, but more often you will see a dialog where the recommended action is
    • Automatically configure Internet access (Recommended) or
    • Permit Always (Recommended) or
    • Always allow connections from this program on all ports (Recommended)
    Check these notices to be sure you recognize the application, then click OK.

    Example of a Cornell application:
    Example 1: Program Control - Low Risk - A remote system is attempting to access Cornell Sidecar Kerberos Application on your computer

    Example of a common Internet application:
    Example 2: Program Control - Low Risk - RealNetworks RealPlayer is attempting to access the Internet.

    Example of an alternative message that you may see:
    Example 3: Security Alert - Low Risk - Eudora.exe is attempting to connect to a DNS server.

  15. For software that is not standard on Windows and is not supplied by Cornell, you may see a notice that advises you to block the software's access to the Internet. Check such notices carefully. If you recognize the program named and you want to allow it to run, use the pull-down menu to change the firewall's "Block" recommendation to "Allow once" or "Always allow", then click OK. If you're not sure, ask for help.
    Example 2: Security Alert - Medium Risk - WinVNC4.exe is attempting to listen for connections from other computers.

    Note: Symantec Client Firewall has many advanced features and capabilities that are not covered here. The CIT Contact Center (HelpDesk) cannot help you with these features. The firewall has built-in help, and a manual from Symantec is provided with the installation files you downloaded.

    IV. Schedule Scans

    To remove malicious software that makes its way onto your computer, schedule a full scan daily at a time that's convenient for you. Alternatively, schedule a quick scan daily and a full scan once a week; the middle of the week is best for a weekly scan.

    There is also an illustrated version of these instructions.

  16. Open Symantec AntiVirus by double-clicking on the shield icon in the system tray.

    First, set up a weekly full scan:
  17. In the left pane, click on Scheduled Scans.
  18. In the right pane, click on New Scheduled Scan.
  19. Choose the Full Scan radio button and click Next >.
  20. In the name box, type Weekly Full Scan. Remove the text from the description box, and either leave the box blank or fill it in with a reminder to yourself about the purpose of this scan. Click Next >.
  21. Under Frequency, select Weekly. Under When, select Wednesday, then choose a time when your computer will be turned on but ideally not in use. Click Next >.
  22. Click Save.


    23. Second, set up a daily quick scan:
  23. In the left pane, click New Scheduled Scan. Leave the Quick Scan radio button selected. Click Next >.
  24. In the name box, type Daily Quick Scan. Remove the text from the description box, and either leave the box blank or fill it in with a reminder to yourself about the purpose of this scan. Click Next >.
  25. Under Frequency, leave Daily selected. Under When, choose a time when your computer will be turned on but ideally not in use. Click Next >.
  26. Click Save. The scans are now set to run at the times you specified.

    Options:
  27. To make any changes, select a scan and click the Edit button.
  28. Click the Exit button in the lower right corner of the Symantec AntiVirus window.

For more information...