I had question question about total protection product for windows. I had always had McAfee Total Protection on my app but rarely looked through it, I just mainly let it do its thing and checked in once in a while. I recently had look around the app as I got a bit bored and I found that on the security history section it had mentioned that it blocked "suspicious incoming connections". I did a bit of research and understood that this is pretty normal, even if there are a lot of connections blocked. What I found weird was that I installed McAfee on my Windows laptop, I think around mid to late May this year and the blocking of connections started on 12/06 (12th June).
I am bit concerned as I am a mainly a mac user and have only some basic experience with security related issues for windows. I also checked some of the IPs that were blocked and they looked familiar but I am still a bit worried.
I would really appreciate if you guys could let me know if this worth any concern.
McAfee Firewall stops unsafe connections being made to your computer. You might see large amounts of blocked connections in your Security History. Don’t be alarmed – your McAfee software is simply telling you that it kept you safe; The Firewall blocked any suspicious connections, so you don't need to worry about them.
When your input is needed, you will see a McAfee alert in the bottom right of your screen.
NOTE: Some blocked connections are the result of old network connections that your computer closed, only to receive a late close acknowledgment (or 'packet') from the remote system. These late responses occur often, but aren’t a security concern.
Advanced users might want to use a packet sniffer or analyzer, or a web browser traffic-monitoring product to investigate further. These tools capture HTTP and HTTPS traffic coming to and from your PC, and allow you to log and review that traffic.
If this information was helpful in any way or answered your question, please mark it Accept as Solution and give Kudos if appropriate
Thank you very much for your prompt reply its highly appreciated, apologies for my reply not being as swift.
Although I acknowledge that it is very much normal for McAfee to block connections and that it will alert me as soon as user input is required, my main concern was relating to the gap of which the computer had no connections blocked.
To be more specific I believe I installed my new subscription of McAfee on 14th May and there were no blocked connections from then on until 12th June. This raised concerns as Mcafee has been blocking connections ever since 12th June. So is it normal for such a large gap of nearly a month for these blocked connections to show up on my McAfee security history log.
McAfee blocks unsafe connections being made to your computer and the reason for not showing such unsafe connections from May till June is because there wasn't any such connections initiated at that time and that's why It didn't appear on the console.
From June-12, there were some unauthorized connections trying to get into your system and McAfee blocked such connections and appear in your security log.
Sorry if this has strung on a bit.
Thank you very much for clarify why there was a gap with no blocked connections.
I had looked up some of the IP Addresses that were blocked and know that I had visited those sites on the twelfth but had also visited those sites up to one/two weeks before so shouldn't there be those early connections logged as well. Can this sudden jump in blocked connections be caused by a security issue with my home wifi or something like that? I just would like to know what are the usual causes for this sudden jump in blocked connections are, so I can eliminate any external/internal factors that have caused this issue. I have McAfee on my MacBook, which I have also visited the same sites with but there does not seem to be any blocked connections on the McAfee history log, only scans.
Your valuable time, knowledge and patience is highly appreciated.
Sorry if this has been quite an inconvenience.
Sorry for the delayed response.
McAfee interface for MAC and Windows are similar but there are few options that's not included in MAC. McAfee on MAC doesn't have the feature to list the blocked connections on McAfee history log. As I mentioned before, it could be due to no suspicious connections during MAY and those kind of connections would have tried to access you machine in June. We also request you to monitor.for few days or even months and let us know if the same happens.
Thank you very much for your time and effort.
I will make sure to monitor the security history log and report back if the connections are continuing to show up in the blocked list or if there is any suspicious things happening related to the specific device.
*Also I forgot to mention one thing I am quite sure it's not related, but maybe two weeks after first few blocked connections the device showed up, an error of HP 301 (Relating to the hard disk and smart hard disk) came up when I started the device. I ran an extensive diagnostics (F2, Diagnostics) test on both of them and they "failed" the test. The laptop does have a 7+ years of moderate usage so I am sure this could be normal. Should this be a cause for concern/could this be related?
I don't think that this could be related to the concern you've reported to us. Please have a word with your system manufacturer and they will help you with HP 301 error.
More suspicious activity has occurred:
- I had installed malwarebytes as well and it is currently in the period of the premium free trial and it has quarantined an app named "DELTA" through the rtp (real time protection) feature. Why has Mcafee not picked this up and should I be worried?
- Also running a full scan it took 5+ hours just to get 76%, I don't usually run full scans so I am not certain if this usual (350k+ files on the device)