Configure Behavioral Protection settings

Behavioral Protection identifies emerging threats based on the behavior of files. It detects malicious code before virus definitions are available through LiveUpdate and protects you from advanced threats.

Behavioral Protection categorizes threats as high-certainty or low-certainty based on their behaviors. By default, Behavioral Protection blocks high-certainty threats. You can change the settings to have Behavioral Protection block all threats or ask you to block or allow low-certainty threats when it detects them. If you allow a threat, Behavioral Protection does not notify you if it detects the same threat again.

You must be connected to the Internet to get real-time Behavioral Protection.

Turn on Network Drive Protection

In the Automatic Protection tab, under Behavioral Protection, in the Network Drive Protection row, move the switch to On.

We recommend that you keep Network Drive Protection turned on to keep your network drives secure.

Configure Behavioral Protection Advanced Mode settings

  1. In the Automatic Protection tab, under Behavioral Protection, in the Behavioral Protection Advanced Mode drop-down list:

    • To block high-certainty threats and allow low-certainty threats, select Off.

    • To block high-certainty threats and receive notifications for low-certainty threats, select Automatic.

      This is the recommended setting.

    • To block high-certainty threats, and receive notifications for low-certainty threats with few suspicious characteristics, select Aggressive.

      This setting is highly sensitive and might cause legitimate files to be identified as threats. It is recommended for advanced users only.

  2. In the Remove Risks Automatically drop-down list:

    • To block all threats, select Always.

    • To block only high-certainty threats, select High-Certainty Only.

      This is the recommended setting.

    • To ask for your decision when a risk is detected, select Ask Me.

  3. In the Remove Risks if I Am Away drop-down list:

    • To block all threats, select Always.

    • To block only high-certainty threats, select High-Certainty Only.

      This is the recommended setting.

    • To ignore threats when you are away, select Ignore.

Configure Show Behavioral Protection Block Notifications

Use the Show Behavioral Protection Block Notifications option to turn on or turn off notifications when Behavioral Protection blocks a threat. For example, you can suppress notifications when you watch a movie or play a video game in full screen mode.

In the Automatic Protection tab, under Behavioral Protection Advanced Mode, in the Show Behavioral Protection Block Notifications row:

    • Move the switch to Show All to notify you every time Behavioral Protection blocks a threat.

    • Move the switch to Log Only to suppress notifications but allow you to see details of blocked threats in the Security History window.

      To access the Security History window, in the Norton product main window, double-click Security and then click History.

Need more help?

I found this information helpful.

Yes No

Help us improve this solution.

Thank you for helping to improve this experience.

What would you like to do now?

Browse for solutions, search the Norton Community, or Contact Us.