Editing Norton Internet Security (section)

===Windows edition===

====2000 (1.0, 2.0)====
Norton Internet Security 2000, released January 10, 2000, was Symantec's first foray beyond [[computer virus|virus]] protection and content filters.<ref>{{cite web|title=Symantec Ships Norton Internet Security 2000 |url=http://www.symantec.com/about/news/release/article.jsp?prid=20000110_01 |archive-url=https://web.archive.org/web/20090916182512/http://www.symantec.com/about/news/release/article.jsp?prid=20000110_01 |url-status=dead |archive-date=September 16, 2009 |date=January 10, 2000 |publisher=[[NortonLifeLock|Symantec]] |access-date=25 July 2009}}</ref><ref>{{Cite news|author=Leslie Walker |title=Taking a Whack at Hackers |url=https://www.washingtonpost.com/wp-srv/business/longterm/tech/techthursday/dotcom/dotcom011300.htm |date=January 13, 2000 |newspaper=The Washington Post |access-date=25 July 2009}}</ref> Its release followed an alliance between [[Internet provider]] [[Excite@Home]] and [[antivirus]] vendor [[McAfee.com]] to provide Internet subscribers with McAfee's new firewall software, ''McAfee Personal Firewall''.<ref>{{cite web|author=Wylie Wong |title=Excite@Home, McAfee make pact for network security |url=http://news.cnet.com/2100-1033-236262.html&tag=st.ne.1002.bgif |date=January 31, 2000 |publisher=[[CNET]] |access-date=25 July 2009}}</ref> Version 2000s firewall, based on AtGuard from WRQ, filters traffic at the packet level. It could block [[ActiveX]] controls and [[Java applets]]. Other features included [[HTTP cookie|cookie]] removal, and [[banner ad]] [[ad blocking|blocking]].<ref>{{cite web|author=Larry Armstrong |title=Back Off, Hacker |url=http://www.businessweek.com/archives/2000/b3670174.arc.htm|archive-url=https://web.archive.org/web/20090923001049/http://www.businessweek.com/archives/2000/b3670174.arc.htm|url-status=dead|archive-date=September 23, 2009|date=February 28, 2000 |publisher=[[BusinessWeek]] |access-date=25 July 2009}}</ref><ref>{{Cite news|author=Michael Foreman |title=Internet morals watchdog on guard |url=http://www.nzherald.co.nz/ict-news/news/article.cfm?c_id=55&objectid=118155 |date=February 15, 2000 |publisher=[[The New Zealand Herald]] |access-date=25 July 2009}}</ref> [[ZDNet]] found the ad blocker to remove graphics that were not ads, breaking pages. Adjusting the settings fixed the problem, however the process was complicated. [[ZDNet]] noted the lack of information presented concerning attacks the firewall blocked.<ref>{{cite web|title=Norton Internet Security 2000 |url=http://www.zdnet.com.au/reviews/software/security/soa/Norton-Internet-Security-2000/0,139023452,120106149,00.htm |date=September 16, 2000 |publisher=[[ZDNet]] |access-date=26 July 2009}}{{dead link|date=July 2024|bot=medic}}{{cbignore|bot=medic}}</ref> [[Norton LiveUpdate]] downloads and installs program updates.

The ''Family Edition'' adds parental controls. Parental controls were backed by a [[quality control]] team of 10 people who searched the web for inappropriate content. Found content was categorized in subject matter and placed on a blacklist of about 36,000 sites. A designated administrator could add blocked sites, however the pre-supplied blacklist cannot be viewed or edited since it was [[hard code]]d. Administrators could block certain subject matter. Another option was to block all sites, then create a [[whitelist]] of allowed sites. Family Edition could block transmission of specified personal information. Such information was replaced with the letter "X". However, [[CNN]] noted [[X-rated]] sites were retrieved when personal information was queried by a [[search engine]].<ref>{{Cite news|author=Alexandra Krasne |title=Symantec bundles safe surfing tools |url=http://www.cnn.com/TECH/computing/9910/19/symantec.bundle.idg/index.html|date=October 19, 1999 |publisher=CNN |access-date=25 July 2009}}</ref>

Version 2.0 was released June 12, 2000<ref>{{cite web|title=Norton Internet Security 2000 Provides Home PC Users Total Internet Protection|url=https://www.symantec.com/region/can/eng/press/2000/n000612.html|website=[[Broadcom#Symantec enterprise security|Symantec]]|access-date=31 August 2014|archive-date=24 September 2015|archive-url=https://web.archive.org/web/20150924123547/http://www.symantec.com/region/can/eng/press/2000/n000612.html|url-status=dead}}</ref>

====2001 (2.5, 3.0)====
Version 2001 (2.5) was released September 18, 2000, adding support for [[Windows ME]] in addition to the [[Windows 9x]] series, [[Windows NT]], and [[Windows 2000]].<ref>{{cite web|title=Market-Leading Norton Internet Security 2001 and Norton Personal Firewall 2001 Now Support Windows Millennium Edition |url=http://www.symantec.com/about/news/release/article.jsp?prid=20000918_01 |archive-url=https://web.archive.org/web/20090916182517/http://www.symantec.com/about/news/release/article.jsp?prid=20000918_01 |url-status=dead |archive-date=September 16, 2009 |date=September 18, 2000 |publisher=Symantec|access-date=25 July 2009}}</ref> Following attacks by the [[ILOVEYOU]] and [[Anna Kournikova (computer virus)|Anna Kournikova]] [[Scripting language|script]] viruses, this version could block malicious scripts without virus signatures, by analyzing behavior.<ref>{{Cite news|title=Symantec launches new version of security suite|author=George A. Chidi Jr.|url=http://edition.cnn.com/2001/TECH/ptech/03/21/new.symantec.idg/index.html |date=March 21, 2001 |publisher=CNN |access-date=25 July 2009}}</ref>

The firewall scans for Internet-enabled applications and creates access rules during installation based on a knowledge base maintained by Symantec. In ''[[PC Magazine]]'' testing, the installation took 24 minutes to complete on a 750&nbsp;MHz Pentium III with 92 Internet-enabled applications. Using the firewall, users could determine whether to accept cookies, Java [[applets]], and [[Active Scripting|ActiveX]] controls on a global or per-site basis. A new feature, Intrusion Detection with AutoBlock, could detect [[port scan]]s and block further intrusion attempts. The program provides notifications for intrusion attempts, reporting the severity level and providing access to threat details. Alternatively, the firewall could put the computer in stealth, essentially hiding the system. Users could configure the security level, managing the number of notifications. Testing conducted by ''PC Magazine'' using [[Shields Up]] and Symantec's Security Check found that the firewall successfully stealthed all ports, hiding the computer from view. A leak test was conducted to see the firewall's ability to detect outbound connections. Each attempt was detected and the suite offered to block the attempts.<ref name="pcmag" >{{Cite news|author=Sal Ricciardi|title=Adding Stealth to Your PC|url=https://www.pcmag.com/article2/0,2817,33502,00.asp|date=June 12, 2001|publisher=[[PC Magazine]]|access-date=2 August 2009}}</ref>

The ''Family Edition'', like the prior version, included parental controls and the information filtering feature. Parental controls come with a list of objectionable sites, separated into 32 categories. The list was updated every two weeks by [[Norton LiveUpdate]]. Using the list alone, Norton only blocks listed sites. Consequently, Norton may not block sites until the next update. Parents could customize the list, adding or removing sites. A list of allowed sites could be created to restrict children to those specific sites. This version used application blocking rather than protocol or port filtering to control Internet access. Children could be restricted in the applications they used to access the Internet. A parental control profile could be set up for each child, and settings could be automatically configured based on their age group, whether they be a child, :teenager, adult, or administrator. Internet usage and violations were noted in a report presented to parents.<ref>{{Cite news|author=Jay Munroi|title=At Home: Norton Internet Security 2001 Family Edition|url=https://www.pcmag.com/article2/0,2817,26623,00.asp|date=September 25, 2001|publisher=PC Magazine|access-date=2 August 2009}}</ref> ''PC Magazine'' found that enabling parental controls added a minute to a computer's boot time.<ref>{{Cite news|author=Les Freed|title=Norton Internet Security, Family Edition|url=https://www.pcmag.com/article2/0,2817,1651399,00.asp|date=June 12, 2001|publisher=PC Magazine|access-date=2 August 2009}}</ref>

Version 3.0 was released March 19, 2001.<ref>{{cite web|title=Symantec's New Norton Internet Security 2001 v.3.0 Provides Essential Protection from Viruses, Hackers and Privacy Threats|url=http://www.symantec.com/about/news/release/article.jsp?prid=20010319_03|website=[[Broadcom#Symantec enterprise security|Symantec]]|access-date=31 August 2014|archive-date=3 September 2014|archive-url=https://web.archive.org/web/20140903204154/http://www.symantec.com/about/news/release/article.jsp?prid=20010319_03|url-status=dead}}</ref>

====2002 (4.0, 5.0)====
Version 2002 was announced on August 28, 2001. The ''Family Edition'' was dropped, so parental controls and information filtering were bundled. The installation was noted as quick and simple by both ''PC Magazine'' and [[CNET]]. Installation required a reboot, and afterwards the Security Assistant guides users through a questionnaire to best configure the service. CNET encountered a problem when upgrading from the prior release: customized settings were lost. ''PC Magazine'' found the default settings, aimed at avoiding frequent notifications, were somewhat permissive. [[Windows 95]] support was dropped.<ref>{{cite web|author=Gregg Keizer|title=Norton Internet Security 2002|url=http://reviews.cnet.com/internet-security-and-firewall/norton-internet-security-2002/4505-3667_7-6844863.html|date=October 2, 2001|publisher=[[CNET]]|access-date=2 August 2009}}</ref><ref>{{Cite news|author=Edward Mendelson|title=Norton Internet Security 2002|url=https://www.pcmag.com/article2/0,2817,635,00.asp|date=September 25, 2001 |publisher=PC Magazine|access-date=2 August 2009}}</ref>

Running a full scan compiled a list of Internet-enabled applications. Users set permissions or accepted Norton's defaults. The firewall detected and blocked port scans and logged intrusion attempts. This version did not trace attackers. To ensure rogue programs could not masquerade as trustworthy applications, Norton verifies programs against a list of digital signatures for known programs. Update Tracker warned users when hackers attempted to gain access. The firewall blocked all access attempts from [[Shields Up]] and Port Checker. This version included a wizard to simplify firewall setup to accommodate multiple computers sharing an Internet connection. With this release, Norton could prevent specified personal information from access by a compatible [[instant messenger]] client, e-mail, and websites. Ad-blocking included the Ad Trashcan, where users could place ads that escaped ad-filtering.<ref>{{Cite news|author=Troy Dreier|title=Norton Internet Security 2002|url=https://www.pcmag.com/article2/0,2817,2056,00.asp|date=February 26, 2002|publisher=PC Magazine|access-date=2 August 2009}}</ref>

A Professional Edition was announced December 11, 2001, aimed towards business owners. This version featured Norton [[Intrusion Detection]], which intercepted suspicious connections and attacks, such as the [[Code Red (computer worm)|Code Red]] [[worm (computing)|worm]]. Intrusion Detection focused on Windows-based attacks. Central management was available. Administrators configured firewall and productivity settings for client computers. Productivity settings allowed administrators to block [[newsgroup]]s, [[website]]s, and advertisements. The suite integrated with XP user accounts; settings could be personalized.<ref>{{cite web|title=Symantec's New Norton Internet Security 2002 Professional Edition Provides Unrivaled Online Security for Small Businesses and Advanced Users|url=http://www.symantec.com/press/2001/n011211a.html|date=December 11, 2001|publisher=Symantec|access-date=26 July 2009|archive-url=https://web.archive.org/web/20090916182550/http://www.symantec.com/press/2001/n011211a.html|archive-date=2009-09-16|url-status=dead}}</ref>

====2003 (6.x)====
Version 2003 was announced September 16, 2002. This version added ''Norton Spam Alert'' to reduce [[Spamming|spam]]. The filter scanned the whole message and its context, rather than looking for keywords.<ref>{{Cite news|title=In the war against spam, a few small victories|url=https://www.usatoday.com/tech/news/techinnovations/2002-10-09-spam-wars_x.html|publisher=[[USA Today]]|access-date=31 July 2009}} {{Dead link|date=September 2010|bot=RjwilmsiBot}}</ref> A [[POP3]] client had to be used. When a message was identified as spam, Norton inserted a phrase, by default "Spam Alert:", in the subject line. Users could create a rule to delete or move flagged messages. Users could create strings of text for Spam Alert screen when classifying messages. In ''[[PC Magazine]]'' testing, Spam Alert mistakenly classified 2.8 percent of legitimate e-mail as [[e-mail spam|spam]]. 47 percent of spam slipped past the filter. Although [[false positive]] rate was low, the feature did not fare well at finding actual spam.<ref>{{Cite news|author=Larry Seltzer|title=Norton Internet Security 2003|url=https://www.pcmag.com/article2/0,2817,844438,00.asp|date=February 25, 2003|publisher=PC Magazine|access-date=2 August 2009}}</ref>

The updated main interface offered green and red indicators to show which features were active and which needed attention. The firewall updated features. A Block Traffic button in the main interface blocks all incoming and outgoing Internet traffic from an [[URL]]. Another new feature, Visual Tracker, graphically mapped attacks to their origin. The firewall blocked all port scans conducted by CNET, stealthing each one.

Following the [[Nimda]] and Code Red worms, this version scanned all incoming and outgoing traffic for suspicious data exchanges against a routinely updated database, a feature ported from Norton Internet Security 2002 Professional Edition. Connection to the offending computer was automatically severed if the traffic matches a database item.<ref>{{cite web|author=Gregg Keizer|title=Norton Internet Security 2003|url=http://reviews.cnet.com/internet-security-and-firewall/norton-internet-security-2003/4505-3667_7-20218674.html|date=September 22, 2002 |publisher=CNET|access-date=27 July 2009}}</ref><ref>{{Cite news|author=Howard Millman|title=News Watch: Security; From Symantec, a Hybrid Of Firewall and Spam Buster|url=https://www.nytimes.com/2002/09/12/technology/news-watch-security-from-symantec-a-hybrid-of-firewall-and-spam-buster.html|date=September 12, 2002|work=The New York Times|access-date=27 July 2009}}</ref>

Symantec announced a Professional Edition on November 19, 2002. Data recovery tools allow users to recover deleted or malware-damaged files. The inclusion of a [[data erasure]] tool  allowed users to delete files while minimizing the chance of recovery. Web Cleanup removes browser cache files, history, and cookies. To maintain [[dial-up]] connections, Connection Keep Alive simulates online activity during periods of user inactivity. Norton Productivity Control enables users to filter Internet content and block newsgroups. When used with User Access Manager, multiple filtering profiles could be created, assigned to different users.<ref>{{cite web|title=Symantec's New Norton Internet Security 2003 Professional Edition Delivers Unsurpassed Protection Against Multiple Online Threats to Small Businesses/Professionals|url=http://www.symantec.com/press/2002/n021119.html|date=November 19, 2002|publisher=Symantec|access-date=31 July 2009|archive-url=https://web.archive.org/web/20091013062854/http://www.symantec.com/press/2002/n021119.html|archive-date=2009-10-13|url-status=dead}}</ref>

====2004 (7.x)====
Announced September 8, 2003, version 2004 adds [[adware]], [[spyware]], and [[keylogger]] protection. ''[[PC Magazine]]'' found the added protection to be weak. Out of the spyware samples Norton detected, a significant number were not removed completely, requiring manual removal. Norton did little to prevent spyware infections.<ref>{{Cite news|author=John Clyman|title=Norton Internet Security 2004|url=https://www.pcmag.com/article2/0,2817,1522636,00.asp|date=March 2, 2004|publisher=PC Magazine|access-date=27 July 2009}}</ref>

Norton AntiSpam, the renamed spam filtering feature, has a set of spam rules, which cannot be viewed or edited. Whitelists and blacklists of senders could be created. Users may create their own spam definitions. AntiSpam integrates with [[Microsoft Outlook|Outlook]], [[Outlook Express]], and [[Eudora (e-mail client)|Eudora]], allowing users to tag e-mail as spam on-the-fly. E-mail identified as spam were either [[quarantine technology|quarantined]] by default, however the feature could be configured to delete such messages automatically. In [[CNET]] testing, AntiSpam correctly identified 94 percent of spam messages.<ref>{{Cite news|author=Edward Mendelson|title=Norton Internet Security 2004|url=https://www.pcmag.com/article2/0,2817,1650548,00.asp|date=November 25, 2003|publisher=PC Magazine|access-date=27 July 2009}}</ref><ref>{{cite web|author=Gregg Keizer|title=Norton Internet Security 2004|url=http://reviews.cnet.com/internet-security-and-firewall/norton-internet-security-2004/4505-3667_7-30578104.html|date=November 20, 2003|publisher=CNET|access-date=27 July 2009}}</ref>

[[Product activation]] was introduced* ". After installation, users were allowed a 15-day grace period to activate their copy of Norton Internet Security 2004. The program will not work after the deadline without the 24-character product key. The product key used to activate a copy of Norton Internet Security ties in with an [[alphanumeric]] code based on a computer's hardware configuration. Users may activate their product five times with the same [[product key]], however licensing terms dictate users were allowed only to install Norton Internet Security 2004 on one computer.<ref>{{cite web| title=Symantec adds product activation | url=http://news.cnet.com/2100-1046_3-5068370.html | author=David Becker | publisher=[[CNET]] | date=August 26, 2003 | access-date=March 31, 2009}}</ref><ref>{{cite web| title=Symantec adds product activation | url=https://www.theregister.co.uk/2003/08/29/symantec_adds_product_activation/ | author=John Leyden | publisher=The Register | date=August 29, 2003 | access-date=27 July 2009}}</ref>

====2005 (8.x)====
Symantec introduced Version 2005 on August 17, 2004. This version was sometimes referred to with the tagline of AntiSpyware Edition, since spyware detection was integrated with Norton and was by default enabled. Found threats were listed, separating the ones already dealt with and the ones requiring user interaction. More detailed information was provided through a link to Symantec's website. However, ''[[PC Pro]]'' and ''PC Magazine'' noted lengthy scan times. A full scan took 24 minutes to over half an hour, respectively. In ''PC Pro'' testing, Norton detected 61 percent of the spyware samples, compared to an average of 68 percent for all the tested products. Removal rates were above average, 72 percent versus the average of 68 percent. Norton blocked reinstallation with a score of 48 percent, compared to the group average of 43 percent. Overall, Norton ranked fifth among the tested products.<ref name="PC Pro 05" >{{cite web| title=Symantec Norton Internet Security 2005 AntiSpyware Edition| url=http://www.pcpro.co.uk/reviews/77705/symantec-norton-internet-security-2005-antispyware-edition.html?searchString=norton+internet+security+2005| archive-url=https://archive.today/20130422042212/http://www.pcpro.co.uk/reviews/77705/symantec-norton-internet-security-2005-antispyware-edition.html?searchString=norton+internet+security+2005| url-status=dead| archive-date=April 22, 2013| author=Davey Winder| publisher=[[PC Pro]]| date=November 5, 2004| access-date=2 August 2009}}</ref> In ''PC Magazine'' testing, Norton installed slowly on infected systems and failed to install on one altogether. Contacting Symantec did not resolve the issue.<ref>{{Cite news| title=Norton Internet Security 2005 Antispyware Edition| url=https://www.pcmag.com/article2/0,2817,1829545,00.asp|author=Neil J. Rubenking|publisher=PC Magazine| date=June 19, 2005|access-date=2 August 2009}}</ref>

Internet Worm Protection could block [[Computer worm|worms]], which scan IP addresses for open ports. It blocks inbound ports based on known and suspected exploits using [[Antivirus software#Signature-based detection|signatures]] and [[Antivirus software#Heuristics|heuristics]]. The addition of the feature follows [[MSBlast]] in 2003 and [[Sasser (computer worm)|Sasser]] in 2004, worms that exploited [[Vulnerability (computing)|vulnerability]] in Microsoft Windows' [[operating systems]].<ref>{{cite web| title=Symantec Updates SOHO Gear To Battle Against Worms, Phishing | url=http://www.informationweek.com/news/showArticle.jhtml?articleID=29101036 | author=Gregg Keizer| publisher=[[InformationWeek]] | date=August 17, 2004 | access-date=27 July 2009}}</ref> In response to emerging privacy threats — 75 percent of the threats in the last 12 months attempted to steal confidential information — this version adds [[phishing]] protection. Using the firewall component, users could create a whitelist of sites where confidential information could be transmitted. Users were alerted when information was transmitted to a site not on the list. The ''Outbreak Alert'' feature warns users of major threats as classified by Symantec, and users could press the Fix Now button to apply a set of changes to close vulnerabilities, such as blocking necessary ports used by a propagating worm.<ref>{{cite web| title=Symantec Upgrades Norton Security Products| url=http://www.pcworld.com/article/117396/symantec_upgrades_norton_security_products.html| author=Narasu Rebbapragada| publisher=[[PC World (magazine)|PC World]] | date=August 17, 2004 | access-date=27 July 2009}}</ref> Browser Privacy could suppress information website generally receive about its visitors, such as the browser and operating system used. The feature could block advertisements.

Privacy Control could warn users when sending confidential information. It could be configured to block the transmission. It  allowed users to specify how the information could be sent, such as via IM or e-mail. Item-specific exceptions allow users to control where there data could be sent. However, ''PC Pro'' found a flaw in the information filtering feature. The format of information on the list of confidential information could limit its effectiveness. For example, entering the last six digits of a credit card number will not stop the numbers from leaking if they were grouped in four digits. ''PC Magazine'' noted the fact anyone who could login to the computer could view the database of private information. For that reason, Symantec recommends entering only the last portion of sensitive information.<ref name="PC Mag 05" >{{Cite news| title=Norton Internet Security 2005| url=https://www.pcmag.com/article2/0,2817,1706732,00.asp|author=Neil J. Rubenking| publisher=PC Magazine| date=November 18, 2004 | access-date=1 August 2009}}</ref>

Norton AntiSpam now scanned e-mails for [[spoofed URL]]s and deals with any offending e-mail as spam. E-mails could be blocked based on language, however by default the filter  allowed all languages. AntiSpam could sync its own list of allowed senders with POP3 address books. Users could train the spam filter by pointing out valid e-mail marked as spam and vice versa. Support for [[Yahoo! Mail]] and [[Hotmail]] was added* ".<ref name="PC Mag 05" />

====2006 (9.x)====
[[Image:NIS2006.jpg|thumb|right|Norton Internet Security 2006's main interface]]
Norton Internet Security 2006 debuted on September 26, 2005.<ref>{{cite web |author=Gregg Keizer |url=http://www.crn.com/it-channel/171200920;jsessionid=JD0IMZWH0GBLWQSNDLPCKH0CJUNN2JVN |archive-url=https://archive.today/20120731053329/http://www.crn.com/it-channel/171200920;jsessionid=JD0IMZWH0GBLWQSNDLPCKH0CJUNN2JVN |url-status=dead |archive-date=July 31, 2012 |title=Symantec Updates Small-Biz, Personal Security Software |publisher=ChannelWeb |date=September 26, 2005 |access-date=February 23, 2009 }}</ref> The new main interface, the ''Norton Protection Center'', aggregates all information in a central location. Security status was shown by how secure the computer was for tasks such as e-mail and Internet browsing, not in the context of which features were enabled. The ''Protection Center'' could recognize third-party software protecting the computer. The new interface advertises additional products from Symantec; some categories of protection, such as "Data Protection", will read "No Coverage" until the user purchases and installs [[Norton SystemWorks]]. An additional [[system tray]] icon was created by the ''Protection Center''.

The installation was noted as lengthy by ''PC Magazine'', especially on malware-infected systems. Spyware detection has been tweaked since the last release. It has been updated to better identify keyloggers. In ''PC Magazine'' testing, Norton successfully detected all 11 spyware threats and removed all but two. ''PC Magazine'' did give Norton credit even when manual removal was required. The suite removed three of four commercial keyloggers. When attempting to install the spyware on a clean system, Norton blocked all 11 and two of the four commercial keyloggers. In most cases, it did not block the installation, however Norton did call for a scan after the spyware was installed. In ''PC Pro'' testing, Norton detected 78 percent of spyware, removed 82 percent, and blocked 65 percent from installing.

Norton AntiSpam was discontinued as a separate product from Symantec, now only available in Norton Internet Security. The feature could block all e-mail from unknown senders, and automatically blocks messages with suspicious elements such as invisible text, HTML forms, and phishing URLs. To improve accuracy, Norton analyzes outgoing e-mails and messages whose categorization was corrected by users by hitting the "This is spam" and "This is not spam" buttons. In ''PC Magazine'' testing, the feature marked one in ten valid e-mail as spam and let one in every six spam messages in the inbox. 400 messages were used, and the program was allowed to process the messages for over a week. In ''PC Pro'' testing, the feature performed better, blocking 96 percent of spam, with a false positive rate of 0.2 percent.

Norton recommends disabling the [[Windows Firewall]] to avoid redundant alerts. The firewall stealthed all significant ports in ''PC Magazine'' testing. Attacking the firewall itself was unsuccessful, and ''PC Magazine'' was unable to stop its [[Windows service|service]], terminate its process, or disable the firewall using simulated mouse clicks. The firewall passed ''PC Pro''{{'}}s tests, successfully stealthing all ports.

Other features included Bloodhound technology, which looks for virus-like behavior to better find [[zero day virus]]es. The ''Security Inspector'' looks for common vulnerabilities, including insecure user account passwords and browser insecurities. Advertisement blocking rewrites a website's [[HTML]] to prevent advertisements from being displayed. Parental controls, an optional component, could block certain programs from accessing the [[Internet]], such as IM clients, and restrict [[Usenet newsgroup|newsgroup]] access. Restrictions could be assigned to different Windows users accounts. Sites were classified in 31 categories, and the four profiles which could be assigned each block different categories of sites. Supervisors define exceptions, add global blocked sites, or block all access to sites not on a user-created whitelist. Both ''PC Magazine'' and ''PC Pro'' noted the exclusion of time-based restrictions.<ref name="PCMAG">{{Cite news|url=https://www.pcmag.com/article2/0,2817,1912816,00.asp |title=Norton Internet Security 2006 |publisher=[[PC Magazine]]|access-date=28 November 2017|first=Neil J. |last=Rubenking}}</ref> Information filtering could be controlled on a per-user basis.

[[Windows 98]] compatibility was dropped from this release.

====2007 (10.x)====
The 2007 version was announced September 12, 2006. A tabbed interface allowed users to access the Norton Protection Center and the program settings without separate tray icons and [[Window (computing)|windows]] open. Symantec revised Norton Internet Security and made this version more modularized, which reduced the suite's memory usage to 10–15 megabytes and scan times by 30–35 percent. Another result was that spam filtering and parental controls became separate components. When installed, the features consumed 100 MB of disk space.<ref name="PC Pro 07" >{{cite web|author=Davey Winder|url=http://www.pcpro.co.uk/reviews/97755/symantec-norton-internet-security-2007.html?searchString=norton+internet+security+2007|title=Symantec Norton Internet Security 2007|publisher=PC Pro|date=Jan 7, 2007|access-date=4 August 2009}}</ref>

Anti-phishing integrated with [[Internet Explorer]]. It analyzes sites, examining the website's URL, title, form, page layout, visible text and links, and uses a blacklist to detect phishing sites. Users were blocked access from suspected phishing sites, however were presented an option to continue. In ''PC Magazine'' testing, the feature blocked 22 of 24 phishing sites, while [[Internet Explorer 7]] recognized 17 of the 24 sites. In ''PC Pro'' testing, the feature successfully blocked access to every phishing site it was tested against.<ref name="PC Pro 07" /> Spam filtering no longer included a language feature, Symantec claimed it was less useful with current spam and created false positives. Tested against 1,500 messages by ''PC Magazine'', Norton let over half of the spam into the inbox. Five percent of valid mail were marked as spam. This version utilized Symantec's [[Veritas Software|Veritas]] VxMS technology to better identify [[rootkit]]s. VxMS allowed Norton to find inconsistencies among files within directories and files at the volume level. A startup application manager allowed users to prevent applications from launching at login. This release dropped support for Windows 2000 and was compatible with Windows Vista upon its release with an update.<ref>{{cite web|author=Gregg Keizer|url=http://www.informationweek.com/news/security/showArticle.jhtml?articleID=192701715|title=Symantec Upgrades Consumer Security Titles |publisher=InfoWorld|date=September 12, 2006 |access-date=23 February 2009}}</ref><ref>{{cite web|author=Ellen Messmer|url=http://www.pcadvisor.co.uk/news/index.cfm?newsid=7048|title=Norton Internet Security 2007 unveiled|publisher=[[PC Advisor]]|date=September 12, 2006|access-date=2009-02-23}}</ref><ref name="PCMag 07" />

The firewall made all decisions by itself to lessen the chance of disruption by a misinformed decision. Applications known to be safe were allowed Internet access, and vice versa for malicious applications. Unknown ones were analyzed and blocked if they exhibited malicious behavior. In both ''PC Magazine'' and ''PC Pro'' testing, the firewall did not incorrectly block any safe applications from Internet access. All malware was blocked by the firewall.<ref name="PC Pro 07" /> ''PC Magazine'' testing reflected the same results. The firewall stealthed all ports. Exploits were blocked by the intrusion prevention system, which prevented threats from leveraging vulnerabilities. The system was updated whenever a vulnerability was identified. Attempts to disable the firewall were unsuccessful; registry changes, process termination, and simulated mouse clicks all failed. Disabling Windows services had no effect on the firewall since it worked at the kernel driver level. This version automatically adjusted configuration for different networks based on the [[physical address]] of the gateway rather than IP addresses.<ref name="PCMag 07" >{{Cite news|author=Neil J. Rubenking|url=https://www.pcmag.com/article2/0,2817,2023974,00.asp|title=Norton Internet Security 2007|publisher=PC Magazine|date=October 4, 2006|pages=1–6|access-date=4 August 2009}}</ref>

In ''PC Magazine'' testing, Norton detected 15 of 16 spyware samples. 13 of the 16 were removed. Against eight commercial keyloggers, the suite removed all the samples. On a clean system, Norton blocked 14 of the 16 spyware samples from installing, and stopped seven of the eight keyloggers from installing.<ref name="PCMag 07" />

====2008 (15.x)====
The 2008 version was announced on August 28, 2007, adding support for Windows Vista 64-bit. New features included [[SONAR (Symantec)|SONAR]], Norton Identity Safe, and Browser Defender. SONAR monitored applications for malicious behavior. Identity Safe superseded the information filtering function; instead of blocking personal information from leaving the computer, it stored personal information to fill [[webform]]s. It was password protected and checked a website's authenticity before filling any forms. Browser Defender inspected and blocked suspicious [[API]] calls, intended to stop [[drive-by download]]s. Network Map identified networked computers with Norton Internet Security 2008 installed. Remote monitoring allowed checking the status of other installations on different computers; problems were identified with a red "X" icon. Using the feature, users could control traffic between computers. It warned users if they were using an unencrypted wireless network. The startup application manager and advertisement blocking features were dropped from this release. Information filtering, although superseded by Identity Safe in the suite, was available separately. It could be used in conjunction with Identity Safe.<ref name="PC Mag 08" >{{Cite news|author=Neil J. Rubenking|title=Norton Internet Security 2008|url=https://www.pcmag.com/article2/0,2817,2180639,00.asp|date=September 7, 2007|publisher=PC Magazine|pages=1–6|access-date=6 August 2009}}</ref>

Phishing protection now integrated with [[Mozilla Firefox]]. Testing by ''PC Magazine'' found that Norton blocked 94 percent of phishing sites, compared to 83 percent for [[Internet Explorer 7]] and 77 percent for [[Mozilla Firefox 2|Firefox 2]].<ref name="PC Mag 08" /> CNET identified an issue with the feature: when anti-phishing was disabled, Identity Safe still offered to automatically submit personal information to websites, including phishing sites. Symantec declined to call it a "flaw", stating it was recommended to use Identity Safe with anti-phishing enabled. Alternatively, Identity Safe could be used with Firefox and Internet Explorer's built-in anti-phishing capability.<ref>{{cite web|author=Robert Vamosi|title=Norton Internet Security 2008|url=http://reviews.cnet.com/internet-security-and-firewall/norton-internet-security-2008/4505-3667_7-32588378.html|date=November 28, 2007|publisher=CNET|access-date=6 August 2009}}</ref>

''PC Magazine'' found that the firewall put all ports in stealth mode. The firewall blocked ten of 12 leak tests, used to see if malware could evade the firewall's control of network traffic. Previous versions did not identify the tests because none carried a malicious payload. Another test was conducted using Core Impact, which successfully exploited one vulnerability on the test computer. However, other components of Norton stopped the exploit from causing harm. The other attempts were unsuccessful either because the system was invulnerable or Norton's Intrusion Prevention System stopped it. Attempts to disable the firewall were unsuccessful by ''PC Magazine''.<ref name="PC Mag 08" /> On the contrary, ''PC Pro'' identified 15 open ports on a computer with Norton installed.<ref>{{cite web|author=Darien Graham-Smith|title=Norton Internet Security 2008|url=http://www.pcpro.co.uk/labs/145083/norton-internet-security-2008.html?searchString=norton+internet+security+2008|date=December 7, 2007|publisher=PC Pro|access-date=6 August 2009}}</ref>

In ''PC Magazine'' testing, Norton completely detected most malware. For two-thirds of the samples, all traces were removed. Norton found and removed all the commercial keyloggers. A full scan took nearly an hour to complete though, twice as long as the 2007 version. The suite blocked most of the malware from installing and all the commercial keyloggers, regardless of any modifications made to the samples.<ref name="PC Mag 08" /> ''PC World'' noted that Norton removed 80 percent of malware-associated files and [[Windows Registry|Registry]] entries.<ref name="pcworld" >{{cite web|author=Erik Larkin|title=Symantec Norton Internet Security 2008 |url=http://www.pcworld.com/reviews/product/30828/review/norton_internet_security_2008.html|date=November 29, 2007|publisher=PC World|access-date=30 July 2009}}</ref>

Spam filtering imported users' address books to compile a whitelist of allowed senders. Addresses to which users send mail and e-mail tagged as valid mail could be automatically added to the whitelist. Using several thousand messages, ''PC Magazine'' found that Norton marked over 40 percent of valid e-mail as spam. Over 80 percent of valid newsletters were marked as spam. Norton did correctly identify 90 percent of spam e-mail.<ref name="PC Mag 08" />

====2009 (16.x)====
[[File:Norton Internet Security.png|thumb|The main user interface of Norton Internet Security 2009]]
The 2009 version was released for sale September 9, 2008.<ref>{{cite web |url=https://www.symantec.com/about/newsroom/press-releases/2008/symantec_0909_01 |title=Symantec Launches Fastest Security Products in the World |access-date=2009-03-04 |publisher=[[Marketwire]] |date=September 9, 2008 |archive-url=https://web.archive.org/web/20170202044437/https://www.symantec.com/about/newsroom/press-releases/2008/symantec_0909_01 |archive-date=February 2, 2017 |url-status=dead |df=mdy-all }}</ref> Symantec set several goals while in development: complete installations in under a minute and a footprint of 100 MB. Average installation times ranged from eight to ten minutes, and the previous 2008 version had a 400 MB footprint. Other goals included reducing load time after the computer starts, from 20 to 30 seconds to 10 seconds, and file scanning times with technology that allowed Norton to skip certain trusted files. The technology works on the basis that if a piece of software runs on a significant proportion of computers, then it was safe.<ref>{{cite web|url=https://www.computerworld.com/article/2536065/security0/speed-is-of-essence-for-next-generation-symantec-products.html |title=Speed Is of Essence for Next-generation Symantec Products |access-date=July 29, 2009 |author=Jeremy Kirk |publisher=computer world |date=May 23, 2008 }}</ref><ref>{{cite web|url=https://www.symantec.com/en/au/about/newsroom/press-releases/2008/symantec_0909_01|title=Symantec Launches Fastest Security Products in the World|access-date=July 29, 2009|publisher=symantec|archive-date=March 6, 2018|archive-url=https://web.archive.org/web/20180306022728/https://www.symantec.com/en/au/about/newsroom/press-releases/2008/symantec_0909_01|url-status=dead}}</ref>

A reduction in memory consumption was made, prompted by the fact 40 percent of people contacting Symantec support had 512 MB of RAM. The beta release used about 6 MB of memory, compared to 11 MB by the prior version. To reduce scan times, [[Norton Insight]] used data from Norton Community participants to avoid scanning files that were found on a [[statistically significant]] number of computers.<ref>{{Cite news|url=https://www.forbes.com/2008/09/21/virus-clouds-security-tech-security-cx_ag_0922virus.html |title=Filtering Viruses Through The Cloud |access-date=11 March 2009|author=Andy Greenberg |work=[[Forbes]] |date=September 22, 2008 }}</ref> Citing a [[NPD Group]] study finding that 39 percent of consumers switching antiviruses blamed performance, a CPU usage meter allowed users to find the cause of high CPU usage, whether it be Norton or another program. Updates were more frequent, termed Norton Pulse Updates. Pulse Updates were delivered every five to fifteen minutes (down from every eight hours).<ref>{{cite web|url=http://edge.networkworld.com/news/2008/071508-symantec-says-security-software-needs.html?page=1|title=Symantec says security software needs speed|access-date=30 July 2009|author=Gregg Keizer|publisher=[[Network World]]|date=July 15, 2008|page=2|url-status=dead|archive-url=https://web.archive.org/web/20110714165850/http://edge.networkworld.com/news/2008/071508-symantec-says-security-software-needs.html?page=1|archive-date=14 July 2011}}</ref><ref>{{cite web|url=https://www.pcworld.com/article/148407/norton_2009_to_speed_up_malware_screening.html|title=Norton 2009 to Speed Up Malware Screening|access-date=30 July 2009|author=Neil McAllister|publisher=PC World|date=July 15, 2008}}</ref> Silent Mode automatically suspends alerts and updates when a program enters [[4:3|fullscreen]] mode and could be manually enabled.<ref>{{cite web|url=http://www.eweek.com/c/a/Security/Symantec-Opens-Public-Beta-for-New-Norton-AntiVirus-and-Norton-Internet-Security-Software/|title=Symantec Norton AntiVirus and Norton Internet Security Software Betas Open|access-date=30 July 2009|author=Brian Prince|publisher=[[eWEEK]]|date=July 15, 2008}}</ref> Activities took place while the computer was idle, and terminate once user activity was observed.<ref>{{cite web|url=https://www.pcworld.com/article/149103-2/norton_internet_security_2009_beta_revs_up.html|title=Norton Internet Security 2009 Beta Revs Up|access-date=30 July 2009|author=Lisa Vaas|publisher=PC World|date=July 29, 2008}}</ref> Spam filtering became part of the bundle. This release bundled [[Norton Safe Web]], which identified malicious websites, compatible with Internet Explorer and Firefox. [[Norton Safe Web]] color coded search results from search engines such as [[Google]] and [[Yahoo]] for safety. The [[Norton Safe Web]] toolbar included an [[Ask.com]] search box. The search box did not share code with the Ask toolbar; instead it redirected queries to the Ask search engine. 

[[Benchmark (computing)|Benchmarking]] conducted by PassMark Software highlighted its 52 second install time, 32 second scan time, and 7 MB memory utilization. Symantec funded the benchmark test and provided scripts used to benchmark each participating [[antivirus software]]. Tests were conducted in Windows Vista running on a [[dual core]] processor.<ref>{{cite web|url=http://www.passmark.com/ftp/antivirus_09-performance-testing-ed3.pdf|title=Antivirus, Internet Security and Total Security Products Performance Benchmarking (2009)|access-date=30 July 2009|last=Lai|first=Karen|author2=David Wren |publisher=PassMark Software|date=February 6, 2009}}</ref> ''PC Magazine'' found the suite added 15 seconds to boot time, with a baseline of 60 seconds. Norton added less than 5 percent to the time it takes to complete file operations. 25 percent more time was taken to unzip and zip a set of files.<ref>{{Cite news|author=Neil J. Rubenking|url=https://www.pcmag.com/article2/0,2817,2330025,00.asp|title=Norton Internet Security 2009|access-date=1 August 2009|publisher=PC Magazine|date=September 9, 2008}}</ref>

Norton was able to remove most commercial keyloggers, beating other tested products. Norton blocked all attempts to install malware on a clean system. Modifications made to the samples did not fool Norton. Norton was not able to block the installation of all the commercial keyloggers.

Phishing protection blocked 90 percent of verified phishing websites in ''PC Magazine'' testing. Internet Explorer 7 caught 75 percent, and Firefox caught 60 percent.

Norton stealthed all ports, according to ''PC Magazine''. Port scans were unsuccessful. The firewall blocked all exploit attempts by Core Impact.

Malware blocking and removal garnered good results in ''PC Magazine'' testing. All but one malware sample contained within a folder were removed once the folder was opened. The last one was removed when executed. Modifications made to the samples did not affect detection. On a similar test, specifically using commercial keyloggers, Norton did not successfully detect all.<ref name="Neil J. Rubenking">{{Cite news|author=Neil J. Rubenking|url=https://www.pcmag.com/article2/0,2817,2330027,00.asp|title=Norton Internet Security 2009|access-date=1 August 2009|publisher=PC Magazine|date=September 9, 2008}}</ref> In removing threats, Norton almost completely removed 40 percent of the malware samples and related executables.<ref name="Neil J. Rubenking"/>

====2010 (17.x)====
Version 2010 was released officially on September 8, 2009. This version featured Project Quorum, which introduced reputation-based threat detection to keep up with the 200 million attacks each month, many of which Symantec claimed evade [[signature based detection]]. The new approach relied on Norton Community Watch, in which participants supply information about the applications running on their computers. Safe applications exhibit common attributes, such as being of a known origin with known publishers. Conversely, malware may have an unknown publisher, among other attributes. Using the data a "reputation score" was used to infer the likelihood of an unknown application being safe, or malicious.<ref>{{cite web|title=Symantec Unveils New Model of Consumer Protection Codenamed "Quorum" |url=http://www.foxbusiness.com/story/markets/industries/technology/symantec-unveils-new-model-consumer-protection-codenamed-quorum/ |date=July 6, 2009 |publisher=[[Fox Business]] |access-date=30 July 2009 |url-status=dead |archive-url=https://web.archive.org/web/20090916190106/http://www.foxbusiness.com/story/markets/industries/technology/symantec-unveils-new-model-consumer-protection-codenamed-quorum/ |archive-date=September 16, 2009 }}</ref><ref>{{cite web|author=Preston Gralla|title=Symantec Releases Norton 2010 Betas|url=http://www.networkworld.com/reviews/2009/070709-norton-internet-security-2010-beta.html?hpg1=bn|date=July 7, 2009|publisher=Network World|access-date=30 July 2009}}</ref>

Other facets of Quorum were parental controls and spam filtering. Norton Internet Security 2010 bundled a free subscription of [[OnlineFamily.Norton]], which ''PC Magazine'' found to be an improvement over the parental controls bundled with prior releases. Spam filtering used technologies Symantec acquired from [[Brightmail]]. Two filters were used to find spam: a locally installed one and a check against Symantec's servers to see if the message was known spam. In ''[[PC Magazine]]'' testing, no valid e-mail were marked as spam. However, 11 percent of spam still reached the inbox. This was a significant improvement over prior releases. The improved [[SONAR 2]] heuristic leveraged reputation data to judge if a program was malicious. Norton Insight was expanded, showing users the number of Norton Community participants who have a certain program installed, its impact on system resources, and how long it had been released. Information about the program's origin and a graph of its resource usage was provided. Autospy helped users understand what Norton did when malware was found. The malware's actions and Norton's resolution were presented to the user. Previous releases removed threats on sight and quietly warned users, potentially confusing when users were deceived in downloading [[rogue security software]].<ref>{{Cite news|author= Preston Gralla |title=Norton Internet Security 2010 beta: Different approach, new features, some glitches |url=https://www.reuters.com/article/idgSmallBusiness/idUS372477872520090707 |date=July 7, 2009 |publisher=[[Thomson Reuters]] |access-date=8 July 2009}}</ref>

With a compatible graphics card Flip Screen allowed the main display to "flip over" to show the opposite side of the main interface, consisting of a chart of CPU or memory usage and a timeline of security events. Otherwise the Flip Screen link was replaced by a Back link, which opened the back of the windows in a separate window.<ref name="PC Mag 10" >{{Cite news|author=Neil J. Rubenking|title=Norton Internet Security 2010 (beta)|url=https://www.pcmag.com/article2/0,2817,2349865,00.asp|date=July 8, 2009 |publisher=PC Magazine|pages=1–5 |access-date=31 July 2009}}</ref>

Safe Search allowed the user to filter out unsafe sites, get insight on them, and keep track of [[HTTP cookies]]. Malware removal and blocking performed well, setting or meeting records in ''PC Magazine'' testing. It achieved a detection rate of 98% (highest of 12 antivirus products).<ref>{{cite news | url=http://blogs.pcmag.com/securitywatch/2009/12/av-testorg_releases_real-world.php | work=PC Magazine | first=Neil J. | last=Rubenking | title=AV-Test.Org Releases Real-World Malware Protection Report | access-date=2010-09-24 | archive-url=https://web.archive.org/web/20101212231833/http://blogs.pcmag.com/securitywatch/2009/12/av-testorg_releases_real-world.php | archive-date=2010-12-12 | url-status=dead }}</ref> The exception was blocking commercial keyloggers, where Norton made an above average score. File operations took 2 percent longer, and the file compression and extraction test took 4 percent longer. The only area where Norton introduced a significant delay was when the system was booting: the beta version added 31 percent to the boot time, significantly longer than prior versions.<ref name="PC Mag 10" /> According to the Norton performance comparison website, Norton Internet Security scanned 31 percent faster, was 70 percent lighter, and installed 76 percent faster than the leading anti-virus product.<ref name="Performance test">{{cite web|title=Performance Challenge |url=http://nortontoday.symantec.com/performance/ |publisher=Symantec |access-date=8 February 2010 |url-status=dead |archive-url=https://web.archive.org/web/20100131170641/http://nortontoday.symantec.com/performance/ |archive-date=January 31, 2010 }}</ref> AV-comparatives awarded Norton Internet Security "Best Product of 2009",<ref>av-comparatives.org (24 December 2009), [http://www.av-comparatives.org/images/stories/test/summary/summary2009.pdf Antivirus Comparative Report 2009], retrieved 4 October 2012</ref> Bronze award for 98.6% detection rate in 2010<ref>{{cite web|title=Summary Report 2010|url=http://www.av-comparatives.org/images/stories/test/summary/summary2010.pdf|publisher=av-comparatives.org}}</ref> and Norton Internet Security 2010 blocked 99/100 internet threats.<ref>av-comparatives.org (16 December 2009), [http://www.av-comparatives.org/images/stories/test/dyn/dynamic2009.pdf Whole Product Dynamic Test], retrieved 4 October 2012</ref>

====2011 (18.x)====
[[File:Norton Internet Security 2011.jpg|thumb|The old Norton logo before the merger]]
Norton Internet Security 2011 was released for [[Beta testing]] on April 21, 2010. Changes included a new user interface and improved malware scanning. [[NortonLifeLock|Symantec]] released an application that "scans" the user's [[Facebook]] feed for any malware links. This application does not require a valid subscription.<ref name="Norton Safe Web Fbook">{{cite web|url=http://apps.facebook.com/nortonsafeweb/?ref=bookmarks|title=Norton Safe Web|publisher=[[NortonLifeLock|Symantec]]|access-date=2010-05-05|location=[[Facebook]]}}</ref> In a test sponsored<ref>Dennis Technology Labs (3 August 2010), [http://www.dennistechnologylabs.com/reports/s/a-m/symantec/DTL_PCVP2011_SYMC.pdf PC Anti-virus Protection 2009], retrieved 4 October 2012</ref> by Symantec, Norton Internet Security 2011 was the only security suite to achieve a 100 percent protection score in a new third-party test from Dennis Labs.<ref>{{cite web|url=http://www.symantec.com/about/news/release/article.jsp?prid=20100908_02 |archive-url=https://web.archive.org/web/20100913120117/http://www.symantec.com/about/news/release/article.jsp?prid=20100908_02 |url-status=dead |archive-date=September 13, 2010 |title=Norton Internet Security and Norton AntiVirus 2011 Give Consumers Number One Ranked Powerful Protection Against Cybercrime |publisher=Symantec.com |date=2010-09-08 |access-date=2012-10-04}}</ref> Improved reputation scan provided the user with an easy to understand interface on files stored on the user's computer, marking them as trusted, good, poor, or bad.<ref>{{cite web |url=http://us.norton.com/products/tutorials/tutorials.jsp?pvid=nis2011&tutid=reputation_scan |title=File Compare &#124; Norton Reputation Scan |publisher=Us.norton.com |access-date=2012-10-04 |url-status=dead |archive-url=https://web.archive.org/web/20121014102205/http://us.norton.com/products/tutorials/tutorials.jsp?pvid=nis2011&tutid=reputation_scan |archive-date=2012-10-14 }}</ref> The production version was released on August 31, 2010. New features included Norton Rescue Tools. These tools included Norton Bootable Recovery tool and [[Norton Power Eraser]].<ref>{{cite web|url=http://community.norton.com/t5/Norton-Protection-Blog/What-s-new-in-Norton-Internet-Security-2011/ba-p/222807 |title=What's new in Norton Internet Security 2011 - Norton Community |date=19 April 2010 |publisher=Community.norton.com |access-date=2012-10-04}}</ref>

On December 9, 2010, Symantec released the 18.5 version through [[Norton LiveUpdate]]. However, this update was later pulled due to numerous reports on the Norton forums that the update was causing system instability during system scans (both full and quick scans). This issue only affected some customers. Symantec later fixed the bugs and re-released the update.<ref>{{cite web|last=Lopez|first=Tim|title=Product Update - 18.5.0.125 for Norton Internet Security 2011 and Norton AntiVirus 2011 (December 27th, 2010) - ENGLISH ONLY|date=27 December 2010 |url=http://community.norton.com/t5/Norton-Internet-Security-Norton/Product-Update-18-5-0-125-for-Norton-Internet-Security-2011-and/td-p/350280|publisher=[[NortonLifeLock|Symantec]]|access-date=3 January 2011}}</ref>

Following the acquisition of [[Verisign|VeriSign]] Security by [[NortonLifeLock|Symantec]], several VeriSign features were incorporated. A new Norton logo added the VeriSign checkmark formerly seen in VeriSign's own logo, as well as several new icon changes to the [[Norton Safe Web]] and Norton Identity Safe features.

====2012 (19.x)====
Norton Internet Security 2012 was released on September 6, 2011.<ref>{{cite web|url=http://community.norton.com/t5/Norton-Protection-Blog/What-s-New-in-Norton-Internet-Security-2012/ba-p/433160 |title=What's New in Norton Internet Security 2012|date=14 April 2011 |publisher=Norton Community|access-date=2012-10-04}}</ref> [[Norton Insight|Download Insight]] 2.0 monitored files for safety and the stability of a given file. I.e. if a file was stable on Windows 7, but unstable on Windows XP, XP users would be notified of the file's instability.

Enhanced removal tools were tightly integrated for better cleanup of infected systems. Once triggered, the new, more powerful version of [[Norton Power Eraser]] restarted the system to locate and remove [[fake antivirus]] software and other deeply embedded threats that were otherwise hard to remove. A new tool called Norton Management helped manage different computers and devices from a single location.

Other changes included [[SONAR (Symantec)|SONAR 4]], [[Google Chrome]] compatibility for Identity Safe and [[Norton Safe Web|Safe Web]] and the ability to store passwords and notes in the cloud. However, the [[EULA|License Agreement]] did not guarantee passwords were stored securely and provided no remedy if the cloud vault was compromised.<ref>{{Citation | title = Norton License Agreement Identity Safe | publisher = [[NortonLifeLock|Symantec]] | at = 4A, 5A | url = https://identitysafe.norton.com/download | edition = CPS / IDS 1.0 / IE }}</ref>

The user interface was simplified to use only three buttons. The third button opened a more advanced and complicated menu, where the user was able to manage settings and access different product features. The CPU meter that was removed from Norton 2011, returned (only on the "advanced screen").

Combining the netbook and desktop line, Norton Internet Security integrated Bandwidth metering, which controlled the product's traffic usage and reduces it to minimum if necessary. This was ideal for networks with limited traffic., the user interface window adjusted according to the size of the computer screen.

This version of Norton Internet Security included several Easter eggs. Pressing Shift+1, 2, 3 or 4 would change the theme to default background (plain black), ray, animals, and floral respectively. holding Control + Win Key + Alt while pressing "[[Norton System Insight|performance button]]" to activate "Crazy Flip", which made the window flip head over heels. The effect would continue until the main window was closed and reopened.

Scans were scheduled through Symantec's proprietary scheduler, which performed tasks while the computer was idle.

====20.x (2013)====
Version 20 (2013) began a "Version-less" approach by dropping the 20xx naming convention, and automatically updated itself as new releases become available. Notable changes included a new user interface better suited for touchscreen devices, Social Networking Protection, to protect against threats targeted at social networks, and was the first release to officially support Windows 8.<ref>{{cite web|title=Norton Internet Security 2013 - Product Description|url=http://www.nortonadvisor.com/products-norton/norton-internet-security-2013.html|website=www.nortonadvisor.com|access-date=31 August 2014}}</ref><ref>{{cite web|title=Norton Delivers Protection for Windows® 8, Social Networking and Scams|url=http://www.symantec.com/about/news/release/article.jsp?prid=20120905_01|archive-url=https://web.archive.org/web/20121023022006/http://www.symantec.com/about/news/release/article.jsp?prid=20120905_01|url-status=dead|archive-date=October 23, 2012|website=[[Broadcom#Symantec enterprise security|Symantec]]}}</ref>

====Version 21.x (2014)====
This version, released on October 7, 2013, became the last version to be marketed by Symantec. Norton Internet Security, along with [[Norton Antivirus]] and [[Norton 360]], were replaced with [[Norton Security]].

====Version 22.x (2015)====
A version 22.5 update was released in June 2015. It included a restyled user interface and Windows 10 Support.<ref>{{cite web|title=Update 22.5 &#124; Norton Community|url=https://community.norton.com/en/forums/update-225|website=community.norton.com|date=24 June 2015 |access-date=21 July 2015}}</ref>