Some users of Norman Virus Control have strict rules regarding http (web) access through their firewalls. Only particular IP addresses and/or computer names are allowed to be accessed. This means that the servers involved in an update of Norman Virus Control have to be allowed access through the firewall(s) in order to update successfully.

There are two different type of servers involved in an Internet update of Norman Virus Control - the validation servers (that check the authentication key) and the download servers. All of these have to be accessable.

The current validation servers

  • IP 193.69.114.11 - DNS name: niuone.norman.no
  • IP 193.69.114.15 - DNS name niufour.norman.no
  • IP 81.93.161.138 - DNS name niufive.norman.no

  • IP 193.69.114.12 - DNS name niutwo.norman.no (NOTE: Norman Internet Control, only)
  • IP 193.69.114.16 - DNS name niuthree.norman.no (NOTE: Norman Internet Control, only)

The current download servers

After a request from the Norman Internet Update has validated successfully the download servers are contacted to check if any new program modules are available.

The computer name used as name for the download servers is download.norman.no However, this computer name resolves to potentially more than 10.000 different IP addresses depending e.g. on the client's geographical location and when one tries to update the Norman Virus Control installation.
This will be a problem for those who restrict access through the firewall based on IPs as it will be impossible to keep more than 10.000 different IPs updated constantly.

There is a workaround regarding this. However, we recommend that this is used by care, as it will depend on the fact that the particular download server is accessable at any point in time when one tries to update Norman Virus Control using Norman Internet Update.
Such a restriction does not apply in a normal update situation.

This is what customers who deploy such restrictive rules on the update computer(s) must do:

Do a DNS lookup to the server download.norman.no
The IP that is resolved should be the download server best suited for the customer in question at that point in time.
Example: 194.176.73.151 (this IP is a valid download server that may be used, though it will probably not be the best one for most customers)
Open the firewall for the IP address resolved.
Edit the hosts file(s) on the computer(s) that shall be able to download updates.
Add the following line to the computer's hosts file

'local_download_server_IP'    download.norman.no