01/06/2009
Home Statistics Events Reports Settings


Welcome to DeepSight Analyzer for Symantec's personal internet security products. This web page will introduce you to the DeepSight Analyzer service, and guide you through the installation process if you are a user of the Norton Internet Security 2003-2005, or Norton Personal Firewall 2003-2005 products.

DeepSight Analyzer allows you to track and report on events that are being observed by your personal security products. Your security events are automatically submitted to Symantec by a software program called DeepSight Extractor. Once submitted, your security events join those of thousands of other individuals, and allow Symantec to see wide-spread attack activity on the Internet.

Getting Started

To get started quickly, download and install DeepSight Extractor for Windows 2000 or Windows XP. The DeepSight Extractor installer will then guide you through the installation process. You must have WinZip installed to initially extract DeepSight Extractor installer.


Click here for a brief introduction to the DeepSight Analyzer/Extractor service.

DeepSight Analyzer Benefits

By joining the DeepSight Analyzer program at Symantec, you receive a number of benefits. DeepSight Analyzer gives you the following functionality, at absolutely no charge to you:

1. Automated Daily Summary Reports

Each day, at the time that you choose, you will receive a summary report via email. This report summarizes all activity that your system has seen over the previous 24 hour period. This report includes the top events that you have seen, the top ports that you have seen activity on, the top IP addresses from which this activity has originated, and the countries from which the events originated.

2. Online Event Viewing

You will receive access to the web-based DeepSight Analyzer online console. Through this console you can view a history, for previous 30 days, of all events that your systems have submitted.

3. Online Report Generation

Through the DeepSight Analyzer online console you can generate reports, summarizing event activity over a period of time. You can report on the top events that are being observed on your network, determine which country, ISP, and IP addresses are attacking you, and summarize activity for a particular attacker.