Allowing server access for Norman software updates


Some users of Norman's software have strict rules regarding http (web) access through their firewalls. Only particular IP addresses and/or computer names are allowed to be accessed. This means that the servers involved in an update of Norman's software have to be allowed access through the firewall(s) in order to update successfully.

There are two different types of servers involved in an Internet update of Norman's software- the validation servers (that check the authentication key) and the download servers. Both of these have to be accessible in order for the update to complete successfully.

Current Validation Servers

  • IP 195.39.5.16 - DNS name: niuone.norman.no
  • IP 109.105.55.16 - DNS name: niusix.norman.no
  • IP 195.39.5.16 - DNS name niutwo.norman.no
  • IP 195.39.5.17 - DNS name niufour.norman.no
  • IP 109.105.55.16 - DNS name niuseven.norman.no
  • IP 195.39.5.16 - DNS name niuthree.norman.no
  • IP 109.105.55.17 - DNS name niunine.norman.no
  • IP 195.39.5.17 - DNS name niufive.norman.no
  • IP 109.105.55.17 - DNS name niueight.norman.no

Current Download Servers

After a request from the Norman Internet Update has validated successfully, the download servers are contacted to check if any new program modules are available. 

The computer names used for the download servers are download03.norman.com, download04.norman.com and a1380.d.akamai.net. However, these names resolve to potentially more than 10.000 different IP addresses depending for example on the client's geographical location and the time at which one tries to update the Norman installation. This will pose a problem for those who restrict access through the firewall based on IPs, as it will be impossible to keep more than 10.000 different IPs updated constantly. 

While there is a workaround, we recommend that customers exercise caution when using this, as the particular download server will be accessible at any point in time when one tries to update Norman's software using Norman Internet Update. Such restrictions do not apply in a normal update situation. 

For customers who deploy restrictive rules on the update computer(s), please follow the steps below:
  1. Do a DNS lookup to the server download03.norman.com, download04.norman.com and a1380.d.akamai.net
  2. The IPs that are resolved should be the download servers best suited for the customer in question at that point in time
    For example: 2.16.62.106 and 5.152.184.22 (these IPs are valid download servers that may be used, though they will probably not be the best ones for most customers)
  3. Open the firewall for the IP address resolved
  4. Edit the host file(s) on the computer(s) that will be able to download updates
  5. Add the following lines to the computer's hosts file
    'local_download_server_IP1'    download03.norman.com
    'local_download_server_IP1'    download04.norman.com
    'local_download_server_IP2'    a1380.d.akamai.net

Need additional help?

Contact us
Avast Total Care

Your premium tech support for PCs, printers & more

Call now for a free consultation and subscribe! 1-844-340-9251
devices Get help for all your device problems 24x7
1-844-340-9251