Constant Guard® Protection Suite FAQ

 

DNS Security Lock

What is DNS?

The Xfinity DNS servers run DNSSEC, which is an enhanced level of Internet security that allows ISPs to validate domain names. This helps prevent hackers from injecting false information (aka DNS cache 'poisoning'), to attempt to re-direct people trying to access a real website to a fake, phishing or criminal site.

Why the Xfinity DNS Servers?

The Xfinity DNS servers run DNSSEC, which is an enhanced level of Internet security that allows ISPs to validate domain names. This helps prevent hackers from injecting false information (aka DNS cache 'poisoning'), to attempt to re-direct people trying to access a real website to a fake, phishing or criminal site.

I don’t want to use Xfinity Secure DNS – how can I make the change?

While not recommended, if you decide you don’t want to use the Xfinity Secure DNS servers, you must first shut off the lock in the Constant Guard Protection Suite and then manually update your DNS servers. To turn the lock off – go to the Options tab in the Constant Guard Protection Suite and switch the setting from AUTO to OFF.

How did this happen?

If you did not recently manually changed your DNS settings while on the Xfinity Network, this may be the result of an unauthorized program (e.g, virus) on your computer which made the change to lure you to a fraudulent web site. This is why the Constant Guard Protection Suite has this safety feature built and automatically switches the setting to Secure Xfinity DNS while on the Xfinity network.

Do you have issues logging into websites with Constant Guard®?

Can’t find your answer? Create a Support Request

If you need help with Comcast, Norton, Secure Backup & Share, IDENTITY GUARD, or XFINITY Toolbar, please click the relevent button below:

Need to download Constant Guard®

Protection Suite?

click here

Check if your PC can access the

Constant Guard® Network?

Download our Diagnostic Tool