Firstly, your Norton firewall is doing it's job and protecting you from unauthorised access attempts into your computer, and you are safe.
You will get many such communications attempts, and this is what firewalls are meant to do. They block such attempts where they do not recognise why the attempt has been made. But such attempts are not necessarily nasty.
Your ISP will often ask for information from your computer to update it's records and these can be blocked safely without your connection suffering.
But there will be other sources seeking unprotected computers to hack and spy on the users, and so if your firewall asks you again, and you do not know why such an attempt has been made, you are right to be cautious and deny access.
If by blocking these two you have not seen any degradation in your internet performance then you did the right thing to say No and blocking them.
If you examine your Norton's firewall program, you may see options to limit alerts so that they don't show up all the time. The blocking of unauthorised access will still continue in the background, but you will not be pestered with alerts.
Then you can always check Norton's log every so often to see how many access attempts it has blocked.
I hope this helps.
A few days ago I received the message "Norton has detected a remote system that is attempting to access your computer"
It says - Path C:\Windows\System32\svchost.exe
File Name- Microsoft Generic Host Process for Win32
Direction - Inbound
Local address - All Local Network adaptors
Remote address - 220.127.116.11
Remote Port - 12442 Protocol - UDP
Do you want to BLOCK this or Allow this?
Today I received a similar message from
Remote address - 18.104.22.168
Remote Port - 3678
I've blocked both of these since I don't know who they are from.
Are these Good news or Bad news messages? Should I receive these messages or keep blocking them? Thanks!