Online security with Advanced Security — FAQs

Check out these FAQs about Xfinity's Advanced Security.

Note for customers with Apple devices: If you have Apple's iCloud Private Relay feature turned on, Xfinity Advanced Security won’t work. Learn more about iCloud Private Relay.

Xfinity Advanced Security

What is Xfinity Advanced Security?
Xfinity Advanced Security helps keep you safe online. It also watches your connected devices for unusual activity and alerts you if there’s a security risk. When that happens, it suggests steps you can take to better protect your home network.

How do I access Xfinity Advanced Security features?
Xfinity Advanced Security is available to Xfinity Internet subscribers who rent a compatible gateway.

Note: Xfinity Advanced Security will not be available for gateways in bridge mode or if you have a Cisco DPC3939.

If you haven't already, download the Xfinity app. You can turn on and use Xfinity Advanced Security features from the Internet Advanced Security tile on the Overview tab. You’ll see security status and threat details.

What are the different types of threats stopped with Xfinity Advanced Security?

• Unauthorized Access Attempt
  • This happens when an outside device tries to connect to a device on your home network.
    • It usually happens through a forwarded port on one of your devices.
    • Some apps need forwarded ports to work. Check them often and remove any you no longer use.
  • If you made the request, like accessing your home security camera from a coffee shop, you can allow access.
    • Go to Security Risk History and allow access for 30 days.
  • Attackers may try to steal personal information or take over your device.
  • Use strong passwords and change them often to help keep your devices secure.
    
• Suspicious Site Visit
  • This happens when Xfinity Advanced Security stops a device on your home network from visiting a risky site.
    • The site may have malware, spyware, ransomware, or viruses.
    • These can harm devices or put personal information at risk.
  • Sometimes, Xfinity Advanced Security only blocks part of a page, like a banner ad.
    • If that happens, the rest of the page may load, and you may not notice anything was blocked.
    • If a full page is blocked and you still want to visit it, you can allow access in the app.
    • Go to the Security Risk History, find the website, and Allow Access.
  • To lower the risk of infection, install and run up-to-date antivirus software on devices connected to your network.
    
• Suspicious Device Activity
  • Most smart home devices follow regular online patterns.
  • Suspicious Device Activity happens when a device acts in an unusual way. For example, it may connect to an IP address it doesn’t normally use.
    • Xfinity Advanced Security blocks this activity to help protect your network.
    • When this happens, your device may be compromised and needs action.
  • If you see Suspicious Device Activity, restart the device.
  • Make sure it is running the latest software.
  • For extra protection, use strong passwords and change them often.
    • You should also install and run up to date antivirus software on devices. This includes laptops, desktops, and some handheld devices.
• Targeted Network Attack
  • This happens when a device on your network has a virus or malware and tries to attack another network.
    • This is also called a Denial of Service attack.
  • Xfinity Advanced Security blocks these attacks.
  • When this happens, your device is compromised and needs action.
    • Restart the device and make sure it is running the latest software.
  • For extra protection, use strong passwords and change them often.
    • You should also install and run up-to-date antivirus software on devices. This includes laptops, desktops, and some handheld devices.
• IP Reputation Threats
  • This happens when a device from a high-risk source tries to connect to a device on your home network.
  • IP reputation threats often use forwarded ports on devices connected to your network.
    • These may try to steal personal information or take control of your devices.
  • Xfinity automatically blocks access from known high-risk sources to help keep your network safe.
  • Some apps still need forwarded ports to work. Check them often and delete any that are no longer in use.

How do I report a website blocked by Xfinity Advanced Security?
Xfinity Advanced Security blocks websites deemed as risky. These sites may have malware, spyware, ransomware, or viruses that can harm devices and put personal data at risk.

If you think Xfinity Advanced Security blocked a website by mistake, submit a request for reassessment at spa.xfinity.com. Xfinity reviews the request and usually shares an update within three business days.

For more, see report a website blocked by Xfinity Advanced Security.

Note: If you’re not sure if the website is blocked, you can use the Xfinity Advanced Security URL Checker.

How is Xfinity Advanced Security different from the Protected Browsing feature?
Protected Browsing is a feature for customers who rent a Cisco DPC3939 Gateway. It helps stop you from visiting websites known for malware, spyware, and phishing.

Xfinity Advanced Security adds even more protection for your devices. It may block an entire website, or only part of a page, like a banner ad. It also blocks unknown sources from trying to access your devices and alerts you when a devices shows unusual that could mean it’s infected.

I got an alert that Xfinity Advanced Security couldn't be set up. What should I do?

1. Make sure your model of gateway is eligible for Xfinity Advanced Security.
2. Sign in to the Xfinity app and make sure your gateway is online.
   • You should see “Looking good. Your network is online” at the top of the Overview tab.
3. Restart your gateway to install the latest software.
   
   • You may need to restart twice to complete the update.
   • You can do this from a card on the Overview page.
4. Once your gateway is online again, sign back in to the Xfinity app.

How are threats detected with Xfinity Advanced Security?
When a device connects to your home network, your gateway shares activity details with Xfinity Advanced Security.

Xfinity collects some information, like data from packet headers, source, and destination addresses.

• This traffic flow is monitored, along with the source and destination of the traffic.
• This helps find security threats and block high-risk actions.

Xfinity also updates blocking guidelines for new risks.

• If no risks are found, the Xfinity app will show no security risks to report.
• To protect privacy, personal information isn’t collected.

How can I be told when a threat is detected?
You can get alerts from the Xfinity app for these threat types: unauthorized access attempts, suspicious device activity, and targeted network attacks.

1. Open the Xfinity app. Select the Account icon at the bottom.
2. Tap Account settings. Then, tap Notification settings.
3. Tap Push Notifications to manage your preferences.

To turn on Xfinity Advanced Security alerts, select the checkbox next to Network Activity.

Emails and texts are not available. You can visit the app at any time to check the status of all security threats.

I got an alert that a website I never visited was blocked. What does this mean?
Sometimes, Xfinity Advanced Security lets you open a website or app and  only blocks part of the page that's risky, like a banner ad. You won't see the blocked content while you browse. You'll get an alert that the content was blocked.

How many security risks should I expect to see?
It’s hard to predict how many security risks you’ll see. Every network is different. The number can change based on how many devices you have, what kind they are, and how the network is set up. Port forwarding and other features can also affect your home network.

• It’s common to see no security risks one week and then multiple risks the next.
• If you play online games, you may see more security risks.
• Gaming often uses forwarded ports, which can increase alerts.
• If you have forwarded ports, you could see many security risks in a week.

I haven’t had any security risks reported. How do I know that Xfinity Advanced Security is working?
Potential security risks depend on how many and what kind of devices you have. Your security settings, port forwards, and other network features also have an impact. Even if you get no security alerts, your home network is still being protected by Xfinity Advanced Security.

Do all security risks need my attention?
There are two kinds of security risks: Those that need your attention and those that are for awareness only. While all security risks are immediately blocked, there are some where we’ll recommend further action to make sure they won’t happen again. Learn more about threat types:

• Action Is Needed
  • These include suspicious device activity, targeted network attacks, and unauthorized access attempts. They may mean a device is vulnerable due to a virus or other malware.
    • Xfinity suggests steps to secure your devices and remove high-risk software.
    • For unauthorized access attempts, you can choose to Allow Access for 30 days if you want to override the block.
• Awareness Only
  • These include suspicious site visits.
    
    • These alerts help you understand activity that may be risky.
    • For suspicious site visits, you can choose to Allow Access for one hour if you want to override the block.

If I swap out my Xfinity Gateway for a new one, or move and transfer my Xfinity Internet service to a new address, will I still be protected by Xfinity Advanced Security?
If you activate a compatible Xfinity Gateway and Xfinity Advanced Security is turned on, it will turn on 15 minutes after activation. When this happens, all previous security risk information will be cleared from your Xfinity Advanced Security dashboard.

Can I turn off Xfinity Advanced Security?
Yes. To turn off Xfinity Advanced Security in the Xfinity app:

1. Go to the Overview tab.
2. Select the Internet Xfinity Advanced Security tile.
3. Select Turn Off under Xfinity Advanced Security. Then, follow the on-screen prompts.
   • If you turn it off, you’ll lose 24/7 threat monitoring and real-time alerts.
   • You can turn it back on by following the same steps and selecting Turn On. You can also pick Turn On from the Security tab.

Additional information

Visit our Online Support Center to find common solutions.

The easiest way to activate, manage, and troubleshoot your Xfinity experience is with the Xfinity app! Get 24/7 real-time support, pay your bill, view plan details, get outage updates, and more. Download the free Xfinity app, or scan the QR code with your smartphone.

Need additional support? Ask Xfinity Assistant.