Community Forum

Internet

Top Contributors
Sort by:
Using a VPN connection with Xfinity Internet is just one of the many benefits for Comcast customers. Using a VPN A Virtual Private Network (VPN) is a method by which you can encrypt your data so that your physical location, identity and online activity cannot be discovered even on a public wireless network. You can use a Virtual Private Network (VPN) connection just as long as it’s for your personal, non-commercial use, and it doesn’t violate our applicable terms of service and policies. While we don’t provide technical support for VPN connections, we've provided some helpful information here. If you need help setting up, using or troubleshooting your VPN connections outside of the details provided below, please contact your VPN provider. Comcast supports VPN access through your wireless gateway, using any security setting you choose. If you're using your own WiFi router connected to your wireless gateway, make sure that   bridge   mode   is enabled on your wireless gateway. Find out more about   managing your bridge mode setting on your wireless gateway. Your VPN provider (likely your employer) may require specific security or firewall settings in order to connect successfully. Contact your VPN provider for further configuration details. Find out more about   making changes to your firewall settings for wireless gateways, or see more about   user guides for wireless gateways. The model number of your wireless gateway is printed on the bottom of your wireless gateway.
View full article
Question: How do I get a second IP address for my modem?     Answer:    ***Created by our Community Experts*** Some modems or gateways have the ability to be configured with multiple IPv4 addresses for each of their ethernet ports. However, because of the declining number of public IPv4 addresses, the ability to get them for residential accounts has been restricted. To find out if your area still offers multiple IP addresses, please do the following:    Navigate your browser to https://www.xfinity.com/support/rate-card . You will be required to log on with your XFINITY account credentials. Open the PDF file when prompted. Check near the bottom for the line stating "Additional IP address" as shown below (note the prices may be different 😞   If the option is there, post a request on the forum, specifically stating that you want an additional IP address, and that you've checked your rate card, and that it's available. A Comcast Official Employee will assist you from there.  If the option is not there, you will not be able to add an additional IP address.  Please also note that even if your area has stopped offering multiple IP addresses, any previous add-on will be grandfathered in for as long as there are no changes made to the plan, account, or the equipment. Doing so may cause you to lose the additional IP address. 
View full article
To better protect your Xfinity email username and password from being compromised, third-party email applications (Outlook, Apple Mail, Thunderbird, etc.) through a non-encrypted connection are now required to use a secure outgoing mail server. If you use a third-party email application, you’ll need to configure your outgoing mail server port to 465 or 587, and update the encryption settings of your outgoing mail server from non-encrypted to encrypted settings. If you don't adjust your email settings, you'll still receive emails, but not be able to send emails after the non-encrypted email settings are blocked.     Outlook 2007, 2010, 2013, 2016 or 2019 Open Outlook. Click the   File   menu (Outlook 2010, 2013, 2016 or 2019) or   Tools   menu (Outlook 2007). Click the   Account Settings   button. Select your Xfinity email address and click   Change. Click   More Settings   in the lower right. Click the   Advanced   tab. Change the   Outgoing Server   to   465   or   587. Make sure   TLS   is selected or checked as the encrypted connection. Use   SSL   if   TLS   isn't shown. Click   OK   to save your settings. Outlook for Office365 Open Outlook. Click the   File   menu. Click the   Account Settings   button and then click on the   Server Settings. Click   Outgoing mail. Change the port to   465   or   587. Make sure   SSL/TLS   is selected, next to   Encryption method. Click   Next   to save your settings. Mac (Apple) Mail Open Mac Mail. Click the   Mail   menu. Click   Preferences. Click   Accounts. Select your Xfinity email address. Click the   Server Settings   button to the right. Select the   Automatically manage connection settings   checkbox in the   Outgoing Mail Server (SMTP)   section. Windows 10 Open Windows 10. Select the   cog   icon in the bottom left-hand corner, then select   Manage Accounts   from the right sidebar. Select your email account from the list. Select the   Change mailbox sync settings   option at the bottom of the page. Scroll down, then select   Advanced mailbox settings. Change the   Outgoing Server   to   465   or   587. Make sure   TLS   is selected or checked as the encrypted connection. Use   SSL   if   TLS   isn't shown. Select   Done   and   Save. Outlook Express Open Outlook Express. Click   Tools. Click   Accounts. Select your Xfinity email address, then click   Properties. Click   Servers. Click the   Advanced   tab. Change the   Outgoing Server   to   465   or   587. Make sure   TLS   is selected or checked as the encrypted connection. Use   SSL   if   TLS   isn't shown. Click   OK   to save your settings. Windows Live Mail Open Windows Live Mail. Right-click on the account at left, then click   Properties. Click the   Advanced   tab. Change the   Outgoing Server   to   465   or   587. Make sure   TLS   is selected or checked as the encrypted connection. Use   SSL   if   TLS   isn't shown. Click   OK   to save your settings.   Thunderbird Open Thunderbird. Click   Tools > Account Settings   (or) click   View settings for this account   from Home. Click   Outgoing Server (SMTP). Click   Edit. Change the port to   465   or   587. Make sure   SSL/TLS   is selected under   Connection security. Click   OK.     Other Email Applications Port settings can generally be found in your email application's   Account Settings, Properties   or   Preferences   section. If your email application isn't listed above, please check with your email application developer for instructions on changing your email account settings. Frequently Asked Questions Why do I need to change my non-encrypted outgoing email server settings? We're blocking non-encrypted outgoing email server settings to protect your Xfinity email username and password. No accounts have been compromised; however, this change provides you and your personal information with the best level of protection possible. Will changing the email settings affect how I get emails or manage my mailbox? No. Changing your outgoing email settings will not impact the way your emails are received or managed. What will happen if I don't update my port settings? If you don't adjust your settings in your third-party email application, you can still receive emails. But, you can't send emails after the non-encrypted email settings are blocked. When non-encrypted email settings are blocked, you'll get an error message when you try to send an email. When do I need to make these updates? Please update your third-party email application settings before September 24, 2019, and no later than October 1, 2019. Additional Resources: How to Set Up Your Comcast Email Address with an Email Program The Difference Between IMAP and POP - Xfinity Connect Help Update Your Xfinity Email POP Port Settings for Port 110 Update Your Xfinity Email Settings
View full article
To better protect email and Xfinity credentials from being compromised, customers who use a third-party email application (Outlook, Apple Mail, Thunderbird, etc.) through a POP connection are now required to use a secure mail server and can no longer utilize POP Port 110. While POP will still be supported, customers should ensure that their email application is set up through the secure Port 995. If your application is configured through Port 110, you’ll need to make a few updates to continue using your Xfinity email.     Updating Third-Party Email Application POP Port 110 Settings Outlook 2007, 2010, 2013 or 2016 Open Outlook. Click the   File   menu (Outlook 2010, 2013 or 2016) or   Tools   menu (Outlook 2007). Click the   Account Settings   button. Select your Xfinity email address and click   Change. Verify that the account type says   POP. If the account type says   IMAP, no changes are needed. Click   More Settings   in the lower right. Click the   Advanced   tab. Change the   Incoming Server   to   995. Ensure that   SSL   is selected or checked as the encrypted connection. Click   OK   to save your settings. Mac (Apple) Mail Open Mac Mail. Click the   Mail   menu. Click   Preferences. Click   Accounts. Select your Xfinity email address. Verify that the account type says   POP. If the account type says   IMAP, no changes are needed. Click the   Advanced   button to the right. Change the   Incoming Server   to   995. Ensure that   SSL   is selected or checked as the encrypted connection. Windows 10 Open Windows 10. Select the   cog   icon in the bottom left-hand corner, then select   Manage Accounts   from the right sidebar. Select your email account from the list. Select the   Change mailbox sync settings   option at the bottom of the page. Scroll down, then select   Advanced mailbox settings. Verify that the account type says   POP. If the account type says   IMAP, no changes are needed. Change the   Incoming Server   to   995. Ensure that   SSL   is selected or checked as the encrypted connection. Select   Done   and   Save.   Outlook Express Open Outlook Express. Click   Tools. Click   Accounts. Select your Xfinity email address, then click   Properties. Click   Servers. Verify that the account type says   POP3. If the account type says   IMAP, no changes are needed. Click the   Advanced   tab. Change the   Incoming Server   to   995. Ensure that   SSL   is selected or checked as the encrypted connection. Click   OK   to save your settings. Windows Live Mail Open Windows Live Mail. Right-click on the account at left, then click   Properties. In the   Properties   window, click on the   Servers   tab to verify that the incoming mail server type is set to   POP. If the account type says   IMAP, no changes are needed. Click the   Advanced   tab. Change the   Incoming Server   to   995. Ensure that   SSL   is selected or checked as the encrypted connection. Click   OK   to save your settings. Thunderbird Open Thunderbird. Click   Tools. Click   View settings for this account. Click   Server Settings. Verify that the server type says   POP. If the server type says   IMAP, no changes are needed. Change the port to   995. Ensure   SSL/TLS   is selected under   Connection Security. Click   OK.   Other Port settings can generally be found in your email application's   Account Settings,   Properties   or   Preferences   section. If your email application is not listed above, please consult your email application developer for instructions on changing your POP account settings.     Frequently Asked Questions Why is access to email through Port 110 being blocked? We are blocking this port because it is not encrypted and may leave your email account information vulnerable to being compromised. No accounts have been compromised; however, this change will help to provide you and your personal information with the best level of protection possible. Can I still access my email through POP? Yes. Port 995 with SSL is secure and is the recommended port for POP. You can update your Incoming Mail Server Port to 995 with SSL to continue to receive mail without any change to your experience. Will changing the email settings affect how I receive emails or manage my mailbox? We recommend that you switch from POP Port 110 to Port 995, which will not affect how you receive emails or manage your mailbox. If you wish to change from POP to IMAP, please move any emails or folders that you wish to save into your new IMAP account   before   deleting the POP account to prevent any impact to your experience. Please see   Switching from POP to IMAP   for additional details. What will happen if I do not update my port settings? After access to the port is blocked, you will receive an error message in your third party email application when attempting to access your Xfinity email. You will continue to be able to access your email through Xfinity Connect webmail, the Xfinity Connect app or any email application without any impact. When do I need to make these updates? Please update your settings prior to December 2018 to ensure that you can continue using email with your third party email application after Port 110 is blocked. If you update your settings after port access has been blocked, any email received while blocked will appear in your inbox once you have updated your port settings. Additional Resources: How to Set Up Your Comcast Email Address with an Email Program The Difference Between IMAP and POP - Xfinity Connect Help Update Your Xfinity Email POP Port Settings for Port 110 Update Your Xfinity Email Settings
View full article
Choosing either POP or IMAP can impact the way you access and manage your email. What are IMAP and POP? IMAP (Internet Message Access Protocol) is a popular protocol that keeps your email on the server and always synchronized across your devices. For example, if you delete, send or mark a message as unread on one device, it is reflected on all your devices. POP (Post Office Protocol) downloads your email onto your device. Therefore, actions on one device are not reflected on other devices. Using the same example, if you delete, send or mark a message as unread on one device, the changes will not be reflected on other devices. Sometimes, POP will download your email but not leave a copy on the server for other applications or devices. IMAP is generally favored by those who check their email on multiple devices since it provides a more consistent experience.   General Instructions for Switching to IMAP For some email applications, switching from POP to IMAP is as simple as entering your Comcast email address and password. Find your email application's   Settings   or   Preferences   section on the device that you use to access your Comcast email account. Choose the option to   Add new (IMAP) account... Enter your Comcast email address and password when prompted, and submit. You should now see two separate Comcast accounts - POP and IMAP. Note:   Before deleting your POP account, make sure that you move any emails or folders that you wish to save into your new IMAP account. Additional Support For additional support, please visit the articles below for information and instructions for specific email clients: Switch email settings from POP to IMAP on Samsung Galaxy Tab Switch email settings from POP to IMAP on iPad Switch email settings from POP to IMAP on iPhone Switch email settings from POP to IMAP on Windows Live Mail Switch email settings from POP to IMAP on Mac Mail Switch email settings from POP to IMAP on Microsoft Outlook Switch email settings from POP to IMAP on Mozilla Thunderbird     Additional Resources: How to Set Up Your Comcast Email Address with an Email Program The Difference Between IMAP and POP - Xfinity Connect Help Update Your Xfinity Email POP Port Settings
View full article
Ready to get started using your Comcast email? No problem. Our web-based  Xfinity Connect page  and  app  come set up and ready for you to use. But if you prefer using an email program instead, these settings will have you up and running in no time! If you have questions about your specific program or email client, we've got you covered. Just head to the  links section  and pick your program. To ensure the security of our network and customers, we no longer support the use of port 25 for sending email. If you use an older email client (Outlook Express, Outlook, Mac Mail, etc.), this might impact your ability to send email.  Learn more about port 25 .   Email Settings When your program asks you to set up your email, use these settings to connect your Comcast email: Incoming Mail Server Name:   imap.comcast.net Incoming Mail Server Port Number:   993 with SSL ON If the Mail Client lets you select an authentication method, choose   STARTTLS. If Needed:   143 with SSL ON Outgoing Mail Server Name:   smtp.comcast.net Outgoing Mail Server Port Number:   587 (SMTP) If Needed:   465 (SMTPS) Encryption:   TLS   (use   SSL   if   TLS   isn't shown.) Authentication: Type in your   Comcast username and password   Email Setup: Port Numbers and POP vs. IMAP When you're setting up your email account, your program will ask for some information about email "protocols." Here are a couple of things to know as part of your set-up: Port Numbers:  Your email port is how email moves from one email server to another. To protect your security and help prevent spam, we no longer support port 25. If you're using an older email program like Outlook Express, Outlook, or Mac Mail, you may have trouble sending email.  Learn more about port 25 . POP vs. IMAP:  POP (Post Office Protocol) and IMAP (Internet Message Access Protocol) are two different ways to get email in your email program.  We recommend using IMAP  for your Comcast email. POP can cause problems when checking your mail from more than one phone or computer because POP removes the mail from our server and delivers it to your device. IMAP makes it easier to sync your email on multiple devices because your folders and mail remain on our server until you move or delete them with your device. With IMAP, the email changes you make on one device, like your smartphone, are reflected on your other devices, like your laptop. But if you'd still like to use POP, use these settings in your email program: Incoming Mail Server Name:   pop3.comcast.net Incoming Mail Server Port Number:   995 (POP3 with SSL) Incoming Mail Server Port 110 is no longer supported. Make sure to use port 995 instead. You can check this in your email program's   Settings,   Advanced Settings   or   Preferences   menu. Learn more about  updating your POP settings  or  switching from POP to IMAP .     Email Clients Need more help? Follow these links for steps and screenshots on your email program: Outlook 2013 or 2016 Outlook 2010 Outlook 2007 Outlook Express Mail 9 on Mac OS X Apple Mail 7 Mobile - iPhone Mobile - Android Mail   (no longer available in modern versions of Android) Windows Live Mail 2011 Windows 10 Windows 8 Windows Mail with Windows Vista Mozilla Thunderbird 16.0 and up     Additional Resources: How to Set Up Your Comcast Email Address with an Email Program The Difference Between IMAP and POP - Xfinity Connect Help Update Your Xfinity Email POP Port Settings
View full article
Your home Gateway (such as the Xfinity xFi Gateway) broadcasts two radio bands to ensure an optimal in-home WiFi experience— one band focused on speed, and one focused on coverage.   These bands work best when they’re operating on a simple, personalized network. Simplifying and customizing your network will make it more secure and provide your devices with better connectivity, and we can help you get there.   Some Background: Understanding the 2.4 GHz and 5 GHz Bands The 2.4 GHz band offers better WiFi coverage, but is prone to more congestion due to heavy network traffic. The 5 GHz band offers less range, but delivers faster speeds thanks to less congestion and wider channels.     Understanding how xFi Gateways work Xfinity xFi Gateways are all-in-one devices that deliver whole-home WiFi coverage, fast Internet speed and the ability to control your home network - for the ultimate connected experience. xFi Gateways are "dual band," meaning that they broadcast two separate radio bands for their WiFi network - a 2.4 GHz band and a 5 GHz band. Historically, you were encouraged to use a different WiFi name and password for each band. You then had to choose which band your devices should connect to. Knowing which would provide the best connection and performance was guesswork. That’s now changed. With the advanced intelligence of xFi Gateways, using the same name and password for the 2.4 GHz and 5 GHz bands lets the Gateway sort out which one will provide a better connection at any given time. You will still have both bands and all the associated functionality, channels and range. However, by using the same WiFi name and password for both, devices will connect seamlessly to the most optimal band at any given time. This is called "band steering." If you have an xFi Gateway (Arris 1682G, Cisco 3941T, Cisco DPC3939, Arris 3482G, Technicolor CGM4140COM or Arris X5001), you should simplify your WiFi and switch to using a single SSID - that is, use the same WiFi name and password for both your 2.4 GHz and 5 GHz bands, so you can take advantage of this seamless connection to the best network. Changing your WiFi name and password To get started using the same WiFi name and password across your entire home network, you can login to the   xFi mobile app   or Website. Once you’re logged in, look for the Network menu. Once you’ve located it, select the Edit WiFi option. From there, you can update your WiFi name and password—it’s that simple.   **Note**: You may need to reconnect some of your devices when using these new settings. Once it’s all said and done, your devices can choose between the best in-home WiFi connection at all times.   You can also automatically simplify to one name and password by selecting the Simplify Your WiFi tile under the Just for You header in the Overview section of xFi.   **Note**: If  you have installed xFi Pods, the option to have split 2.4 and 5 GHz bands   is disabled.   Added benefits of using one WiFi name and password for your network include fewer connectivity issues, a more secure home WiFi experience, and less troubleshooting. If you’re ready to get the most out of nation’s fastest Internet,   log in to xFi today   and get started.      Frequently Asked Questions I only see one in-home WiFi name now and I used to see two - what happened? When you have a single name and password for your 2.4 GHz and 5 GHz bands, you will only see one option to connect. Please be assured that the second WiFi band is still working in the background to optimize your connection. What action do I need to take? If you aren't already using the same WiFi name and password for the 2.4 GHz and 5 GHz bands, you should update your WiFi name and password. The easiest way to update your settings is to select  Simplify Your WiFi  from the  Overview   section of the  xFi website  or mobile app. You can also update your WiFi name and password by selecting  Edit WiFi  from the  Network   section of the Xfinity xFi app or website.  Learn more about xFi network settings . We'll take care of the rest in the background to optimize your network How do I know if I have an xFi Gateway with this feature? This is eligible on Gateway models Arris 1682G, Cisco 3941T, Arris 3482G, Technicolor CGM4140COM, Cisco DPC3939 and Arris X5001. To determine the type of Gateway you have, check the make and model information located on the bottom of your device. You can also log in to My Account and select  Devices   to view the make and model of your Gateway. What is band steering and how does it work? Band steering means the xFi Gateway determines which WiFi network band (the 2.4 GHz band or the 5 GHz band) is most optimal for a device's WiFi connection at any given time. It seamlessly changes to the best band based on signal strength and WiFi congestion thresholds. To enable band steering, the 2.4 GHz and 5 GHz bands must have the same WiFi name and password. What happens if the 2.4 GHz and 5 GHz WiFi network band names and passwords are different? If the WiFi network names and/or passwords are different, you will not be able to take advantage of band steering and will need to manually manage which WiFi network band each device connects to. This may lead to slow and intermittent connectivity issues. For example, if a mobile device is connected to the 5 GHz band and loses connection due to distance, you may need to manually reconnect to the 2.4 GHz band. With the same name and password, that process will occur automatically.     Additional Resources For more information refer to  Benefits of Using One WiFi Name and Password for Your Home Network For additional assistance with your Xfinity WiFi see  How to improve your Xfinity Wifi For additional assistance with troubleshooting your Xfinity WiFi see How To Troubleshoot Your Home WiFi Network with XFINITY xFi
View full article
Ports on the internet are like virtual passageways where data can travel. All information on the internet passes through ports to get to and from computers and servers. When a certain port is known to cause vulnerability to the security and privacy of your information, Xfinity blocks it to protect you.   Find the Reasons for Blocking Listed Below Port Transport Protocol Direction Downstream/ Upstream to CPE Reason for Block IP Version 0 TCP N/A Downstream Port 0 is a reserved port, which means it should not be used by applications. Network abuse has prompted the need to block this port. IPv4/IPv6 25 TCP SMTP Both Port 25 is unsecured, and Botnet spammers can use it to send spam. This does not affect Xfinity Connect usage. We recommend learning more about   configuring your email settings to Comcast email   to use port 587. IPv4/IPv6 67 UDP BOOTP, DHCP Downstream UDP Port 67, which is used to obtain dynamic Internet Protocol (IP) address information from our dynamic host configuration protocol (DHCP) server, is vulnerable to malicious hacks. IPv4 135-139 TCP/UDP NetBios Both NetBios services allow file sharing over networks. When improperly configured, ports 135-139 can expose critical system files or give full file system access (run, delete, copy) to any malicious intruder connected to the network. IPv4/IPv6 161 UDP SNMP Both SNMP is vulnerable to reflected amplification distributed denial of service (DDoS) attacks. IPv4/IPv6 445 TCP MS-DS, SMB Both Port 445 is vulnerable to attacks, exploits and malware such as the Sasser and Nimda worms. IPv4/IPv6 520 UDP RIP Both Port 520 is vulnerable to malicious route updates, which provides several attack possibilities. IPv4 547 UDP DHCPv6 Downstream UDP Port 547, which is used to obtain dynamic Internet Protocol (IP) address information from our dynamic host configuration protocol (DHCP) server, is vulnerable to malicious hacks. IPv6 1080 TCP SOCKS Downstream Port 1080 is vulnerable to, among others, viruses, worms and DoS attacks. IPv4/IPv6 1900 UDP SSDP Both Port 1900 is vulnerable to DoS attacks. IPv4/IPv6     Enable Port Blocking on Your Router If you’re concerned about the security of your wireless home network, one thing you can do is enable port blocking – this can help prevent unwanted outside connections to your network’s devices. While port blocking is advanced, you can enable it on certain routers with a few simple steps. Here’s how: Note:  These instructions apply only to the following devices:   Netgear CG814v 1&2 Linksys WCG200v 1&2 Linksys BEFCMUH4  Log on to your router’s administration site. Click on the   Select a Computer/Device   button to view the IP addresses of the computers connected to your gateway. Enter the   IP address range   in the IP Range fields. Enter the   Port range   in the Port Range fields. Select the   Enable   check box. Click   Apply.       Why is Port 25 for Email Submission Not Supported? Email is used for important communications and Comcast wants to ensure that these communications are as secure and as private as possible. As such, Comcast does not support port 25 for the transmission of email by our residential Internet customers. Much of the current use of port 25 is by computers that have been infected by malware and are sending spam without the knowledge of the users of those computers. Why is Comcast Supporting Port 587? The original/legacy email ports, 25 and 110, have been in use since the inception of email and have limited or no security features. As a result, port 25 has been used for the transmission of spam and malware from infected computers for nearly a decade. Port 110 simply is not a secure means of retrieving email. Port 995 provides SSL encryption when downloading email. It has been a long-standing recommendation from   M 3 AAWG, an international community of anti-abuse professionals, and the   Internet Engineering Task Force   (IETF), that port 25 be blocked. In an effort to provide our customers with the greatest security when using email, Comcast recommends the use of the industry-recommended port 587 with TLS/SSL enabled. The recommendations from M 3 AAWG can be read   here   and you can also view the IETF   RFC 5068and   RFC 4409   (section 3.1, see below). From RFC 4409:   3.1. Submission Identification Port 587 is reserved for email message submission as specified in this document. Messages received on this port are defined to be submissions. The protocol used is ESMTP [SMTP-MTA, ESMTP], with additional restrictions or allowances as specified here. Although most email clients and servers can be configured to use port 587 instead of 25, there are cases where this is not possible or convenient. A site   may   choose to use port 25 for message submission by designating some hosts to be MSAs and others to be MTAs. What Makes These Settings More Secure? Port 587 further improves security through the use of required authentication and recommended TLS/SSL encryption. Required Authentication   When sending and receiving email, it is required that you use your Xfinity username and password. This helps to prevent infected computers and other devices connected to the Xfinity services from being able to freely transmit spam and malware. SSL Encryption Secure Sockets Layer (SSL) is a secure protocol for sending data safely and encrypted over the Internet. With SSL encryption your user ID, password, and email are secured from hackers and identity thieves when sending or receiving email.   Other Bodies Opposed to the Use of Port 25 There are a number of other organizations that Comcast works with to control the problem of spam on the Internet. One of the most notable of these is   Spamhaus, an organization that provides a number of lists detailing IP addresses known to send a great deal of spam and a list of IP addresses that should never send email at all. These lists, as well as others provided by similar organizations, are used by nearly all of the ISPs and mail receivers on the planet. All of the Comcast dynamic IP address space is listed by Spamhaus as not to be used for the sending of email. As such, any email sent by subscribers on the Comcast network directly to other ISPs (not via the Comcast mail servers) is extremely likely to be blocked by the receiving ISP. The Federal Trade Commission, an organization that has taken legal action against many spammers, also recommends that Port 25 should be blocked by ISPs. The FTC’s recommendation is as follows: "Block port 25   except   for the outbound SMTP requirements of authenticated users of mail servers designed for client traffic.   Explore implementing Authenticated SMTP on port 587 for clients who must operate outgoing mail servers." The ITU also recommends blocking port 25 in their document named "ITU Botnet Mitigation Toolkit". This can be viewed   here. While this document is focused on the remediation of botted computers, blocking of port 25 is seen as an important step in mitigating the spam that is sent from botted machines.   ISPs that Manage Port 25 Many ISPs, both in the USA and around the globe, block port 25. These include: Verizon AT&T NetZero Charter People PC Cox EarthLink Verio Cablevision All Japanese ISPs France Telecom/Orange       For additional information see here: https://www.xfinity.com/support/articles/list-of-blocked-ports
View full article
Question How does the Xfinity Internet Data Usage Plan work?   Answer   The 1.2 Terabyte Internet Data Usage Plan provides you with 1.2 terabytes (TB) of Internet data usage each month as part of your monthly Xfinity Internet service. If you choose to use more than 1.2 TB in a month without being on an unlimited plan, we will automatically add blocks of 50 GB to your account for an additional fee of $10 each. Your charges, however, will not exceed $100 each month, no matter how much you use. We're also offering you a courtesy month, so you will not be billed the first time you exceed the limit. This data plan is based on a principle of fairness. Those who use more Internet data, pay more.   It is important to know only a very small percentage of our customers use more than 1.2TB of data and are not likely to be impacted by this plan, so they can continue to stream, surf, and download without worry. To see your actual usage, sign in to   My Account.   For those who regularly use more than 1.2 TB in a month, we also offer an Unlimited Data Option.   For customers who lease an xFi Gateway, the Unlimited Data Option is available via the xFi Complete package, which you can add for an additional $11/month (for a total of $25/month). For customers who own their own modem, you can upgrade to unlimited data for an additional $30/month. The fee is independent of actual data usage. The Data Usage Plan will not apply to customers who enroll in an Unlimited Data Option. To learn more about xFi Complete, refer to   xFi Complete overview.     Question What can I do with 1.2 terabytes of data in a month?   Answer Stream between 480 and 560 hours of HD video a month Stream more than 150 hours of 4k video a month Stream more than 21,600 hours of music Spend nearly 3,500 hours of videoconferencing (Zoom, FaceTime, Google Duo, Houseparty, etc.) Play more than 34,400 of online games in a month Watch nearly 1,200 hours of distance learning videos on Seesaw or Google Classroom Participate in 390 hours of virtual workouts (Peloton, The Mirror, etc.)     Question Do I have the 1.2TB Internet Data Usage Plan?   Answer   Xfinity Internet customers in the following locations have the 1.2 Terabyte Internet Data Usage Plan: Alabama Arizona Arkansas California Colorado Florida Georgia Idaho Illinois Indiana Kansas Kentucky Louisiana Michigan Minnesota Mississippi Missouri New Mexico Western Ohio Oregon South Carolina Tennessee Texas South Carolina Utah Southwest Virginia Washington Wisconsin The plan does not currently apply to Xfinity Internet customers on our Gigabit Pro tier of service, nor does it apply to Business Internet customers, customers on non-upgradable Bulk Internet agreements or customers with Prepaid Internet.     Question Where do I check my data usage?   Answer   You can view current usage and usage history by signing in to your   Usage Meter   page. You will need your Xfinity username and password to login. You can also view your current usage and usage history in the Xfinity My Account app for mobile devices. See   How Can I Get the Xfinity My Account App   to download the app.     Question Can I get Unlimited Data?   Answer   All Xfinity Internet plans come with 1.2TB (terabytes) of data per calendar month. And that’s a lot of data. Customers who use more than 1.2TB of data per month will be charged $10 plus tax for each additional 50 GB used, up to a max of $100 per month. For those who want peace of mind to never pay overage fees, we offer two Unlimited Data Options.   Option 1: xFi Complete With the new xFi Complete option, you get unlimited data (a $30/month value), whole home WiFi (so you’ll have the most WiFi coverage in any room), and our xFi Gateway(a $14/month value) with the built-in protection of Advanced Security to block online threats and protect connected devices, all for $25/month. If you already rent an xFi Gateway, you can upgrade to xFi Complete for just an additional $11/month by calling 1-800-xfinity.   Option 2: Unlimited data for customers who use their own modem If you currently use your own modem and router, you have two options to get unlimited data. First, you can add xFi Complete and get our xFi Gateway with Advanced Security, Unlimited Data, and whole home WiFi for $25/month. With this option, you would no longer use your own equipment to access Xfinity Internet, but instead use our xFi Gateway, which takes the place of your modem and router. Or, you can add our Unlimited Data option for $30/month and continue to use your own Modem and Router. Existing customers using their own modem can upgrade to the Unlimited Data plan now by calling 1-800-xfinity or clicking   here.   Enrollment goes into effect immediately and applies to the calendar month in which you make the change. Any overage fees for that month will be cleared out and your next bill will reflect the relevant charge ($25 or $30, depending on your selected plan) from that month forward.   Enrollment in xFi Complete or our Unlimited Data Plan is optional and available to all customers in locations with the 1.2 TB Internet Data Usage Plan.   If you choose to cancel xFi Complete or the Unlimited Data Plan, unlimited data will stay in effect for the remainder of the month in which you make the change and you’ll return to the 1.2 TB Internet Data Usage Plan on the first day of the next calendar month.     Question Will I be alerted when I approach, reach or exceed my data usage plan?   Answer   You'll get email, text message and Xfinity X1 on-screen notifications at the 75% (email only), 90% and 100% thresholds. If you use more than 1.2 terabytes (TB) you will also receive an email and X1 on-screen notification for each additional 50 Gigabyte (GB)you use over 1.2 TB up to the maximum overage charge of $100.   You’ll also receive an SMS text message for each 250 GB you use over 1.2 TB up to the maximum overage charge of $100. If you’ve opted in, you’ll also get push notifications on your phone through the Xfinity My Account app.   Notification Examples Text message notifications will be sent between 9 AM and 9 PM local time.   Text Message     Email     X1 Screen     Mobile Push Notification     Question What will happen if I use more than 1.2 terabytes in a month?   Answer   No matter how much data you use, your Internet service will never be interrupted.   Courtesy Months We're offering you one courtesy month, so you will not be billed the first time you exceed 1.2 terabytes (TB), no matter how much you use during that month. You will only be subject to overage charges if you use more than 1.2 TB for a second time in a 12-month period. If you use more than 1.2 TB one time or less in a 12-month period, your courtesy month balance will reset to one at the end of these 12 months. However, if you use more than 1.2 TB two times in a 12-month period, no more courtesy months will be given. The 12-month period begins the first time you exceed 1.2 TB.   You can keep track of your courtesy month count on your   Usage Meter   webpage in My Account or in the Xfinity My Account app for mobile devices.   Overage Charges Once your courtesy month has been used, the next time you exceed 1.2 TB in a month (and any subsequent times it is exceeded in a month), you will be notified via email, SMS text message and the Xfinity My Account app notifications (if enabled) that you’ve exceeded your data usage plan amount, that an additional block of 50 GB has automatically been allocated to your account and that a $10 charge will be applied to your bill. You will automatically be charged $10 each time we provide you with an additional block of 50 GB of data, with a limit of $100 per month.   Billing Cycle The charge for exceeding your data usage plan will appear on the bill statement following the last day of the month for which you exceeded your data usage plan (or on the subsequent bill statement, depending on your bill cycle date). If you exceed your 1.2 Terabyte Data Usage Plan in a particular month, the Xfinity Internet section of your bill will list a usage charge of $10 for every additional 50 GB of data over the 1.2 TB included in your plan. See the following example (layout may be slightly different per location):   If the particular month was a courtesy month, a usage charge that amounts to $10 for every 50 GB of data you were provided will be included in the Xfinity Internet section of your bill, but you also will see a courtesy credit for the same amount on that bill. See the following example (layout may be slightly different per location):     Question If I upgrade my speed, will I get more data?   Answer All customers in locations with the 1.2 Terabyte Internet Data Usage Plan receive 1.2 terabytes (TB) per month, regardless of their Internet tier of service. If you have purchased more than one Xfinity Internet service tier, you will receive a monthly plan that includes 1.2 TB per Internet service tier (e.g., if you subscribe to two separate Internet services, you will have 2.4 TB of data total).   The 1.2 Terabyte Internet Data Usage Plan does not currently apply to Xfinity Internet customers on our Gigabit Pro tier of service. The plan also does not apply to Business Internet customers, customers on Bulk Internet agreements, customers with Prepaid Internet, or customers who enroll in the Unlimited Data Option.       Question Who can I contact if I have more questions?   Answer If you have more questions, please  contact us .         Additional Informaiton https://dataplan.xfinity.com/faq/ https://www.xfinity.com/support/articles/data-usage-plan https://www.xfinity.com/support/articles/data-usage-find-area https://www.xfinity.com/support/articles/data-usage-what-is-the-terabyte-data-usage-plan https://www.xfinity.com/support/articles/exp-unlimited-data https://www.xfinity.com/support/articles/exp-unlimited-opt-out  
View full article
Differences between and Primary and Secondary users and how to manage them
View full article
Help secure your devices, your personal information, and your family against online threats with easy-to-use Internet security tips. Print a copy for easy reference.   The risks are real, but the solution is clear   Install Norton™ Security Online Help shield your PC, Mac, and mobile devices from viruses and online threats with top-rated¹ security software and services from Norton.   Norton Security Online   is included at no additional cost with your Xfinity Internet service. Don’t be fooled by social engineering Social engineering is the art of manipulating people to performing actions or divulging confidential information. Before you let anybody in on sensitive details about you, make sure that you can verify their credibility. Be extra careful while clicking links and attachments in emails Phishing is a method used by Internet scammers who imitate real companies or individuals in email messages to entice people to share user names, passwords, account information or credit card numbers. Be wary before clicking on attachments and links because, even though the sending party might look legitimate, there is a possibility that they might not be. Strong passwords for accounts and devices When creating a password, use a combination of uppercase and lowercase letters, numbers, and symbols. The longer your passwords are, the harder they are to crack. Never use the same password for multiple accounts, especially for sensitive sites like social media, email or banking websites.   Learn more. Using multi-factor authentication Multi-factor authentication (MFA) is a best practice to help further protect yourself against hacks and social engineering. MFA works by requiring you to login with more than one set of credentials to authenticate your identity. Turn on MFA when a website or app offers it, especially for sensitive sites like social media, email or banking websites. Xfinity offers two-step verification to help protect online access to My Account, Xfinity web pages, and most apps. Learn more and   enroll today! Learn about security and privacy settings with social media Learn about security and privacy settings. Be careful when sharing personal information and never share sensitive or confidential information on social media. Never share your full birthdate, current address or location when you’ll be away from home for a long period of time. Handling sensitive files in emails While it’s important to have strong passwo rds on your devices and email accounts, you should take extra precaution to safeguard sensitive files you store or transfer. Sensitive information includes W2 forms, credit card numbers, bank account info, driver’s license numbers, social security numbers, insurance numbers, etc. Encrypt these types of files before sending to another person. Keep apps and operating systems updated Keep your devices’ operating system and apps updated to the latest version to ensure the latest security patches are installed. Take extra care to make sure Adobe Flash, Java and other utilities stay updated to prevent cyber attacks. If your device offers auto-update for apps, turn this feature on. Securing payment info and personal information when shopping When shopping online, submit payment information on websites with a URL that starts with https:// The "s" stands for secure. If you’re shopping on a mobile device, only submit payment information on trusted, well-known apps. Use caution when saving payment information in your web browser or mobile wallet. Talk with your family about protecting your online presence and cyberbullying For families that share devices or regularly interact online together, it’s important to have a conversation about internet safety. Review the tips above and have an open discussion with your family about   protecting your online presence   and educating them about the pitfalls of cyberbullying.   Trusted Security Partners Comcast partners with trusted national organizations who provide digital media awareness for children, education on how it affects them, and articles on how to promote safe online habits. www.commonsensemedia.org     Learn More     www.staysafeonline.org     www.controlwithcable.org     Learn more about Xfinity Internet Security Tips Learn more about Internet Security Education      ¹ Ratings and Performance:   AV-TEST, "Best Protection 2017 Award,"   March 2018,   AV-TEST, "Product Review and Certification Report,"   September-October 2017,   PassMark Software, "Consumer Security Products Performance Benchmarks   (Edition 1)," November 2017   
View full article
Getting Started with Xfinity xFi Advanced Security   Xfinity xFi Advanced Security delivers a smarter, more personalized security solution for your home network. From computers and mobile phones to home security cameras and smart thermostats, Advanced Security protects all of your connected devices for added peace of mind. Advanced Security is available to Xfinity Internet subscribers who rent a compatible xFi Gateway. Features and Benefits Features Prevents you from inadvertently visiting malicious sites and becoming a victim of phishing attacks. Blocks remote access to smart devices, like home cameras, from unknown or dangerous sources. Helps monitor devices real-time and alerts you when devices are behaving in unusual ways that could indicate a network threat. Adapts to your home network and gets smarter to keep up with new threats over time. Provides real-time notifications and a dashboard to easily view and manage threats right from the Xfinity xFi app or website.   Benefits No additional hardware to install; all you need is a compatible xFi Gateway. No software to install on your individual devices; your entire network is protected, once Advanced Security is enabled.   Getting Access Advanced Security is available to Xfinity Internet subscribers who rent a compatible xFi Gateway. Simply download the Xfinity xFi app or visit the website at   xfinity.com/myxfi   and log in to enable the feature. You can access the Advanced Security Dashboard from the   Overview   or   Network   sections. Learn more about   using xFi Advanced Security   and   Comcast's commitment to Privacy and Security.   Equipment Requirements These xFi Gateways support xFi Advanced Security: xFi Wireless Gateway Arris TG1682G Cisco DPC3941T xFi Advanced Gateway Arris TG3482G Technicolor CGM4140COM xFi Gateway (3rd Generation) Technicolor CGM4331COM xFi Fiber Gateway Arris X5001   **Note**:   Xfinity xFi and Advanced Security will not be available for Gateways in Bridge Mode. Advanced Security is not supported on Cisco DPC3939 Gateways. Using Xfinity xFi Advanced Security xFi Advanced Security provides an added layer of protection for your entire network by preventing you from inadvertently accessing malicious sites, blocking remote access to smart devices from unknown or dangerous sources and monitoring activity in real-time to detect when devices are behaving in unusual ways that could indicate a network threat. Whenever a threat is detected, it’s automatically blocked and you are notified in xFi and given tips on how to resolve. Receive real-time updates about threats to your network that require immediate attention by turning on notifications in xFi. To do this, log into the Xfinity xFi app and tap on the speech bubble in the top-left corner, then tap on the gear icon. Select   Push Notifications, then check the box next to   Network Activity.  See above about starting with xFi Advanced Security   to learn about eligibility requirements and how to access this feature. Security Status You can find a status of security activity in the   Overview   section of the xFi app or website (xfinity.com/myxfi). To view additional threat details or to resolve any threats that require your attention, select   View Affected Device(s)   to be taken to the Dashboard. Advanced Security Dashboard The Dashboard gives you a comprehensive view of threats detected during the past seven days and a list of devices that have been impacted by threats.     Managing Threats Threats are split into two main categories: Those that are for awareness only and those that require attention. Awareness-Only Threats Some threats won’t require any action, but you will still be alerted. These include Suspicious Site Visits. To view additional details when no action is required, select the device from the Advanced Security dashboard. The threat details page will provide a list of threats associated with a given device, for example when the device has been blocked from visiting a dangerous website. Any time a device is blocked from accessing a site, you can opt to allow it to access. Keep in mind that by doing so, you may be putting your network at risk and making it vulnerable to malicious activity. Access will be limited to a certain amount of time due to this risk. Learn more about the   threat types. Threats that Require Attention Some threats, such as a Targeted Network Attack, Suspicious Device Activity or Unauthorized Access Attempt, may require you to take further action. If a threat requires your attention, you’ll see an alert at the top of the Dashboard indicating how many require your attention. Select the device to access the threat details page and to take action. The threat details page will provide a list of threats that have been blocked but require your attention to ensure they don’t return. Select   Help Me Fix It   for tips on how to resolve the threat. Learn more about   threat types. Tips to Resolve Threats Depending on the nature of the threat that requires your attention, the following tips can help you take action to resolve the threat. Quarantine Your Device If one of your devices has been compromised, you can use xFi to pause its access or disconnect it from your home network. This will keep it from endangering other devices on your network. Update Your Software Keep your device’s software or firmware current to ensure you’ve got the latest security updates. Use the update feature usually found in your device’s settings or check with the device manufacturer. Run Antivirus Software One of the best ways to defend against network threats is by running antivirus software. If you haven’t already, install a software program, keep it updated, and run scheduled scans to keep devices free from viruses. Learn more about how to   Download Norton Security Online   for your PC, Mac and Android devices. Restart Your Device After updating your device’s software, be sure it restarts. This will complete the update and also, stop any existing communication with malicious sites. Check Your Port Forwards Open ports on your home network give potential access to malicious attackers. Ensure your port forwards are set up correctly for your devices. Learn about   port forwards and how to set them up using xFi. Disable DMZ Enabling DMZ (a demilitarized zone) may resolve a device communication issue, but it's a security risk. If a device needs to be accessible to outside sources, we recommend using   port forwarding   instead. You can disable DMZ by navigating to the   Network   section and selecting   Advanced Settings. Next, select   DMZ   and then   Edit   to access the setting. Deselect the checkbox next to   Enabled, and select   Apply Changes.   Disabling and Re-Enabling Advanced Security You can disable the Advanced Security feature in xFi by navigating to   More   and selecting   My Services. From here, select   Disable   under xFi Advanced Security and follow the on screen prompts. Once disabled, you will lose 24/7 threat monitoring and real-time reporting on your home network. If you have disabled the Advanced Security feature, you can re-enable it by navigating to   More   and selecting   My Services. From here, select   Enable   under xFi Advanced Security and follow the on screen prompts.     Frequently Asked Questions What is xFi Advanced Security? xFi Advanced Security gives added peace of mind for your home network by preventing you from inadvertently visiting malicious sites or downloading dangerous files, as well as blocking remote access to smart devices from unknown or dangerous sources. Advanced Security monitors devices real-time and will alert you when devices are behaving in unusual ways that could indicate a network threat. It will also adapt to your home network and get smarter over time to keep up with new threats. How do I access Advanced Security features in xFi? Advanced Security is available to Xfinity Internet subscribers who rent one of the following compatible xFi Gateways (Arris 1682G, Cisco 3941T, Arris 3482G, Technicolor CGM4140COM, Techincolor CGM4331COM or Arris X5001). If you haven't already, download the Xfinity xFi app or visit the xFi website ( xfinity.com/myxfi ). Once you log in, Advanced Security will be enabled. You can access Advanced Security features (security status and threat details) from the  Overview  and  Network  sections. To learn more, visit  how to get started with xFi  for details. (Please note that Advanced Security will not be available if your Gateway is in bridge mode or if you have a Cisco DPC3939 model.) What are the different types of threats prevented with xFi Advanced Security? Unauthorized Access Attempts An Unauthorized Access Attempt occurs when an outside device tries to access another device connected to your home network. Typically, Unauthorized Access Attempts occur through open port forwards on your connected device. While open ports are needed for certain apps and features to run properly, we recommend reviewing open ports on a regular basis and deleting those which don’t need to be open. If the request is legitimate (e.g., if you’re trying to access your home security camera from a local coffee shop) you can locate the blocked threat in your Threat History and allow access for 30 days. Keep in mind, attackers may try to exploit access to obtain personal data or compromise your device. To prevent others from gaining such access, remember to use strong passwords and change them regularly. Suspicious Site Visit A Suspicious Site Visit occurs when we stop a device that’s connected to your home network from visiting a potentially dangerous site. This site may contain malware, spyware, ransomware, or viruses that can infect devices and make them vulnerable to personal data collection, blackmail, or attacks on other computers and networks. Often, we’ll block just a part of a page from loading (e.g., a banner ad) if there’s only one component that’s deemed to be malicious. If this happens, you’ll still be able to load the rest of the page and may not even realize malicious content was blocked. The Threat History lists all of the blocked Suspicious Site Visits, including the specific site that was blocked, and the reason why it was blocked. If a full page is blocked, and you still want to visit it despite the potential risk, access can be allowed for one hour. To further reduce the risk of infection, we highly recommend installing and running up-to-date antivirus software for devices connected to your network such as laptops, desktops and certain hand-held devices. Suspicious Device Activity Most smart home devices have predictable traffic patterns and sites they contact. Suspicious Device Activity occurs when a device deviates from its normal behavior, like connecting to an IP address that it doesn’t normally interact with. We’ll block this suspicious activity to avoid data theft, but the occurrence itself indicates that the security of the device may have been compromised and corrective action is needed. For this reason, whenever you encounter Suspicious Device Activity, please restart your device and verify that it’s running the latest software. To further protect your devices, we highly recommend using strong passwords and changing them regularly. We also suggest installing and running up-to-date antivirus software for devices connected to your network, such as laptops, desktops and certain handheld devices. Targeted Network Attack A Targeted Network Attack occurs when a device on your network has been infected with a virus or malware and, as a result, has tried to participate in an attack on another network. This type of attack is also known as a Denial of Service attack. We’ll block this type of attack, but the occurrence itself indicates that the security of the device may have been compromised and corrective action is needed. For this reason, whenever you encounter a Targeted Network Attack, please restart your device and verify that it’s running the latest software. To further protect your devices, we highly recommend using strong passwords and changing them regularly. We also suggest installing and running up-to-date antivirus software for devices connected to your network such as laptops, desktops and certain handheld devices. IP Reputation Threats An IP Reputation Threat occurs when a device that we've identified as coming from a known malicious source tries to access a device on your home network. Typically, IP Reputation Threats occur through open ports on a device connected to your home network. The goal of the attack is to gain access to a device, for example to obtain personal information and/or compromise your devices. To keep your network safe, we automatically block access attempts from known malicious sources. While open ports are needed for certain apps and features to run properly, we recommend reviewing open ports on a regular basis and deleting those which don't need to be open. How is Advanced Security different from the Protected Browsing feature in xFi? Protected Browsing is a feature in xFi available to customers who rent a Cisco DPC3939 Gateway.  It prevents you from visiting websites that are known sources of malware, spyware and phishing.  Advanced Security adds even more protection for your devices. At times, it may block an entire website. Other times, it may only block portions of a site, such as banner ads, icons, etc. In addition, Advanced Security also blocks unknown sources from trying to access your connected devices and detects when your connected devices are behaving in unusual ways that could indicate your device has been infected by malicious software. Plus, Advanced Security is always learning so it keeps up with new security threats in real time. How is Advanced Security different from Norton Security Online? Norton Security Online is a security software program that can detect and remove viruses and malware from your PCs, Macs and Android devices. This is available at no additional cost for Xfinity Internet subscribers on up to five devices. Alternatively, xFi Advanced Security protects all your connected devices, including those that can’t run antivirus software (e.g., voice assistants, smart thermostats, smart TVs, security cameras, etc.). While Advanced Security can’t remove malware that may already be on your devices like Norton Security Online can for computers, it does prevent that malware from causing harm. Using both Norton Security Online and xFi Advanced Security together will give you the most protection for all your devices. I received a notification that Advanced Security couldn't be set up. What should I do? First, sign in to xFi and make sure your Gateway is online. You should see "Gateway Online" in the header of the Overview. Then, restart your Gateway to install the latest software. You may need to restart twice for the full install. You can do this from the Overview page. Once your Gateway is online again, sign back in to xFi. Are all of my devices protected by xFi Advanced Security? All devices connected to your Xfinity home network receive protection. However, there may be exceptions that prevent full protection, and we do not guarantee that your devices will be completely harm-free. The following devices are not fully protected: Vivint Smart Drive (formerly referred to as Space Monkey) This device continues to be protected against known threats, such as malicious websites, IP reputation threats and denial of service threats. Due to this device’s configuration, it is not protected against unknown threats such as unauthorized access attempts. How are threats detected with Advanced Security? Whenever a device is connected to your home network, activity information is transmitted through your Gateway. We gather that information, which includes data from packet headers, source and destination addresses, and other metadata for analysis. This traffic flow is constantly being monitored, along with the source and destination of the traffic. This helps us determine any associated risks and, if needed, block potentially malicious actions. We also update the parameters for blocking to reflect newly-discovered known dangers and risks. If no risks or potentially malicious actions are detected, you'll see in the app that there are no threats to report. For your privacy, we don't gather personal information during this analysis, nor is any encrypted traffic analyzed. How can I be notified when a threat is detected? You can receive a push notification from the xFi mobile app for the following threat types: Unauthorized Access Attempts, Suspicious Device Activity and Targeted Network Attacks. From the Xfinity xFi app, select the conversation icon in the upper left-hand corner for the Notification Center. Select the gear icon. Select Push Notifications to manage your notification preferences. To enable Advanced Security notifications, select the checkbox next to  Network Activity . Email and text notifications aren’t available at this time. Keep in mind, you can visit the Xfinity xFi app any time to check the status of all threats. I received a notification that a website I never visited was blocked. What does this mean? In some cases, Advanced Security will allow you to access a site (or application) and will only block part of the page from loading (e.g., a banner ad) that is considered potentially dangerous. In that scenario, you won't see the blocked content while you’re browsing. When part of a page is blocked, you'll still receive a notification informing you the website associated with that content was blocked. How many threats should I expect to see? It's difficult to estimate a typical threat number, since each home is different. It depends on the number and type of devices, as well as different factors like the security mode, port forwards and other settings you have for your home network. However, it’s not uncommon to have no threats for a week and then one to three threats another week. Those who play online games are more likely to encounter more threats, since they are more likely to have open ports on their network. It’s not uncommon to see hundreds of threats weekly if you have open ports. I haven’t had any threats reported. How do I know that Advanced Security is working? Potential threats are dependent upon the number and type of devices connected to your home network, as well as factors like the security mode, port forwards and other settings you have configured. Rest assured, even if you haven't received reports of any threats, your home network is still being protected by Advanced Security. Do all threats require my attention? Threats are split into two main categories: Those that require your attention and those that are for awareness only. While all threats are immediately blocked, there are somewhere we’ll recommend further action to ensure they won’t occur again.  Learn more about threat types . Attention Required These include Suspicious Device Activity, Targeted Network Attacks and Unauthorized Access Attempts, and may result in a device that’s vulnerable due to a virus or other malware. In such cases, we’ll recommend steps to secure your devices and remove any malicious software. You'll have the option to Allow Access for Unauthorized Access Attempts (30 days) if you'd like to override the block. Awareness Only These include Suspicious Site Visits. Consider these warning threats that may provide insight into potentially dangerous activity. You’ll have the option to Allow Access (one hour for sites blocked by Suspicious Site Visits) if you’d like to override the block. If I swap out my xFi Gateway for a new one, or move and transfer my Xfinity Internet service to a new address, will I still be protected by Advanced Security? If you’re activating a compatible xFi Gateway, Advanced Security should automatically be enabled on the new Gateway within 15 minutes after activation. Please note that all previous threat information will be cleared from xFi and xFi Advanced Security. Will Advanced Security work on Disney Circle? Yes. However, since traffic for devices being monitored by Circle routes through the Circle device itself, any threat that Advanced Security blocks for the monitored devices will appear as if it’s happening on the Circle device. Rest assured, threats are still blocked, but if any threats that appear for Circle need attention, you may need to take action on the devices being monitored by Circle and not the Circle device itself. Can I disable Advanced Security? Yes. To disable the Advanced Security feature in xFi, navigate to  More  and select  My Services . Then, select  Disable  under  xFi Advanced Security  and follow the on-screen prompts. Note: By disabling, you’ll lose 24/7 threat monitoring and real-time reporting on your home network. You can re-enable the feature following the same steps and selecting Enable.     Additional Resources Learn more about Getting Started with Xfinity xFi Advanced Security Learn more about using Xfinity xFi Advanced Security Learn more about Xfinity xFi Frequently Asked Questions
View full article
Question   My Comcast Internet services were just installed, how do I find my WiFi network?     Answer   The following instructions are for Xfinity Wireless Gateways only. If you use an approved third-party modem or router for your Internet services, please refer to its user manual.   Your Xfinity Gateway comes with a default WiFi network name and password. If you have never personalized your WiFi network name and password, you can retrieve your default WiFi information on the side or bottom panel of your Gateway:     If you change your password from default settings (strongly recommended), you can access the information several ways: Xfinity My Account Online Xfinity My Account App for Mobile Devices Xfinity xFi X1 TV Box (View Only) Xfinity Wireless Gateway Admin Tool Any time you change a WiFi name or password, you must reconnect all your WiFi-enabled devices by entering the updated network name and password under the device's WiFi settings. **Note**:   Xfinity Gateways provide dual-band (2.4 GHz and 5 GHz) functionality and the ability to broadcast two networks. If you have an xFi Gateway (Arris 1682G, Cisco 3941T, Arris 3482G, Technicolor CGM4140COM, Cisco DPC3939 or Arris X5001), we strongly recommend using the   same network name and password for both bands. Doing so allows the device to optimize network traffic and improve connectivity. Xfinity My Account Online To access your WiFi information via My Account using a web browser your desktop, laptop or mobile device: Log into   My Account If you do not remember your Xfinity username and password, please   reset your password. Click   Settings   on the top of the page. (You can also click   Manage Settings   on the right-hand side or scroll down and select the   Manage Internet   tile.) Click   WiFi Network & Password. Click   Edit. From here you can change your WiFi network's name and password. Xfinity My Account App for Mobile Devices The Xfinity My Account app for mobile devices allows you to manage your Xfinity services and account settings on-the-go. Download for Apple devices Download for Android devices Log into the Xfinity My Account app. Click   Internet   on the bottom navigational menu. Click on the image of the individual Gateway you wish to edit. Click   Show WiFi settings   to view your WiFi information. Click   Change WiFi Settings   to modify these settings. If you have created an xFi account to manage your home WiFi, you will be directed to the   xFi portal.     Xfinity xFi xFi provides Xfinity customers the ability to personalize and control their home WiFi experience. To access and manage your WiFi information: Login at   www.xfinity.com/myxFi   or via the Xfinity xFi app (Download   Apple   /   Android). At the top of the   Overview   page, your WiFi name(s) is displayed. To see your password, touch or click   Show Passwords. To make changes, touch or click   Edit WiFi. Select   Apply Changes   after making any updates. Note:   To access Xfinity xFi, you must be an Xfinity Internet customer with an xFi Gateway. For additional information, please see   our Xfinity xFi Overview. X1 TV Box (View Only) For xFi Users If you have created an xFi account, the X1 TV Box offers perhaps the fastest way to access your WiFi network name and password. Using the X1 Voice Remote, press the microphone button and ask, "What's my WiFi password?" or "What is my WiFi information?" The password(s) and network name(s) will appear on the screen. You can also access your WiFi information via X1 TV Box's menu. Press the   xfinity   button on your remote control and select the   Apps   icon. Scroll down to the   Xfinity   row and then select the   Xfinity xFi app. Select   Show Wifi Password. Note:   You can navigate to the   People   and   Devices   sections to view all the connected devices in your home and pause WiFi access for a specific device or group of devices. For Xfinity Internet Subscribers without xFi Press the   xfinity   button on your remote. Scroll to the right in the menu provided and select the   gear   icon. Scroll down in the menu and select   Help. Scroll to the right and select the   WiFi tile   located under the   Troubleshooting   section. Your WiFi network name(s) and password will be displayed. Xfinity Wireless Gateway Admin Tool While many find that My Account, xFi and X1 are their preferred tools for accessing WiFi information, you may also wish to use the Xfinity Admin Tool if you are a more advanced user. Connect a laptop, computer or mobile device to your home Internet network either by WiFi or an Ethernet cable that is connected directly to your Wireless Gateway. Open a web browser and go to the Admin Tool (http://10.0.0.1). This is the wireless gateway's administration site. The default settings to access the Admin Tool are: Username: admin Password: password (case-sensitive) Click   Login. **Note**:   If you previously changed your Admin Tool password, you will need to use your new login information. If you don't remember your Admin Tool password, you will need to factory reset your Wireless Gateway. On the left navigation menu, select   Gateway, then   Connection   and then   WiFi. Under Private WiFi Network, you'll see the Name (SSID) of your WiFi network. Click Edit. If two network names display, click edit for both 2.4 GHz and 5GHz bands to view each band's settings. Check the box next to   Show Network Password   and the password will be displayed. After making changes, click   Save Settings.   How to Find Your WiFi Information on an Approved Modem and/or Router If you don't have an Xfinity Wireless Gateway but use an approved modem and/or router with your Xfinity Internet service, you can retrieve your WiFi network name and password by consulting your equipment manufacturer's user manual. Visit  MyDeviceInfo  and click on the link specific to your equipment to see more product/technical support information.     Additional Resources Manage Your Home WiFi with xFi Discover how easy it is to personalize and manage family WiFi. Share Your Network and Password information with Friends and Family It's easy to share your WiFi information with your friends and family. Having trouble staying connected to your WiFi network? Check out how to troubleshoot Internet connections. Connect Your Devices For step-by-step instructions, including a brief video, on how to connect different kinds of devices, read about connecting to a WiFi network.   How to View and Change Your WiFi Network Name and WiFi Password Instructions for viewing and changing your WiFi Name and Password for Wireless Gateways.
View full article
Your security is our priority. As an Xfinity Internet customer, you have access to Norton Security Online for free. This protects your computer from viruses, malware and other threats. It’s easy to install and will give you more peace of mind when you’re online.   How to Install on Your PC Computer Before you begin, you might have to  uninstall  any other security software. Having more than one can slow down your computer. Once you’ve checked this, you can get started. Go to the   Norton Security Online page   and click   Get Norton Security Online. Type in your Xfinity ID and password, if you're asked. Create a Norton account, then sign in. Choose whether you want to install it on this device or another one.   Start your installation. Click   Run.   Let the program run.   If Windows asks for permission, click   Yes.   Click   Agree & Install.   Complete the installation. Sign into your Norton account if asked. You're done! Norton Security Online is ready to go!   Installing Norton Security Online on a Mac Uninstall any existing security software from your Mac, including previous versions of Norton. Note:   For specific instructions, visit our   uninstallation page. Go to the   Norton Security Online   page and click   Get Norton Security Online. Enter your Xfinity ID and password if prompted. Norton install will follow. Create or log in to your Norton account. The Norton account lets you manage all of your Norton services and product keys from one location. Click to install locally or install on another device.   Begin local installation process. Open your Mac list of downloads and double-click the install file. Run the installer.   Mac's security warns you when downloading files from the Internet. Click   Open.   Click   Install.   You may be prompted to enter your Mac login information to allow changes.   Mac also requires permission for system extensions on the first install. Click   Open Security Preferences.   Click   Allow. Note:   This screen will only appear on the first installation. If you uninstall or reinstall, this box won't appear. You'll be prompted to   Restart.   Your product will launch after you restart your Mac. Note:   Your Norton product monitors the network activity of your Mac and manages the incoming and outgoing access attempts. The firewall settings contain the rules that specify the access settings for the applications, services, and ports in your Mac. Based on the firewall rules, your Norton product allows or blocks the incoming or outgoing connections that use a particular application, service, or port. By default, the firewall in Norton Security Online will override local firewall settings you may have already set up on your Mac. To revert this, you can visit the   Settings   section of Norton Security Online. For additional Norton firewall settings support for Mac, click  here  or contact  Norton .       Download and Install Norton Mobile Security on Your Mobile Device Norton Mobile Security is part of Norton Security Online, included at no additional charge with Xfinity Internet. Help keep your Android, iPhone and iPad safe with powerful mobile protection from Norton. Registration and Activation Download Norton Mobile Security from the   Norton Security Online page. Click   Get Norton Security Online   to get started. Log in to your Xfinity account with your username and password if prompted. The Norton download and install will follow. Create or log in to your Norton account. The Norton account lets you manage your Norton services and products from one location. Choose the option to   Install on Another Device   and email a download link to yourself if you are not on your mobile device. If you are on your mobile device, select   Install on this Device.   Selecting   Agree & Download   will route you to the appropriate app store. The same will occur if you click the link that you may have sent to yourself over email. Follow the device-specific steps below.   Android Devices Download Norton Mobile Security from Google Play. Click   Install. The app will download, and then click   Open. You will be prompted to agree to terms and conditions.   After successful installation, you will have access to the full range of Android features that Norton Mobile Security offers.   Apple Devices If you sent yourself the link to download, open the email. Click   Download Now   to begin the setup process. You will be directed to the Norton Setup page. Click   Download on the App Store.   Download Norton Security Online from the App Store. Click   Get   and then   Open.   You will be prompted to agree to terms and conditions.   Tap   Get Started.   Sign in with your Norton account credentials.   Installation is now complete! If you currently subscribe to a paid version of Norton Mobile Security and want to take advantage of Norton Mobile Security now included with Xfinity Internet,   follow these steps. For additional information on Norton Mobile Security,   visit our FAQs.       Additional Informaiton: https://www.xfinity.com/support/articles/norton-security-download-install-pc https://www.xfinity.com/support/articles/install-norton-internet-security-mac https://www.xfinity.com/support/articles/norton-mobile-security-install
View full article
Question   Need to turn off the 5gz Wifi network and only run the 2.4gz so I can install my security cameras (Zmodo), how do I do this?   Answer   Your Xfinity Wireless Gateway broadcasts an additional “xfinitywifi” network signal, creating an extension of the Xfinity WiFi network right in your home. We designed this feature for you and this service is completely separate from your secure, private home WiFi network and allows guests to sign in and connect without sharing your secure network password. Your Home Hotspot is included with your service at no additional charge. To learn how to enable or disable your Xfinity WiFi Home Hotspot, please read the instructions below. Notes: Xfinity WiFi hotspots are available at no extra charge if you rent an Xfinity Gateway, including the xFi Advanced Gateway (model numbers TG3482G, CGM4140COM), xFi Gateway (model numbers DPC3939, DPC3941T, TG1682G), and Xfinity Gateway 2 (model numbers Arris TG852G and TG862G, Technicolor TC8305C). Find your Gateway make and model by looking at the UPC seal located on the bottom or back of your device. We encourage you to keep the Xfinity WiFi Home Hotspot feature enabled, as it allows more people to enjoy the benefits of Xfinity WiFi.     Enable or Disable the Xfinity WiFi Home Hotspot Feature in My Account Go to   https://customer.xfinity.com/#/settings/security/hotspot. Sign in to your account using your Xfinity username and password. Click   Turn Off   or   Turn On   to disable or enable your public hotspot. (Note:   Your default hotspot status is enabled.) Confirm your selection. A confirmation message will appear.   **Note**:   If you are presented with information about Xfinity WiFi but do not see the option to   Turn On   or   Turn Off, you have a device that is not eligible for the feature and is not broadcasting a public hotspot signal. To learn more about the home hotspot feature, to find a hotspot near you, or to download the Xfinity WiFi Hotspots app, visit   xfinity.com/wifi.     Hiding or Disabling Your In-Home WiFi Network in the Local Admin Tool Begin by connecting to your WiFi network and accessing 10.0.0.1 from a web browser. Navigate to   Gateway > Connection > Wi-Fi, where you will see your private WiFi network name(s) displayed.   If you would like to hide your WiFi network from broadcasting (this will prevent your WiFi name from being visible in a list of networks), uncheck the   Enabled   box in the   Broadcast Network Name (SSID)   field at the bottom of the page. If you would like to disable the radio that transmits your WiFi network's signal (this will disable your WiFi), select   Disable   in the   Wireless Network   field. To complete either change, click   Save Settings   at the bottom of the page.   To complete either change, click   SAVE SETTINGS   at the bottom of the page.     Hiding Your In-Home WiFi Network in Xfinity xFi Visit   www.xfinity.com/myxFi   or open the Xfinity xFi app and sign in with your Xfinity username and password. Navigate to the   Network   section, where you will see your WiFi name(s) displayed at the top of the page.   If you would like to hide your WiFi network from broadcasting, select   Edit   next to your   WiFi   name. A new dialog window will appear. Uncheck   Broadcast WiFi Name   and select   Apply Changes   at the bottom of the dialog window. ​ **Note**:   You cannot disable your WiFi network in Xfinity xFi.     Learn More Read more about turning your Xfinity WiFi Hotspot On or Off. Read more about hiding or disabling your in-home WiFi Network. Read about the most common   Xfinity WiFi Home Hotspot questions. See   Xfinity WiFi Home Hotspots   to learn more about the nation's largest and fastest WiFi network.
View full article
To better protect email and Xfinity credentials from being compromised, customers who use a third party email application (Outlook, Apple Mail, Thunderbird, etc.) through a POP connection are now required to use a secure mail server and can no longer utilize POP Port 110. While POP will still be supported, customers should ensure that their email application is set up through the secure Port 995. If your application is configured through Port 110, you’ll need to make a few updates to continue to use your Xfinity email. Please locate your email application below for instructions on changing your port settings.       Updating Third Party Email Application POP Port Settings Outlook 2007, 2010, 2013 or 2016 Open Outlook. Click the   File   menu (Outlook 2010, 2013 or 2016) or   the Tools menu (Outlook 2007). Click the   Account Settings   button. Select your Xfinity email address and click   Change. Verify that the account type says   POP. If the account type says   IMAP, no changes are needed. Click   More Settings   in the lower right. Click the   Advanced   tab. Change the   Incoming Server   to   995. Ensure that   SSL   is selected or checked as the encrypted connection. Click   OK   to save your settings.     Mac (Apple) Mail Open Mac Mail. Click the   Mail   menu. Click   Preferences. Click   Accounts. Select your Xfinity email address. Verify that the account type says   POP. If the account type says   IMAP, no changes are needed. Click the   Advanced   button to the right. Change the   Incoming Server   to   995. Ensure that   SSL   is selected or checked as the encrypted connection. Windows 10 Open Windows 10. Select the   cog   icon in the bottom left-hand corner, then select   Manage Accounts   from the right sidebar. Select your email account from the list. Select the   Change mailbox sync settings   option at the bottom of the page. Scroll down, then select   Advanced mailbox settings. Verify that the account type says   POP. If the account type says   IMAP, no changes are needed. Change the   Incoming Server   to   995. Ensure that   SSL   is selected or checked as the encrypted connection. Select   Done   and   Save.      Outlook Express Open Outlook Express. Click   Tools. Click   Accounts. Select your Xfinity email address, then click   Properties. Click   Servers. Verify that the account type says   POP3. If the account type says   IMAP, no changes are needed. Click the   Advanced   tab. Change the   Incoming Server   to   995. Ensure that   SSL   is selected or checked as the encrypted connection. Click   OK   to save your settings.       Windows Live Mail Open Windows Live Mail. Right-click on the account at left, then click   Properties. In the   Properties   window, click on the   Servers   tab to verify that the incoming mail server type is set to   POP. If the account type says   IMAP, no changes are needed. Click the   Advanced   tab. Change the   Incoming Server   to   995. Ensure that   SSL   is selected or checked as the encrypted connection. Click   OK   to save your settings.       Thunderbird Open Thunderbird. Click   Tools. Click   View settings for this account. Click   Server Settings. Verify that the server type says   POP. If the server type says   IMAP, no changes are needed. Change the port to   995. Ensure   SSL/TLS   is selected under   Connection Security. Click   OK.     Other Port settings can generally be found in your email application's   Account Settings,   Properties   or   Preferences   section. If your email application is not listed above, please consult your email application developer for instructions on changing your POP account settings.   Frequently Asked Questions Why is access to email through Port 110 being blocked? We are blocking this port because it is not encrypted and may leave your email account information vulnerable to being compromised. No accounts have been compromised; however, this change will help to provide you and your personal information with the best level of protection possible. Can I still access my email through POP? Yes. Port 995 with SSL is secure and is the recommended port for POP. You can update your Incoming Mail Server Port to 995 with SSL to continue to receive mail without any change to your experience. Will changing the email settings affect how I receive emails or manage my mailbox? We recommend that you switch from POP Port 110 to Port 995, which will not affect how you receive emails or manage your mailbox. If you wish to change from POP to IMAP, please move any emails or folders that you wish to save into your new IMAP account  before   deleting the POP account to prevent any impact to your experience. Please see  Switching from POP to IMAP  for additional details. What will happen if I do not update my port settings? After access to the port is blocked, you will receive an error message in your third-party email application when attempting to access your Xfinity email. You will continue to be able to access your email through Xfinity Connect webmail, the Xfinity Connect app or any email application without any impact. When do I need to make these updates? Please update your settings prior to December 2018 to ensure that you can continue using email with your third-party email application after Port 110 is blocked. If you update your settings after port access has been blocked, any email received while blocked will appear in your inbox once you have updated your port settings.       Learn more about updating your Xfinity Email POP Port Settings
View full article
10 Tips to help fix your Xfinity Internet connection
View full article
 Xfinity Internet customers can receive a special discount on LifeLock memberships. Xfinity Internet customers can sign up for a membership to LifeLock at a special discounted price through   internetsecurity.xfinity.com   Frequently Asked Questions:   What is identity theft? Identity theft can impact more than just your credit cards. Identity theft occurs when your personal information is stolen in order to take over or open new accounts, file fake tax returns, rent or buy properties or do other criminal activities in your name - for their gain and your loss. What is LifeLock? LifeLock is a leading provider of comprehensive identity theft protection. How does LifeLock work? LifeLock helps protect your identity with three layers of protection: Detect & Alert   - LifeLock helps detect a wide range of threats and will alert you by phone 2 , email and text if they find potentially suspicious activity. 1 Restore   - If you become a victim of identity theft while you're a LifeLock member, LifeLock's dedicated Identity Restoration Specialist will work with you from start to finish to help fix the issue. Reimburse   - If you're a victim of identity theft, LifeLock helps protect you with their Million Dollar Protection™ Package 3 , including reimbursement for stolen funds - based on the limits of your plan. What is the advantage of signing up for LifeLock through Xfinity? Xfinity Internet customers can receive a special discount on a LifeLock membership. Visit  internetsecurity.xfinity.com  to learn more about LifeLock and take advantage of the special discount. Why should I choose LifeLock? Obviously, no one can prevent identity theft or monitor all transactions at every business, but LifeLock has been providing identity protection services since 2005. They use unique data and patented technology to provide identity threat detection, identity alerts 1  and restoration services. Doesn't my bank already protect my accounts? Keep in mind that identity theft can be more than your existing accounts. Identity theft is when your personal information is stolen and used to commit crimes, file fake tax returns, get medical procedures, open new accounts, buy or rent properties and more in your name. If you are a victim of identity theft while a LifeLock member, you'll have an Identity Restoration Specialist on your side. I'm an existing LifeLock member and Xfinity Internet customer. How can I take advantage of the special LifeLock discount for Xfinity Internet customers? If you’re an existing LifeLock member and an Xfinity Internet customer, you can call 1-855-993-1862 and request that the promo code  XFINITYXFR   be added to your LifeLock account. LifeLock Disclaimers: No one can prevent all identity theft. LifeLock does not monitor all transactions at all businesses. Phone alerts made during normal local business hours. Reimbursement and Expense Compensation, each with limits of up to $25,000 for Standard, up to $100,000 for Advantage and up to $1 million for Ultimate Plus. And up to $1 million for coverage for lawyers and experts if needed, for all plans. Benefits provided by Master Policy issued by United Specialty Insurance Company (State National Insurance Company, Inc. for NY State members). Policy terms, conditions and exclusions at: LifeLock.com/legal. Please note that Comcast does not provide support for LifeLock services. If you have questions, need assistance or have to make a change regarding your LifeLock membership, please call LifeLock Customer Support at  1-855-993-1862  or visit  lifelock.com .     Additional Resources: https://www.xfinity.com/support/articles/lifelock-identity-left-protection-faqs https://internetsecurity.xfinity.com/ https://www.lifelock.com/lp/pt/xfinity/
View full article
Tips for troubleshooting your Xfinity Gigabit Internet Speed
View full article
***Created by our   Community Users***   I am sure that people will run into this.  On the canon image CLASS MF8300C also known as mf8380cdw, it took me some time to figure out how to get scan to email working.  Summary is to change the SMTP port to 587 and use your smtp auth set to your Comcast login.  The default port 25 won't work and port 465 won't work.   Here is how:   configure the management name/pin. login as management to the the web UI browser, http://printer-ip/ change the SMTP TX port to 587, find it at System Settings -> Network Settings -> TCP/IP Settings -> Port Number Settings Enter the info in E-Mails Settings System Settings -> Network Settings -> E-Mail Setting SMTP Server Addess: smtp.comcast.net E-Mail Address: your@address Check Use SMTP Auth Enter your username: your@comcast.net Check Set/Change Password Password: Your password.      5. Instruction says to power cycle for the new settings, do it.   Good Luck!
View full article