Firewall Rules created for lsass

Norton Security | Norton Internet Security
21

Final question?

 

 

so is there any ation I need to take?

22

Meant to say

"what, if any actions, do I need to take?"

 

My guess is that I just need to leave it alone and stop worrying about nonesense

:smileywink:

 

So bottom line- nothing about this, with all the information I have provided, It would it appear that my lsass.exe authentication functioning should be working? And that these "block" messages would NOT indicate that lsass.exe functioning has been halted?

 

By the way, I mentioned about the UNCHECKING "trust local network" in the Norton setting, becausae it seems right after I did that (about 9 months ago), I started noticing these "block communications" entries in the alert part of the Internet Worm Protection activity log. That is why it made me wonder if it was related.

 

 

23

NAV hasn't told you that you need to do anything. There's nothing in this that indicates that any immediate action is required either.

24

Thanks Reese

I now fully understand from an internet security/NAV perspective that the message in my log about "block" and local network adapters, has nothing to do aith any major internet security concern and that there is nothing I need to do further.

The only part that still has me stumped is

does any of this (the block all local network adapters)mean that lsass.exe was not allowed to check for authentication?

If lsass.exe was not functioning, would I still be able to log on to my computer? To switch user profiles and to input the admin pass code?

 

I see that lsass.exe is running in my task manager and in my current running programs

 

My only remaining question is does it appear that lsass.exe still functions despite the block message?

 

25

First you should understand what lsass.exe does -- http://en.wikipedia.org/wiki/Lsass.exe .

 

The block was for listening for inbound connections. lsass.exe doesn't check for authenication, it enforces policy based upon your machine's settings. lsass.exe was never not functional but if it were broken, you would have difficulty logging into your computer.

26

Thanks Reese and all the others who have helped me

 

I feel much more relieved about all this.

 

Thanks again. And I'll try not to look at the logs