PDA

View Full Version : lsass.exe???


PhiloVance
June 11th, 2003, 02:28 AM
Need I worry about this?

http://members.cox.net/~philosopher_king/comcast_connection.jpg

And just what is 'lsass.exe' anyway?

Dan Perez
June 11th, 2003, 02:42 AM
Hey Philovance,

lsass.exe is the main component of the security subsystem for NT/2k/XP. UDP 500 inbound indicates that someone is scanning for or trying to negotiate IPSec authentication. You should not allow the outside world in on that port.

HTH,

Dan

Pieter_Arntz
June 11th, 2003, 02:42 AM
lsass.exe:
Windows NT4/2000/XP only.* LSASS is the Local Security Authentication Server.* It verifies the validity of user logons to your PC/Server (in technical jargon*:* it generates the process that is responsible for authenticating users for the Winlogon service).
Recommendation*:*
An integral part of the operating system, leave alone.

HTH,

Pieter

PhiloVance
June 11th, 2003, 02:48 AM
Thanks, I denied access.

I'm such a rookie at this stuff.