LSASS blocked : is it normal ?

Discussion in 'other security issues & news' started by Yinda, Jan 30, 2003.

Thread Status:
Not open for further replies.
  1. Yinda

    Yinda Registered Member

    Joined:
    Nov 17, 2002
    Posts:
    78
    Hi,

    I have just found that LSASS is an application blocked by Outpost.

    Since this is an authentification process, it that normal? Why is Outpost concerned ? Maybe LSASS tried to access Internet and I blocked it ?

    Thanks

    Yinda
     
  2. root

    root Registered Member

    Joined:
    Feb 19, 2002
    Posts:
    1,723
    Location:
    Missouri, USA
    LSASS does not need to access the net.
    It should be blocked, however it got there.
    Since you have Win2K, The only service that needs allowed is service.exe, and it should be allowed out to remote port 53(DNS) to your ISPs DNS servers. You may have to also allow DHCP out to your ISP. That's it.
    The rest just should be programs, email, updaters, like that.
     
Loading...
Thread Status:
Not open for further replies.