lsass.exe???

Discussion in 'other security issues & news' started by PhiloVance, Jun 11, 2003.

Thread Status:
Not open for further replies.
  1. PhiloVance

    PhiloVance Registered Member

    Joined:
    Jan 12, 2003
    Posts:
    93
    Location:
    Bakersfield, CA
    Need I worry about this?

    http://members.cox.net/~philosopher_king/comcast_connection.jpg

    And just what is 'lsass.exe' anyway?
     
    PhiloVance, Jun 11, 2003
    #1
  2. Dan Perez

    Dan Perez Retired Moderator

    Joined:
    May 18, 2003
    Posts:
    1,495
    Location:
    Sunny San Diego
    Hey Philovance,

    lsass.exe is the main component of the security subsystem for NT/2k/XP. UDP 500 inbound indicates that someone is scanning for or trying to negotiate IPSec authentication. You should not allow the outside world in on that port.

    HTH,

    Dan
     
    Dan Perez, Jun 11, 2003
    #2
  3. Pieter_Arntz

    Pieter_Arntz Spyware Veteran

    Joined:
    Apr 27, 2002
    Posts:
    13,491
    Location:
    Netherlands
    lsass.exe:
    Windows NT4/2000/XP only.  LSASS is the Local Security Authentication Server.  It verifies the validity of user logons to your PC/Server (in technical jargon :  it generates the process that is responsible for authenticating users for the Winlogon service).
    Recommendation : 
    An integral part of the operating system, leave alone.

    HTH,

    Pieter
     
    Pieter_Arntz, Jun 11, 2003
    #3
  4. PhiloVance

    PhiloVance Registered Member

    Joined:
    Jan 12, 2003
    Posts:
    93
    Location:
    Bakersfield, CA
    Thanks, I denied access.

    I'm such a rookie at this stuff.
     
    PhiloVance, Jun 11, 2003
    #4
Thread Status:
Not open for further replies.
  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.
    Accept Learn More...