Allow or Block LSA Shell??

Struggling to get to grips with configuring a firewall, was asked to allow or block LSA Shell (Export version) System32/LSASS.EXE.
As I wasn't sure what to do, I blocked it. Was that right please?
Thanks,
ruby

 

Good call...

 

Ok thanks, but I've got to ask why......

 

Didn’t u block it? And it is unnecessary to have Internet access, unless you know why not to block it?

 

Didn’t u block it? Yes I did And it is unnecessary to have Internet access, unless you know why not to block it? No, I don't know why not block it. I was wondering why I had made a good call, seems odd if it's not required yet tried to access.

 

If you are seeing lsass.exe making a network connection it is likely a result of having the IPSec Service enabled. If you are not using this service you can block it or disable the service and you should not see the network connection/prompts.

Regards,

CrazyM

 

Thanks CrazyM, spot on,
ruby