lsass.exe???

Discussion in 'other security issues & news' started by PhiloVance, Jun 11, 2003.

Thread Status:
Not open for further replies.
  1. PhiloVance

    PhiloVance Registered Member

    Joined:
    Jan 12, 2003
    Posts:
    93
    Location:
    Bakersfield, CA
    Need I worry about this?

    http://members.cox.net/~philosopher_king/comcast_connection.jpg

    And just what is 'lsass.exe' anyway?
     
  2. Dan Perez

    Dan Perez Retired Moderator

    Joined:
    May 18, 2003
    Posts:
    1,495
    Location:
    Sunny San Diego
    Hey Philovance,

    lsass.exe is the main component of the security subsystem for NT/2k/XP. UDP 500 inbound indicates that someone is scanning for or trying to negotiate IPSec authentication. You should not allow the outside world in on that port.

    HTH,

    Dan
     
  3. Pieter_Arntz

    Pieter_Arntz Spyware Veteran

    Joined:
    Apr 27, 2002
    Posts:
    13,332
    Location:
    Netherlands
    lsass.exe:
    Windows NT4/2000/XP only.  LSASS is the Local Security Authentication Server.  It verifies the validity of user logons to your PC/Server (in technical jargon :  it generates the process that is responsible for authenticating users for the Winlogon service).
    Recommendation : 
    An integral part of the operating system, leave alone.

    HTH,

    Pieter
     
  4. PhiloVance

    PhiloVance Registered Member

    Joined:
    Jan 12, 2003
    Posts:
    93
    Location:
    Bakersfield, CA
    Thanks, I denied access.

    I'm such a rookie at this stuff.
     
Thread Status:
Not open for further replies.