Hi all ! I've recently noticed that LSASS.EXE is trying to connect to a server that I traced back to a university. I'm using Sygate PFW and I am disallowing the connection. The 500 or so hits have been on ports 8 up to 61000, in about an 1 hour period. The IP is 64.200.105.51 (media.mediaxtranet.net.) When I type in the URL, WinMedia Player wants to connect. Anybody have any ideas ! I've researched the LSASS.exe quite a bit. Is it safe to deny this access to the internet permanently ! I couldn't find any definite or clear answers on this issue !! ty, bill
Do not forget that it is used for... LSASS.EXE Svcs: Netlogon,NtLmSsp,PolicyAgent,SamSs More info here http://www.dslreports.com/forum/remark,4156168~root=security,1~mode=flat
thanks...mynethingyman. That link gave the FIRST yes or no answer to lsass.exe connecting to the internet. But I'm still concerned about the number of attempts to connect and the high range of ports. LSASS.EXE is now permanently blocked !! thanks, bill
