ZoneAlarm firewall and LSA Shell lsass.exe. pls help

Jul 15, 2008 2 Replies

zonealarm firewall shows LSA Shell (Export version) wants to accept connection from the internet.



Application lsass.exe Source IP: 119.40.177.18 Port 500


can somebody pls expaling why lsass.exe wants to accept connections from the internet


That's for IPSec key exchange. If you don't use IPSec, you can set the PolicyAgent service to "disabled". Not providing services you don't want to be used is the best way to prevent them from being attacked anyway. No need to install crap like ZoneAlarm for that.

On Windows 2000 or XP you can use win32sec [1] or ntsvcfg [2] to disable services users normally don't need.

[1]
formatting link
formatting link
cu 59cobalt

to receive further instructions or data from whomever 'owns' you

Join the Discussion

Have something to add? Share your thoughts — no account required.

Didn't find your answer?

Ask the community — no account required