Microsoft Windows Security Auditing

Dear Support,

I'm getting below error on event viewer, this is related to my web server which is integrated with Active Directory.

The Windows Filtering Platform has blocked a connection.

Application Information:

Process ID: 496

Application Name: \device\harddiskvolume2\windows\system32\lsass.exe

Network Information:

Direction: Outbound

Source Address: Webserver

Source Port: 58298

Destination Address: Domain Controller.

Destination Port: 49159

Protocol: 6

Regards,

Ha

March 21st, 2015 10:08am

Hi,

Please check if the Windows Firewall is disabled. In general, if you disable Windows Firewall service, but the Base Filtering Engine service is still running, BFE service will use a Base Filtering list to block some traffic connection and stopping the Windows Firewall service will put you in block mode.
I recommended you to start Windows Firewall service and set the startup type to Automatic to see if the issue persists.
Best regards,

Susie

Free Windows Admin Tool Kit Click here and download it now
March 23rd, 2015 3:26am

This topic is archived. No further replies will be accepted.

Other recent topics Other recent topics