Follow this document

Traffic has been blocked for the application host process for Windows Services Svchost.exe

http://www.symantec.com/business/support/index?pag...

can you post the screen shot?

http://postimage.org/image/vfvb3fm17/full/

Thanks

after looking into the image, you need to follow the above link shared by Rafeeq

OK, I will, though if you have the time I would appreciate an explanation -- a) how come I've never had the pop-up in the past? and b) The blocked service (svchost) which I'm getting the pop up for is UDP not TCP...

can you check the policy for the group the client reports to and let us know if the notification is enabled for the alerts?

I'm sorry - you've lost me. I'm assuming you're not refering to gpedit.msc -- is the notification policy your referring to available in Symantec Endpoint Protection v.11? (as opposed to the Endpoint Manager.)

The only notification options I see are "Display Intrusion Detection notifications" (checked) and its sub-options (sound, length of time to display).

i was referring to SEP firewall policy configured on SEPM.

can you post ther screen shot of the pop up message.

OK, yeah, this is an unmanaged version of SEP

http://postimage.org/image/r14ef4dxf/

Thanks for your time.

Ah, I see - Teredo

HI,

Just to test, Could you try uninstalling the NTP protection from the Add /Remove Programs, restart the machine and check if that resolves the issue?

I haven't gotten the message since I unchecked "Block IPv6 over IPv4 (Teredo) Remote UDP port 3544" so I think that fixed it actually :)