There has been alot of talk around the consistant problem with SEP11's firewall blocking NT kernal and other applications that do not need to be blocked. The result is that the firewall consistantly displays system tray nitifications. It has been disturbing and annoying to many SEP users. I have check all the posts that address this issue and have come up with no soloution. Well lets all close this case because the solution is very simple and it will not harm your endpoint in any way or even violate your firewall policies.
SOLUTION:
1. Open SEP 11 Console.
2. Open "Configure Settings" Tab.
3. Open "Intrusion Prevention" tab on top.
4. Disable Intrusion Prevention notifications and click ok.
This will fix your issue.