Endpoint Protection

 View Only

  • 1.  SvcHost.exe - blocked by SEP

    Posted Jan 13, 2015 10:22 AM

    For approximately the last 3 monthe I have been getting the following notification from Symantec Endpoint Protection :

    "Traffic has been blocked from this application (svchost.exe)"

    I am a "nubby" when it comes to sorting out issues as the symantec software normally looks after incursions to my systems.  What is happening here?  Is my network and systems under seige from an outside entity?  What can I do to understand what is happening and how can I deal with this notification.  it 's frequency of occurence is increasing.

     

    Thanks 



  • 2.  RE: SvcHost.exe - blocked by SEP

    Posted Jan 13, 2015 10:32 AM

    This is coming from the firewall. You need to check your traffic log to see what port/protocol/application is being blocked.

    This is the usual article on it, which points to IPv6 being blocked:

    Traffic has been block for application host process for windows services svchost.exe



  • 3.  RE: SvcHost.exe - blocked by SEP