Endpoint Protection

Evening,

This message is playing on my nerves... I updated my desktop from 11 to 12 version of SEP. after that the message is popping up every 15 minutes:

"traffic has been blocked from this application svchost.exe"

so what is normal solution of that?

Is this on an unmanaged client? What OS?

You can check the traffic log but it could be because of IPv6, see this:

Traffic has been blocked for the application host process for Windows Services Svchost.exe

You're options are limited if unmanaged

• Allow the traffic
• Uncheck the notification
• Turn off IPv6

See what rule is blocking the traffic.

If the rule that is blocking the traffic is "Block UPnP Discovery from external computers", then is is blcoking a network discovery traffic from a computer that is not in the local private network IP range.

To know what each default firewall policy does, check the xls in the following article.

http://www.symantec.com/docs/TECH180569

Hi

Please refer the link below

http://www.symantec.com/business/support/index?page=content&id=TECH165942&actp=search&viewlocale=en_US&searchid=1379647655654

Regards

hi summer,

this doesnot helps. IPv6 is unchecked in my case but still continues to throw popup window

Check Brian comments on this thread

https://www-secure.symantec.com/connect/forums/constant-notification-traffic-has-been-blocked-application-svchostexe

thanks for help