This is the IPS notification. It's more than likely a legit process.
I assume you have an unmanaged client?
Would need to see the Traffic log but one of the rules is causing this, perhaps due to IPv6.
There are only a few options to deal with this.
1. Allow the specific traffic ( would need to see traffic log to see exactly what it is)
2. Disable the rule (not recommended)
3. Turn off the notification (you won't see these alerts but you may miss something else)
4. Allow svchost (not recommended as malware can hide within this process)