Technology, Support, and News Forum

[augie]

I checked this out with process viewer. All files were in Windows/ System32 on the boot drive. Child to parent is as follows per Process Explorer: lsass/ winlogon/ smss /system. Everything looks fine except for where this wants to go. The only Chinese program that I use is Maxthon browser and it shouldn't be asking for access on port 500. I've run virus and spyware scans and they came up clean.

[smebobo Profile]

Hi there,

Most likely you have no real need to be concerned.. LSASS is used for some parts of authentication during logon, namely the IKE of IPSec. This will include if you have your machine configured to log into a VPN using IPSec instead of PPP, or if you have any active IPSec policies applied to your machine. If you disable the use of IPSec on your network the LSASS udp requests to port 500 go away, But it isn't harming anything..

Hope this helps,
Sean