Can anyone help me with this problem, Symantec is blocking traffic from svchost.exe?

Question

I'm running symantec endpoint protection and I've recently been getting constant notifications that "Traffic has been blocked from this application; host process for windows services (svchost.exe)" Any help would be greatly appreciated. Thanks!

Answer 1

As things currently stand, the default FW policies do not allow all possible traffic that people may want to allow.  They are a guideline and are meant to be tweaked and customized to your unique environment.



What you need to do is create your own rules to allow the traffic and services you need and order them in the rule set to be above the block all else rule, then you can re-enable that rule.