Click – Barracuda Networks VERSION SP4 User Manual
Page 118
116 Barracuda NG Personal Firewall
•
Click
Generate
to create an
MD5 Hash
in order to clearly identify the selected file
as soon as it is executed.
The following application objects, which are required in Microsoft Windows domains, are available in
the Barracuda NG Personal Firewall by default:
MD5 Hash creation is recommended in order to avoid corrupt file and a vulnerable PC after an attack.
Consider that when an application equipped with an MD5 Hash is used on multiple clients, file versions must match
exactly. The application object will otherwise not be applicable.
To delete the hash, click
Clear
.
In addition to the application, first level DLLs are taken into consideration. This provides additional security. However,
DLLs that are used by first level DLLs are not monitored.
Table 9–10
Applications required in Microsoft Windows domains
Application
Connection Description
System
O / I
Services needed by the OS kernel
TCP/IP Ping Command
O / I
lsass.exe
O
Local Security Authority Service; process responsible for management of local security authority domain
authentication and Active Directory management.
services.exe
O
Upon startup, services.exe enumerates through all registry sub-keys located in
HKEY_LOCAL_MACHINE\Services
registry key.
spoolsv.exe
O
The Windows Printer Spooler stores printer jobs and forwards them to the printer when it is ready.
userinit.exe
O
By default, WinLogon executes this application that triggers logon scripts, re-establishes network
connections, …
winlogon.exe
O
This application manages security-related user interactions in Windows NT. It handles logon and logoff
requests, changing the password, …
svchost.exe
O
This is a generic host process name for services that are run from dynamic-link libraries (DLLs). There can
be multiple instances of svchost.exe running at the same time.