One of my users is getting the following error in the form of a task-tray popup:
Symantec Endpoint Protection
The client will block traffice from IP address 192.168.201.122 for the next 600 seconds (from..<timerange>)
She recently upgraded to Windows 10, but was receiving these errors in Windows 7 too. Most if not all of the traffic for this IP address that is blocked is Incoming from UDP port 5355 and going to high-numbered ports such as 59074, 60517, 59687, etc. The traffic origin seems to fluxuate between different internal workstations.Looking into this, it appears to be LLMNR or appple's bonjour.
I'm not sure why this one wroksation is getting this popup triggered while other workstations are not. I've check the workstation for viruses and such,but can't find anything. Any idea why this s happening and how to prevent it?
Thanks,
Jef