Barracuda Networks VERSION SP4 manual 10Applications required in Microsoft Windows domains

•Click Generate to create an MD5 Hash in order to clearly identify the selected file as soon as it is executed.

MD5 Hash creation is recommended in order to avoid corrupt file and a vulnerable PC after an attack.

Consider that when an application equipped with an MD5 Hash is used on multiple clients, file versions must match exactly. The application object will otherwise not be applicable.

To delete the hash, click Clear.

In addition to the application, first level DLLs are taken into consideration. This provides additional security. However, DLLs that are used by first level DLLs are not monitored.

The following application objects, which are required in Microsoft Windows domains, are available in the Barracuda NG Personal Firewall by default:

Table 9–10Applications required in Microsoft Windows domains

Application	Connection	Description
System	O / I	Services needed by the OS kernel
TCP/IP Ping Command	O / I
lsass.exe	O	Local Security Authority Service; process responsible for management of local security authority domain
		authentication and Active Directory management.
services.exe	O	Upon startup, services.exe enumerates through all registry sub-keys located in
		HKEY_LOCAL_MACHINE\Services registry key.
spoolsv.exe	O	The Windows Printer Spooler stores printer jobs and forwards them to the printer when it is ready.
userinit.exe	O	By default, WinLogon executes this application that triggers logon scripts, re-establishes network
		connections,…
winlogon.exe	O	This application manages security-related user interactions in Windows NT. It handles logon and logoff
		requests, changing the password,…
svchost.exe	O	This is a generic host process name for services that are run from dynamic-link libraries (DLLs). There can
		be multiple instances of svchost.exe running at the same time.

116 Barracuda NG Personal Firewall