New
#1
Audit failure alerts -- what to do
(not sure if this is the correct sub-forum -- if not, please point me to a better one).
I am getting consistent frequent messages in my event viewer about
The Windows Filtering Platform has blocked a connection.
Further down, it says "audit failure".
The current set of messages is from ap name = system, inbound, source address 224.0.0.1 to destination address of 192.168.1.1 (which is my Verizon router).
My questions are:
1. is this an indication of some sort of problem?
2. how do I stop the message from flooding my event log (currently occuring about every 9 minutes).