Windows 7 Forums
Welcome to Windows 7 Forums. Our forum is dedicated to helping you find support and solutions for any problems regarding your Windows 7 PC be it Dell, HP, Acer, Asus or a custom build. We also provide an extensive Windows 7 tutorial section that covers a wide range of tips and tricks.


Windows 7: Audit failure alerts -- what to do

19 Jan 2018   #1
dale5351

Microsoft Windows 7 Professional 64-bit 7601 Multiprocessor Free Service Pack 1
 
 
Audit failure alerts -- what to do

(not sure if this is the correct sub-forum -- if not, please point me to a better one).

I am getting consistent frequent messages in my event viewer about
The Windows Filtering Platform has blocked a connection.
Further down, it says "audit failure".
The current set of messages is from ap name = system, inbound, source address 224.0.0.1 to destination address of 192.168.1.1 (which is my Verizon router).

My questions are:
1. is this an indication of some sort of problem?
2. how do I stop the message from flooding my event log (currently occuring about every 9 minutes).


My System SpecsSystem Spec
.
19 Jan 2018   #2
torchwood

W7 home premium 32bit/W7HP 64bit/w10 tp insider ring
 
 

Hi Dale,

It would depend on whether your Firewall is part of your AV suite, or the standard MS built-in.

What is the event ID 5152/5157?


Roy
My System SpecsSystem Spec
20 Jan 2018   #3
dale5351

Microsoft Windows 7 Professional 64-bit 7601 Multiprocessor Free Service Pack 1
 
 

My firewall is standard Win firewall, virus suite is Avast free. The event ID is 5157.
My System SpecsSystem Spec
.

21 Jan 2018   #4
torchwood

W7 home premium 32bit/W7HP 64bit/w10 tp insider ring
 
 

Hi Dale,

heres a definition of the 224 0 0 1

A multicast address is a single IP data packet set that represents a network host group. Multicast addresses are available to process datagrams or frames intended to be multicast

in laymans terms - im, or trying, talking to another piece of equipement on your network
SO ITS ALL INTERNAL
nothing to worry about:)
note,
equipement can also mean a program that has been removed, including AV's, but not all the associated interactions have been.

Roy
My System SpecsSystem Spec
Reply

 Audit failure alerts -- what to do




Thread Tools




Similar help and support threads
Thread Forum
Windows Logs - Security - Audit Failure on Start Up
I'm consistently getting four Audit Failure events indicated in the Windows Logs - Security immediately after start. Task Category: System Integrity. Screen shot are indicated below. Is this a serious indication of a problem? How do I troubleshoot and repair? SFC reports no integrity...
Performance & Maintenance
Windows Logs - Security - Audit Failure on Start Up
I'm consistently getting four Audit Failure events indicated in the Windows Logs - Security immediately after start. Task Category: System Integrity. Screen shot are indicated below. Is this a serious indication of a problem? How do I troubleshoot and repair? SFC reports no integrity...
General Discussion
Need a free PC audit software
Hi, Can anyone advice a free PC auditing software. Thanks
Software
Audit Folder Changes
My network uses a shared drive, in which everyone has a folder to place working files for their projects. These are not private folders, as multiple people might be working on the same project, so everyone is in and out of everyone else's folder all day. Lately I've noticed an escalation of a...
Network & Sharing
audit mode new install
I have an ssd and a mechanical drive in my laptop so Im trying to install OS on the ssd and user files on other drive. I found the info how to do it on this site. Run the windows seven install and when I come to a screen that asks for user name and computer name Im suppose to press Ctrl & Shift &...
General Discussion


Our Sites

Site Links

About Us

Find Us

Windows 7 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 7" and related materials are trademarks of Microsoft Corp.

Designer Media Ltd

All times are GMT -5. The time now is 14:47.
Twitter Facebook Google+