Windows 10: Funny Firewall Logs from fontdrvhost.exe

Hello, in our company firewall logs we can see fontdrvhost.exe trying to make outside requests. Some of them the destination IP is 169.x but others are trying to connect externally. I spot checked a few of the destination IP's and it seems to be trying to reach Amazon and Microsoft. I have a basic understanding of what the fontdrvhost.exe does and what it is used for but do not know why it would have a need to connect to an external IP address. What also strikes us as odd is we see most if not all of the activity on our Citrix virtual desktops. Wondering if maybe someone could help me makes sense of why it might be doing this.


Windows 10 LTSC v1809


Thank you!


Steve

:)

 

Good Antivirus + Firewall

I would never put anything Norton on my computer.

Nod32 is arguably the best antivirus. AVG is likely not as good, but it's free and at least pretty good.

Firewalls, I'd put Comodo and whatever "Tiny Personal Firewall" is named nowadays on your short list. I think Kerio might have sold it now and it's named something else. Otherwise, just put Comodo on your short list. I think the current version's ease of use has taken a step backwards, seems a bit counter-intuitive when trying to do certain things with it, but overall it does a good job and the price is right.

 

Best free AV and firewall

Can Windows Firewall block outgoing connections yet? If not, it's one step above useless.

Look into Online Armor for a free firewall.

 

firewall

Hi Jackie,

For you to be able to get to your firewall, please follow the steps below:

• Go to start Button.
• Open Windows defender Security Center.
• Then go to Firewall & network protection.
• Then choose a network profile.

We'll look forward to your response.