Windows 10: lsass.exe on Win10 sending data to Amazon/CloudFront server port 80 ?

Hi,
I'm running Windows 10 Home, fully updated. Malwarebytes, MRT.exe, SpybotSD, and Symantec Endpoint all report zero problems.

Yesterday, C:\Windows\System32\lsass.exe tried to send data to a cloudfront.net server, TCP port 80. I haven't seen this before and would have noticed. Reading an overview of that service, it shouldn't need to send data anywhere, much less to a non-Microsoft server. Does Microsoft really utilize Amazon's Cloudfront network for this service, and does it seem reasonable that the local security service is sending data elsewhere (and for me to allow it)?

Thanks
Haz

:)

 

I asked this stupid version of Windows what Port(s) it used for wifi!

A lot of confusion here!

Answer one, is based on someone looking for where to connect some device to the computer (like where do I plug in this USB mouse?)

Answer two, is based on someone needing to know how network routing works.

Third possible answer is based someone trying to determine what hardware resources their WiFi device in their computer is using (I/O ports). If you are looking for the hardware resources, then the answer might also be that it uses no I/O ports, instead
it might be using memory mapped I/O. For most devices if you select Win Key + X -> Device Manager and double click on the device, there will be a Resources tab that will give you these.

If you are talking about network routing then the answer is the WiFi doesn't really use any ports, it the network data and programs that uses ports. As in a port is in fact just a number in data packet that the system routes based on what programs have
stated they need it. WiFi is just the "medium" that the data packets flow through. As in you are running a web server. The web server opens/listens on port 80. When the system gets data in from the network (from some network device driver) the system looks
at the port and if it is 80 sends it to the web server. There can only be one web server (only one program can be setup to listen on port 80), so it knows exactly what program to send the data to. On the client side (your web browser), it is a bit different
it connects to the machine using its IP address and the port 80. As soon as it connects to the server they negotiate to talk to each other on another random port. This allows you to use multiple web browsers on your machine. The initial connection is 80,
but most of the data goes over another port. Data finds its way to the right program because of the IP address and the port. Note that all of this is just numbers in a data packet.

 

access youtube on port 80 (E51)- how to route apps to port 80

hi eydryan,

With regards to your enquiry, the port 80 is the port that the server "listens to" or expects to receive from a Web client, assuming that the default was taken when the server was configured or set up. A port can be specified in the range from 0-65536 on the
NCSA server. However, the server administrator configures the server so that only one port number can be recognized. By default, the port number for a Web server is 80.

From this it means that your service provider have configured your internet to be acccessed only via port 80 which in return will limit your access to the internet.

in any case, to access youtube from your phone try

m.youtube.com

let me know if this helps

 

Ok, it looks like this is the Battleye service, every time it is started. Kinda curious what data they send to themselves from lsass.exe, but that seems to be it.