Getting thousands suspicious connections blocked. Many are attempted connections by my ISP which would not seem to suspicious. Many of the others are from Akami Technology and are coming from the same location in my state. The ISP connections are trying to connect to a UDP port while the others are trying to connect to a TCP port. Why the difference and why are ISP connections blocked?
Solved! Go to Solution.
Hi @rce,
TCP is a connection-oriented protocol, whereas UDP is a connectionless protocol. A key difference between TCP and UDP is speed, as TCP is comparatively slower than UDP. Overall, UDP is a much faster, simpler, and efficient protocol, however, retransmission of lost data packets is only possible with TCP.
The Firewall checks the incoming IP address (a unique identifier that helps identify Internet-connected devices) against McAfee Global Threat Intelligence (GTI) database. GTI catalogs the reputationsof IP addresses around the globe. IP addresses associated with phishing websites, sites infected with malware, or otherwise malicious sites, have a 'bad' reputation in the GTI database. So, they are blocked from connecting to your PC and show up as risky connections in your McAfee software.
For information about the IP addresses, please contact your ISP.
Thanks,
Avinash.
Hi @rce,
McAfee Firewall stops any unsafe connections being made to your computer. You might see large amounts of blocked connections in your Security History. Don’t be alarmed – your McAfee software is simply telling you that it is keeping you safe.
McAfee will alert you in the bottom right of your screen, if there is any action needed.
You can refer to the below article for more information about the same,
Your McAfee software blocked risky connections
Thanks,
Avinash.
But why would attempted connections by my ISP be considered "suspicious."? And what is the difference between attempts to connect to a UDP port and attempts to connect to a TCP port. The ISP attempts are all to the TCP port.
Hi @rce,
TCP is a connection-oriented protocol, whereas UDP is a connectionless protocol. A key difference between TCP and UDP is speed, as TCP is comparatively slower than UDP. Overall, UDP is a much faster, simpler, and efficient protocol, however, retransmission of lost data packets is only possible with TCP.
The Firewall checks the incoming IP address (a unique identifier that helps identify Internet-connected devices) against McAfee Global Threat Intelligence (GTI) database. GTI catalogs the reputationsof IP addresses around the globe. IP addresses associated with phishing websites, sites infected with malware, or otherwise malicious sites, have a 'bad' reputation in the GTI database. So, they are blocked from connecting to your PC and show up as risky connections in your McAfee software.
For information about the IP addresses, please contact your ISP.
Thanks,
Avinash.
New to the forums or need help finding your way around the forums? There's a whole hub of community resources to help you.
Thousands of customers use the McAfee Community for peer-to-peer and expert product support. Enjoy these benefits with a free membership: