Mcafee lots of "suspicious incoming network connections blocked"

grumpycrab

I have a paranoid neigbour who wants to know why McAfee Virus Protect firewall is raising 1000s of these suspicious messages. I just said its normal network traffic but he wasn't convinced so I said I'd have a look.

A quick sample showed one external IP as coming from Microsoft(Ireland). No problem there.
An internal request was more interesting. It showed a UDP port 1900 SSDP "remote installation" request from an in-house wifi extender/booster. I have NO idea what this is about.
I could advise friend to remove Mcafee but I don't think that will convince him. Any ideas?
PS. the laptop itself is running Windows10 (1803 fully updated); Mcafee reports no virusses itself; adwcleaner reports nothing.

kwikbreaks

Tell him to ask McAfee support because you have no idea what they are.

John_Gray

Perhaps the firewall has been set into Verbose mode? (Or whatever McAfee calls it.)

Most other firewalls deal with the flood of minor attacks quite seamlessly, and don't bother telling the user about this.

AndyPix

Mcafee justifying its existance.


There is no need atall for a 3rd party firewall


As John Gray says - Other firewalls just deal with this stuff and carry on.
It's their only job - they dont show off about doing it !

psychic_teabag

Wouldn't the broadband router itself usually block incoming connections, before they reach the windows box ?

grumpycrab

psychic_teabag wrote: »

Wouldn't the broadband router itself usually block incoming connections, before they reach the windows box ?

Good point. It's a bt hub4(or5). Will look at this

AndyPix

grumpycrab wrote: »

An internal request was more interesting. It showed a UDP port 1900 SSDP "remote installation" request from an in-house wifi extender/booster..

psychic_teabag wrote: »

Wouldn't the broadband router itself usually block incoming connections, before they reach the windows box ?

Router wouldnt usually get involved in an internal conenction