# Why is EngineLauncher causing LSASS to connect to godaddy.com?

**URL:** <https://forums.unrealengine.com/t/why-is-enginelauncher-causing-lsass-to-connect-to-godaddy-com/308831>\
**Category:** Multiplayer & Networking\
**Tags:** startup, Networking, launcher, security, unreal-engine, question\
**Created:** [March 3, 2015, 1:45am UTC](https://forums.unrealengine.com/t/why-is-enginelauncher-causing-lsass-to-connect-to-godaddy-com/308831 "2015-03-03T01:45:30Z")\
**Posts on this page:** 9\
**Page:** 1

<div class="post-metadata">

**Author:** ![12many](https://d3kjluh73b9h9o.cloudfront.net/original/4X/2/8/5/28502927f1d97ba1051b3b47ccfe17233bf41ef0.png) [@12many](https://forums.unrealengine.com/u/12many)\
**Post date:** [March 3, 2015, 1:45am UTC](https://forums.unrealengine.com/t/why-is-enginelauncher-causing-lsass-to-connect-to-godaddy-com/308831/1 "2015-03-03T01:45:30Z")

</div>

My firewall is blocking an outbound IP connection request from the “Local Security Authority Process” application (system service) to IP 72.167.18.239 ([p3plpkivs-v03.any.prod.phx3.secureserver.net](http://p3plpkivs-v03.any.prod.phx3.secureserver.net)) and the engine load stops at an “Error! No version information received” error.

What are you guys doing in the launcher that would trigger an IPC call over to LSASS and have it call out to such a strange IP address? I’m willing to grant apps like the UnrealEngine fairly open IP access, since I can then monitor the process’s file access activity if I want, but I’m not really too excited about opening a ring-0 process like LSASS to chitchat with GoDaddy.

---

<div class="post-metadata">

**Author:** ![xenlock](https://d3kjluh73b9h9o.cloudfront.net/original/4X/2/8/5/28502927f1d97ba1051b3b47ccfe17233bf41ef0.png) [@xenlock](https://forums.unrealengine.com/u/xenlock)\
**Post date:** [March 3, 2015, 7:29am UTC](https://forums.unrealengine.com/t/why-is-enginelauncher-causing-lsass-to-connect-to-godaddy-com/308831/2 "2015-03-03T07:29:11Z")

</div>

The request seems to be safe, obviously. But this is something they’ve added only in the latest version of the launcher and I hope they change the way they connect to the web server.

---

<div class="post-metadata">

**Author:** ![TJ\_V](https://d1ap1mz92jnks1.cloudfront.net/user_avatar/forums.unrealengine.com/tj_v/32/1008648_2.png) [@TJ\_V](https://forums.unrealengine.com/u/TJ_V)\
**Post date:** [March 3, 2015, 4:56pm UTC](https://forums.unrealengine.com/t/why-is-enginelauncher-causing-lsass-to-connect-to-godaddy-com/308831/3 "2015-03-03T16:56:41Z")

</div>

Hi Dave,

I believe it’s your Antivirus software blocking the Launcher. Take a look at the “Error: No version info received” section in the link below and try the suggestions listed.

> **[A new, community-hosted Unreal Engine Wiki](https://forums.unrealengine.com/t/a-new-community-hosted-unreal-engine-wiki/141494)**
>
> After over a year in maintenance mode, the official Unreal Engine Wiki is now permanently offline. These resources now live on a new community-run Unreal Engine Community Wiki — https://unrealcommunity.wiki/! You will be able to find content from...

As for your connection request question, the developers in your forum post are discussing it.

> **[Security concern of EpicGamesLauncher.exe?](https://forums.unrealengine.com/showthread.php?60761-Security-concern-of-EpicGamesLauncher-exe)**
>
> Hey Epic & community, It’s been a while since I updated my UnrealEngine, but I did so today and noticed something that troubles me. I’m semi-serious about security, so I control my firewall fairly carefully. It’s amazing how Windows apps that...

---

<div class="post-metadata">

**Author:** ![12many](https://d3kjluh73b9h9o.cloudfront.net/original/4X/2/8/5/28502927f1d97ba1051b3b47ccfe17233bf41ef0.png) [@12many](https://forums.unrealengine.com/u/12many)\
**Post date:** [March 3, 2015, 7:15pm UTC](https://forums.unrealengine.com/t/why-is-enginelauncher-causing-lsass-to-connect-to-godaddy-com/308831/4 "2015-03-03T19:15:26Z")

</div>

Hi TJ,  
Thanks for the suggestions. I don’t think it’s anti-virus, I only have MS Security Essentials installed, which comes with windows. The problem is that I have non-default Windows Firewall rules defined that disallow unauthorized network traffic - I need to know what apps are talking on the internet since often I work with significantly valuable IP assets.  
My concern isn’t that the launcher app is reaching out to a CDN, it’s that the app is apparently triggering an external ring-0 process to connect to an untrusted (at least by me) server on the internet.  
No app has behaved this way on my machine in the past, although I do run 99% of my software from within virtual machine guests where their file access is limited and not directly on the host. Unfortunately it isn’t possible with UE4 based software in a VM since it requires DX11 (at least on Windows) and my software (vmware workstation) only supports DX9 from within the VM.

---

<div class="post-metadata">

**Author:** ![12many](https://d3kjluh73b9h9o.cloudfront.net/original/4X/2/8/5/28502927f1d97ba1051b3b47ccfe17233bf41ef0.png) [@12many](https://forums.unrealengine.com/u/12many)\
**Post date:** [March 3, 2015, 7:18pm UTC](https://forums.unrealengine.com/t/why-is-enginelauncher-causing-lsass-to-connect-to-godaddy-com/308831/5 "2015-03-03T19:18:42Z")

</div>

Yep, 4.6 didn’t behave this way, which is why I’m bringing it up. Hopefully it’s something unintentional Epic can address soon. Otherwise I’m going to have to either set up yet another machine in my office, multiboot, or figure out some other way of getting the security I need.

---

<div class="post-metadata">

**Author:** ![\_Epic\_Maximusdb3\_1](https://d3kjluh73b9h9o.cloudfront.net/original/4X/2/8/5/28502927f1d97ba1051b3b47ccfe17233bf41ef0.png) [@\_Epic\_Maximusdb3\_1](https://forums.unrealengine.com/u/_Epic_Maximusdb3_1)\
**Post date:** [March 3, 2015, 7:19pm UTC](https://forums.unrealengine.com/t/why-is-enginelauncher-causing-lsass-to-connect-to-godaddy-com/308831/6 "2015-03-03T19:19:14Z")

</div>

Hi Dave,  
I’ve alerted our online team about this answerhub issue and your forum post. They’re looking into your question and should reply back to either of your posts soon.

-Max B.

---

<div class="post-metadata">

**Author:** ![12many](https://d3kjluh73b9h9o.cloudfront.net/original/4X/2/8/5/28502927f1d97ba1051b3b47ccfe17233bf41ef0.png) [@12many](https://forums.unrealengine.com/u/12many)\
**Post date:** [March 6, 2015, 2:36am UTC](https://forums.unrealengine.com/t/why-is-enginelauncher-causing-lsass-to-connect-to-godaddy-com/308831/7 "2015-03-06T02:36:04Z")

</div>

Thanks Max. Although I hope Epic addresses this issue I think I understand the reasons why it probably won’t. I added some suggestions that might help to the forum thread.

---

<div class="post-metadata">

**Author:** ![\_Epic\_Maximusdb3\_1](https://d3kjluh73b9h9o.cloudfront.net/original/4X/2/8/5/28502927f1d97ba1051b3b47ccfe17233bf41ef0.png) [@\_Epic\_Maximusdb3\_1](https://forums.unrealengine.com/u/_Epic_Maximusdb3_1)\
**Post date:** [March 17, 2015, 7:16pm UTC](https://forums.unrealengine.com/t/why-is-enginelauncher-causing-lsass-to-connect-to-godaddy-com/308831/8 "2015-03-17T19:16:54Z")

</div>

Thank you for the suggestions Dave. I have made the team aware of the issues your raised in your forum thread. I’m marking this thread as resolved for now but if you have any related issues with this please let us know.

-Max B.

---

<div class="post-metadata">

**Author:** ![thor\_x2](https://d3kjluh73b9h9o.cloudfront.net/original/4X/2/8/5/28502927f1d97ba1051b3b47ccfe17233bf41ef0.png) [@thor\_x2](https://forums.unrealengine.com/u/thor_x2)\
**Post date:** [December 19, 2017, 4:12pm UTC](https://forums.unrealengine.com/t/why-is-enginelauncher-causing-lsass-to-connect-to-godaddy-com/308831/9 "2017-12-19T16:12:47Z")

</div>

Has there been any update on this? My launcher still fails to connect to the network unless I add a “-http=wininet” to the launch params.
