I checked in TCPview and found lsass.exe using a udp port. There is one more port consumed which is same used by lsass. I want to know that is it better to close the ports and leave it as it is. I require some help to close it but not sure whether it will be helpful or not. I found isakmp using one of the ports. What does this service doe.