I am a normal user, with a HP dual core laptop running windows 7, connects to internet via home router. Does not belong to any home network or windows domain setup or use VPN.
But very rarely may be once or twice in a year, might use ICS or a windows built-in home networking.
Having disabled many win 7 services, e.g remote registry among others as my hardware is very old quite literally ancient, aiming to further disable unnecessary services and like to know whether it would be safe to turn off the following services: "IPsec", "IKE and AuthIP IPsec Keying Module" and "BFE" (Base Filtering Engine) services.
For e.g. reading the description about "IPSec" on http://maximumpcguides.com/windows-7/what-is-the-ipsec-policy-agent-policyagent-service/ seems to suggest that the services is used mainly used by sys admins to enforce company's network policy in a domain however, other points in the article, kinda confuses whether to turn off the IPsec services or not:
This service enforces IPsec policies created through the IP Security Policies snap-in or the command-line tool “netsh ipsec“.
Have not set any policy using Group Policy Editor or any other way, Never used the snap-in or the command line for ipsec. Seems like a system administrator thing.
IPSec is a framework developed to provide authentication ([/size]login/password) and encryption at the network layer level[/size]
Like I said, I am not connected to any domain or a company or even a home network.
The IPsec Policy Agent (PolicyAgent) service is responsible for authentication. When you purchase something online the page used to check out is usually encrypted (HTTPS). Business people might connect to their office via a secure VPN connection. All of these are used rely on this service.
This point's that most confusing, I do purchase stuff online so is "IPSec" required running while purchasing stuff online.
Does my computer need the IPsec Policy Agent ([/size]PolicyAgent) service?[/size]
Your computer doesn’t need the PolicyAgent service to run, but some advanced networking functionality will not work.[/size]
SHOULD I DISABLE THE IPSEC POLICY AGENT ([/size]POLICYAGENT) SERVICE?[/size]
First off, I have to say that it’s best to leave service optimization up to Microsoft. With that said; I would leave the PolicyAgent service alone.
The above are contradictory, it suggest to disable the service but says it's best to leave it alone.
Similar suggestions for "IKE and AuthIP IPsec Keying Module" service http://maximumpcguides.com/windows-7/what-is-the-ike-and-authip-ipsec-keying-modules-ikeext-service/
Can any expert pitch in and tell me what exactly should I do? To disable or leave the above services unchanged??
Pls note, my purpose is to minimize RAM, CPU load as much as possible without hampering normal/ necessary operation.
I have known bleeping computer long enough and can trustfully regard it as reliable source of advice.
Edited by dkja, 28 November 2016 - 09:29 AM.