SEP 12.1.5 disabling internet based on "traffic has been blocked from this host svchost.exe"

We use Symantec Endpoint Protection in an unmanaged scenario in our small network.  In certain cases, some staff get their internet access disabled when SEP says "traffic has been blocked from this: svchost.exe"

The quick fix:

In SEP

1. clicking on Options next to Network Threat Protection

2. Click "Configure Firewall rules"

3. Find "Block UPnP Discovery" and change it from BLOCK to ALLOW