SP2: Security Event Log filled with 861 Events

The Security Eventlog of our SP2 test PC's are filled up with 861 Messages.
The messages indicate that applications are listening incoming network
traffic. Most of the "applications" are internal processes like lsass.exe,
svchost.exe, mstsc.exe etc.

- I think it's normal that processes have open ports and are listening on
incoming TCP/UDP connections. Is that correct?

- Is it possible to switch off this type of messages in the Windows
Firewall, if possible with a GPO setting?

Thanks in advance for any help!
Franz