Taking this a step further, port 1025 is MSTask Scheduler. Also, look at your rule ID number (RuleId = 536870933) and reference it on the support page provided by your vendor. It will surely tell you when, how and why it triggers.

If you REALLY want to know what is up, fire up ethereal and watch the network traffic from his host to yours.