Forum Discussion
Fish_Tacos
Mar 03, 2021Brass Contributor
Windows firewall logs on the endpoint.
I was ran into an issue of the firewall blocking traffic but not reporting it in Microsoft Defender. When I went to turn on windows logging it was block by administrator. https://www.howtogeek.com/22...
- Mar 03, 2021
Fish_Tacos you should but it also depends on the type of block and the app in question. You will need to look in the log I mentioned above to determine the block but by default it will not log dropped packets so you might have to step through it again to get it captured.
Heather_Poulsen
Community Manager
Mar 03, 2021Firewall events should be in the security event log if it has been turned on
- Fish_TacosMar 03, 2021Brass ContributorLocal users don't have rights to view the security log.