Forum Discussion
Fish_Tacos
Mar 03, 2021Brass Contributor
Windows firewall logs on the endpoint.
I was ran into an issue of the firewall blocking traffic but not reporting it in Microsoft Defender. When I went to turn on windows logging it was block by administrator. https://www.howtogeek.com/22...
- Mar 03, 2021
Fish_Tacos you should but it also depends on the type of block and the app in question. You will need to look in the log I mentioned above to determine the block but by default it will not log dropped packets so you might have to step through it again to get it captured.
Fish_Tacos
Mar 03, 2021Brass Contributor
Rick_Munck Shouldn't I get a pop up or alert when an application is blocked? See Screenshot.
Rick_Munck
Microsoft
Mar 03, 2021Fish_Tacos you should but it also depends on the type of block and the app in question. You will need to look in the log I mentioned above to determine the block but by default it will not log dropped packets so you might have to step through it again to get it captured.