Microsoft Windows Firewall

Microsoft Windows Event Sender (WES) (Deprecated) must be running if you want to use this setup procedure.

Use the following steps to set up the log message sending from Windows Firewall to the Logmanager:

1. Run firewall configuration console with command wf.msc.

   

2. On the right-hand side select Properties.

   

3. On the Domain Profile tab, click Customize for Logging.

   

   • Create a copy of the log file path to the clipboard for future use.
   • Select yes on Log dropped packets.
   • Select yes on Log successful connections.
   • To save this configuration, click OK.

   

4. Repeat the previous steps for Private Profile and Public Profile tabs.

This procedure demonstrates the GUI configuration for all available messages.

1. Configure the Logmanager to watch the log files on Windows Server with Windows Firewall. Follow the Chapter Windows.

2. We find computer with Windows Firewall and we need to set following properties on Editing client station page:

   • Set log type to value text
   • Paste the log file path from your clipboard into textbox log source

   

WES agent starts sending Windows Firewall messages to the Logmanager.