Outbound Firewall - Blocked Program Log?
Can the built-in Win7 firewall be configured to log the name of each application that is blocked from getting an outbound connection? This would be very helpful when adding and testing rules.
March 31st, 2010 12:58am
Look at the Event Viewer in Control Panel > Administrative Tools. Open the Applications and Services Logs > Microsoft > Windows Firewall with Advanced Security > Firewall.
http://windows.microsoft.com/en-US/windows7/What-information-appears-in-event-logs-Event-Viewer
http://technet.microsoft.com/en-us/library/dd421717(WS.10).aspx
You also might read through this TechNet article for possible help...
http://technet.microsoft.com/en-us/library/dd772715(WS.10).aspx
MS-MVP Windows Desktop Experience, "When all else fails, read the instructions"
Free Windows Admin Tool Kit Click here and download it now
March 31st, 2010 1:19pm
Thanks for the information. My testing indicates that Event Viewer logs when rules are changed but not when they are applied, and PFirewall.log does not include the program name or rule name. Looks like I have to re-think my plans.
March 31st, 2010 8:57pm