Network Audit logging

Fahrid F 196 Reputation points
2020-08-11T06:48:11.29+00:00

I have enabled the advanced audit policy configuration in windows server 2016 and wanted to capture the below network related events:

Packet filter matches, DR-F0401-032, DR-F0401-036, DR-F0401-037 and DR-F0401-117.
System scan for open ports and services and respective logging
Configurable logging for IPSec policy rules
Event logging for loss of connectivity

I have not found any articles related to this, so please help me to proceed further.

Windows Server 2016
Windows Server 2016
A Microsoft server operating system that supports enterprise-level management updated to data storage.
2,370 questions
Windows Server
Windows Server
A family of Microsoft server operating systems that support enterprise-level management, data storage, applications, and communications.
12,116 questions
Windows Server Security
Windows Server Security
Windows Server: A family of Microsoft server operating systems that support enterprise-level management, data storage, applications, and communications.Security: The precautions taken to guard against crime, attack, sabotage, espionage, or another threat.
1,720 questions
0 comments

3 additional answers

Sort by: Most helpful
Most helpful Newest Oldest
  1. Vicky Wang 2,646 Reputation points
    2020-08-12T09:23:54.483+00:00

    Hi,

    Thank you for posting in our forum.

    According to my knowledge and the information I searched, there may be no way to capture network-related events through GPO.

    Hope this information can help you

    Best wishes
    Vicky

  2. Vicky Wang 2,646 Reputation points
    2020-08-17T08:10:34.237+00:00

    There is no such build-in way to meet his needs, You can use Network Monitor to capture and observe network traffic patterns and problems.

    https://learn.microsoft.com/en-us/windows/client-management/troubleshoot-tcpip-netmon

    Hope this information can help you

    Best wishes
    Vicky

    0 comments
  3. Vicky Wang 2,646 Reputation points
    2020-08-26T08:22:50.717+00:00

    Hi,
     
    Just want to confirm the current situations.
     
    Please feel free to let us know if you need further assistance.
     
    Best Regards,
    Vicky 

    0 comments