windows Firewall log analysis

Question

Does anyone know of a tool to analyse windows firewall logs?

Answer 1

I would suggest starting with Log Parser.

[https://www.microsoft.com/en-us/download/details.aspx?id=24659

[https://www.sentinelone.com/blog/log-parser-tutorial/

Or Powershell.

[https://devblogs.microsoft.com/scripting/learn-how-to-use-powershell-to-parse-the-firewall-log/

[https://social.technet.microsoft.com/Forums/en-US/f566c3a3-9656-4239-8005-258f6edc2fca/windows-firewall-log-parsing

Answer 2

You could turn on some logging here.

--please don't forget to upvote and Accept as answer if the reply is helpful--

Answer 3

Hi,

If you want enable logging on many servers , you can use Group policy Object:

Configure the Windows Defender Firewall with Advanced Security Log

Please don't forget to mark helpful answer as accepted

Answer 4

Thank you i will take alook