How to get log files of windows defender firewall from central location for all devices

Question

Hi everyone, Is it possible to get the log files of the firewall for all devices from the Intune itself remotely without accessing each machine?

Answer 1

@Gokul R Dev, Thanks for posting in Q&A. For the log file, is it event log "Microsoft-Windows-Windows Firewall With Advanced Security/Firewall"? If yes, you can try to collect diagnostics from these windows devices in Intune portal. Here is a link with more details:

https://learn.microsoft.com/en-us/mem/intune/remote-actions/collect-diagnostics

Hope the above information can help.

---

If the answer is helpful, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment". Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.