Network Audit logging

Fahrid F 201 Reputation points
2020-08-11T06:48:11.29+00:00

I have enabled the advanced audit policy configuration in windows server 2016 and wanted to capture the below network related events:

Packet filter matches, DR-F0401-032, DR-F0401-036, DR-F0401-037 and DR-F0401-117.
System scan for open ports and services and respective logging
Configurable logging for IPSec policy rules
Event logging for loss of connectivity

I have not found any articles related to this, so please help me to proceed further.

Windows for business Windows Server User experience Other
Windows for business Windows Server Devices and deployment Configure application groups
0 comments No comments
{count} votes

Accepted answer
  1. Vicky Wang 2,736 Reputation points
    2020-08-24T08:14:21.053+00:00

    Hi,
     
    Just checking in to see if the information provided was helpful. Please let us know if you would like further assistance.
     
    Best Regards,
    Vicky

    0 comments No comments

3 additional answers

Sort by: Most helpful
  1. Vicky Wang 2,736 Reputation points
    2020-08-12T09:23:54.483+00:00

    Hi,

    Thank you for posting in our forum.

    According to my knowledge and the information I searched, there may be no way to capture network-related events through GPO.

    Hope this information can help you

    Best wishes
    Vicky


  2. Vicky Wang 2,736 Reputation points
    2020-08-17T08:10:34.237+00:00

    There is no such build-in way to meet his needs, You can use Network Monitor to capture and observe network traffic patterns and problems.

    https://learn.microsoft.com/en-us/windows/client-management/troubleshoot-tcpip-netmon

    Hope this information can help you

    Best wishes
    Vicky

    0 comments No comments

  3. Vicky Wang 2,736 Reputation points
    2020-08-26T08:22:50.717+00:00

    Hi,
     
    Just want to confirm the current situations.
     
    Please feel free to let us know if you need further assistance.
     
    Best Regards,
    Vicky 

    0 comments No comments

Your answer

Answers can be marked as Accepted Answers by the question author, which helps users to know the answer solved the author's problem.