Network Audit logging

Question

I have enabled the advanced audit policy configuration in windows server 2016 and wanted to capture the below network related events:

Packet filter matches, DR-F0401-032, DR-F0401-036, DR-F0401-037 and DR-F0401-117.
System scan for open ports and services and respective logging
Configurable logging for IPSec policy rules
Event logging for loss of connectivity

I have not found any articles related to this, so please help me to proceed further.

Answer 1

Hi,
 
Just checking in to see if the information provided was helpful. Please let us know if you would like further assistance.
 
Best Regards,
Vicky

Answer 2

Hi,

Thank you for posting in our forum.

According to my knowledge and the information I searched, there may be no way to capture network-related events through GPO.

Hope this information can help you

Best wishes
Vicky

Answer 3

There is no such build-in way to meet his needs, You can use Network Monitor to capture and observe network traffic patterns and problems.

https://learn.microsoft.com/en-us/windows/client-management/troubleshoot-tcpip-netmon

Hope this information can help you

Best wishes
Vicky

Answer 4

Hi,
 
Just want to confirm the current situations.
 
Please feel free to let us know if you need further assistance.
 
Best Regards,
Vicky