Help: View Windows Firewall events in Event Viewer
Applies To: Windows Server 2003, Windows Server 2003 R2, Windows Server 2003 with SP1, Windows Server 2003 with SP2
To view Windows Firewall events in Event Viewer
Open Event Viewer.
Click Security, and then look for event IDs 848 through 861.
Notes
To open Event Viewer, click Start, click Control Panel, double-click Administrative Tools, and then double-click Event Viewer.
You must enable the Audit process tracking and Audit policy change policy settings to view Windows Firewall events in the security event log.
See Also
Concepts
Help: Windows Firewall Concepts
Help: Enable auditing of Windows Firewall events