![]() Open Event Viewer, open Windows Logs => Security, click on Create Custom View., set like this. If you need more custom view, to better customize system log events by configuring auditing based on categories of security events such as changes to user account and resource permissions, failed attempts for user logon, failed attempts to access resources, and attempts to modify system files, and network activities.ĭownload list of Security Audit Events for Windows 7 and Windows Server 2008 R2 Navigate to Menu > Settings > Protection > Firewall to access these settings. To check the detail to indentify the blocked connection go Event Viewer => Custom Views => To create alert popup open Attach Task To This Custom View., and follow Basic Task Wizard. Click to expand.Open Event Viewer, open Windows Logs => Security, click on Create Custom View., set like this.ĥ152 The Windows Filtering Platform blocked a packet.ĥ157 The Windows Filtering Platform has blocked a connection.Įvent 5157 indicates that a connection (Transport layer) is blocked while Event 5152 indicates that a packet (IP layer) is blocked.
0 Comments
Leave a Reply. |
AuthorWrite something about yourself. No need to be fancy, just an overview. ArchivesCategories |