How to Setup Windows Firewall Logging and Tracking

It can be handy while troubleshooting to know how to setup Windows Firewall logging. Windows Firewall logging allows you to monitor any dropped or successful connections by the firewall. 

Open Windows Firewall with Advanced Security. Right-Click on Windows Firewall with Advanced Security and go to Properties.Windows Firewall with Advanced Security

You should see a Windows Firewall with Advanced Security Properties box.Windows Firewall Properties

You can switch between Domain, Private, and Public Firewall profiles. Typically, you will want to configure the Domain or Private Profile. I will show you how to setup Windows Firewall logging on a Windows Firewall Private Profile. The instructions below will work for a domain or public profile as well.

Click Private Profile > Logging > CustomizeWindows Firewall with Logging

Go under “Log Dropped Packets” and switch to Yes.
WIndows Firewall Logging Successful

Typically, I turn on logging for “Log Dropped Packets” only. I don’t log successful connections since successful connections typically aren’t as useful during troubleshooting. 

Now copy the default path for the log file. ( %systemroot%\system32\LogFiles\Firewall\pfirewall.log ) and then Press OK

Open File Explorer and Browse to where the Windows Firewall log is stored. ( %systemroot%\system32\LogFiles\Firewall\) .In the Firewall folder, you will see a pfirewall.log 

Copy the pfirewall.log to your desktop. This will allow you to open the file without any firewall warnings. 

Your Windows Firewall log will look similar to this. Windows Firewall Log

You can see on the left hand side the date/time stamp and then whether the TCP/UDP traffic was allowed or denied. Next is the source IP Address and then the destination IP address of which ports are be denied or allowed.

This was posted by techspeeder. If this helped you, consider helping me, by using my Amazon Affiliate link to keep this blog active and to buy an occasional coffee. 

2 thoughts on “How to Setup Windows Firewall Logging and Tracking

  1. Pingback: QuickBooks Database Manager: Windows Firewall is Blocking Quickbooks | techspeeder

Leave a Reply

This site uses Akismet to reduce spam. Learn how your comment data is processed.