It can be handy while troubleshooting to know how to setup Windows Firewall logging. Windows Firewall logging allows you to monitor any dropped or successful connections by the firewall. 

Open Windows Firewall with Advanced Security. Right-Click on Windows Firewall with Advanced Security and go to Properties.

You should see a Windows Firewall with Advanced Security Properties box.

You can switch between Domain, Private, and Public Firewall profiles. Typically, you will want to configure the Domain or Private Profile. I will show you how to setup Windows Firewall logging on a Windows Firewall Private Profile. The instructions below will work for a domain or public profile as well.

Click Private Profile > Logging > Customize

Go under “Log Dropped Packets” and switch to Yes.

Typically, I turn on logging for “Log Dropped Packets” only. I don’t log successful connections since successful connections typically aren’t as useful during troubleshooting. 

Now copy the default path for the log file. ( %systemroot%\system32\LogFiles\Firewall\pfirewall.log ) and then Press OK

Open File Explorer and Browse to where the Windows Firewall log is stored. ( %systemroot%\system32\LogFiles\Firewall\) .In the Firewall folder, you will see a pfirewall.log 

Copy the pfirewall.log to your desktop. This will allow you to open the file without any firewall warnings. 

Your Windows Firewall log will look similar to this. 

You can see on the left hand side the date/time stamp and then whether the TCP/UDP traffic was allowed or denied. Next is the source IP Address and then the destination IP address of which ports are be denied or allowed.

This was posted by techspeeder. If this helped you, consider helping me, by using my Amazon Affiliate link to keep this blog active and to buy an occasional coffee.