Windows firewall logging

Discussion in 'other firewalls' started by The Red Moon, Mar 1, 2013.

Thread Status:
Not open for further replies.
  1. The Red Moon

    The Red Moon Registered Member

    Joined:
    May 17, 2012
    Posts:
    3,872
    Does anyone know if the windows 7 firewall has a logging feature,and if so how do i access it.?
    Thank you.
     
  2. Cudni

    Cudni Global Moderator

    Joined:
    May 24, 2009
    Posts:
    6,956
    Location:
    Somethingshire
  3. The Red Moon

    The Red Moon Registered Member

    Joined:
    May 17, 2012
    Posts:
    3,872
    Thank you kindly Cudni.
     
  4. alexandrud

    alexandrud Developer

    Joined:
    Apr 14, 2011
    Posts:
    1,231
    Location:
    Romania
    You can use Windows Firewall Control. Once you have set the Profile to Medium Filtering, the logging will be enabled. From Manage Rules window you can access the firewall log in a more user friendly than accessing it from Event Viewer. Also, you can create new rules with very few effort. You can see below how you can consult this log from Event Viewer and from WFC.

    WFC.png

    EventViewer.png
     
  5. The Red Moon

    The Red Moon Registered Member

    Joined:
    May 17, 2012
    Posts:
    3,872
    Thats a really nice looking application you have there.:thumb:
     
  6. itman

    itman Registered Member

    Joined:
    Jun 22, 2010
    Posts:
    2,969
    Location:
    U.S.A.
    Does WFC create svchost.exe rules at the service level as does the Vista/WIN 7 firewall does? Based on the screen shot posted of blocked activity, it doesn't appear so.
     
  7. alexandrud

    alexandrud Developer

    Joined:
    Apr 14, 2011
    Posts:
    1,231
    Location:
    Romania
    The previous screenshot displayed the "Recently blocked connections". In that view, the service is not displayed. On the "Manage Rules" window, the service is displayed and applied to the rules.
    Untitled.png
     
  8. itman

    itman Registered Member

    Joined:
    Jun 22, 2010
    Posts:
    2,969
    Location:
    U.S.A.
    What is shown on that screen shot are rules that already exist for the WIN 7 firewall although they might not be enabled by default like the core rules are.

    What I was asking is if WFC will create a svchost.exe rule for the BITS service for example.
     
  9. alexandrud

    alexandrud Developer

    Joined:
    Apr 14, 2011
    Posts:
    1,231
    Location:
    Romania
    With WFC you can create a rule for svchost.exe and then apply a service manually from the Rule Properties window. See the screenshot below. The service can not be set at creation time of the rule because WFC doesn't have a long wizard when creates a rule like WFwAS does. In WFC you just select a program and it creates a generic rule for it to allow/block all connections for the selected program. And if required, the user can customize it manually from Manage Rules window.

    service.png
     
  10. The Red Moon

    The Red Moon Registered Member

    Joined:
    May 17, 2012
    Posts:
    3,872
    Would i be good to go with avast 8 and windows firewall.:D
     
  11. iammike

    iammike Registered Member

    Joined:
    Jun 13, 2012
    Posts:
    276
    Location:
    SE Asia
    You would be good to go, but make sure that after installing an Application to check the Windows Firewall, because programs (for example iTunes) like to create Firewall rules (could be a rule to check for updates but could also be phone home rules).
     
Loading...
Thread Status:
Not open for further replies.