We sometimes need to enable Windows firewall's log to troubleshoot. Here is how.
Check current firewall's settings
Get-NetFirewallProfile
Enable logging blocked connections for Domain profile
Set-NetFirewallProfile -Name Domain -LogBlocked True
Verify settings
Get-NetFirewallProfile -Name Domain
Check the firewall log at %systemroot%\system32\LogFiles\Firewall\pfirewall.log. Remember to run as Administrator.
PS C:\WINDOWS\system32> Get-Content c:\windows\system32\LogFiles\Firewall\pfirewall.log