Skip to main content

Powershell: Enable Firewall Log

We sometimes need to enable Windows firewall's log to troubleshoot. Here is how.

Check current firewall's settings

Get-NetFirewallProfile

Enable logging blocked connections for Domain profile

Set-NetFirewallProfile -Name Domain -LogBlocked True

Verify settings

Get-NetFirewallProfile -Name Domain

Check the firewall log at %systemroot%\system32\LogFiles\Firewall\pfirewall.log. Remember to run as Administrator.

PS C:\WINDOWS\system32> Get-Content c:\windows\system32\LogFiles\Firewall\pfirewall.log

Popular posts from this blog

Python: Notes

Google Credential Provider for Windows: Notes

Google Credential Provider for Windows® (GCPW) lets users sign in to Windows® devices with the Google Account they use for work. GCPW provides users with a single sign-on experience to Google services and all the security features available with their Google Account.

VMware Workstation: vmrun.exe

Using vmrun.exe to manage VMs on VMware Workstation