Skip to main content

Powershell: Enable Firewall Log

We sometimes need to enable Windows firewall's log to troubleshoot. Here is how.

Check current firewall's settings

Get-NetFirewallProfile

Enable logging blocked connections for Domain profile

Set-NetFirewallProfile -Name Domain -LogBlocked True

Verify settings

Get-NetFirewallProfile -Name Domain

Check the firewall log at %systemroot%\system32\LogFiles\Firewall\pfirewall.log. Remember to run as Administrator.

PS C:\WINDOWS\system32> Get-Content c:\windows\system32\LogFiles\Firewall\pfirewall.log
Labels:

Popular posts from this blog

nmap - The Network Mapper

WARNING : It is ILLEGAL to scan hosts without permission.
Read more

Linux command: lspci

Linux command: lspci - list pci devices tuyendq@ubuntu001:~$ man lspci NAME        lspci - list all PCI devices SYNOPSIS        lspci [options] DESCRIPTION        lspci is a utility for displaying information about PCI buses in the system and devices connected to them.        By  default,  it  shows a brief list of devices. Use the options described below to request either a more verbose output or output intended for parsing by        other programs.        If you are going to report bugs in PCI device drivers or in lspci itself, please include output of "lspci -vvx" or even better  "lspci  -vvxxx"  (however,        see below for possible caveats).        Some  parts of the output, especially in the highly verbose modes, are probably intelligible only to experienced PCI hac...
Read more

VMware Workstation: vmrun.exe

Using vmrun.exe to manage VMs on VMware Workstation
Read more