How to prohibit notifications but still log event ID 851 security

  • Thread starter Thread starter Guest
  • Start date Start date
G

Guest

When the XPSP2 Firewall Policy is set to "Prohibit notifications" it also
appears to not log any indication that an application had any issue with the
firewall configuration. By contrast, with the notifications enabled, an
Event ID 851 message is recorded in the Security log for any application that
encounters an issue with the firewall.

We'd like to roll out SP2 with the firewall enabled to ~500 XP Pro
systems... in doing our research for this deployment, we've created a number
of port & application exceptions, however, we anticipate that some
application will not agree with the firewall. Is there a way to log
application issues, WITHOUT notifying the user with a dialog box?

Thanks.
 
Apparently not. If logging is enabled for the Windows Firewall you can use
that also to help track down problems with blocked access by looking for
entries that say dropped,etc. --- Steve
 
Back
Top