Server Security 14.11 Premium - Firewall-Logs

Steven_Steven_ Posts: 20 New Member

Hello,

is it possible to activate any firewall-logs in ServerSecurity 14.x by PolicyManager? Like in older Versions 13.x?

The diagnostics reports contains no logs. In Older logs 13.x we can view which process start the connection.

regards

Steven

Answers

  • VadVad Posts: 1,075 F-Secure Employee
    edited February 2

    Hello Steven,

    All firewall logs are stored in c:\ProgramData\F-Secure\Log\Firewall\. It is possible to change the logging level in 15.X versions from PMC in Centralized management -> Logging.

    It is not possible to add any additional logs in SS 14/15 versions.


    Best regards,

    Vad


  • VadVad Posts: 1,075 F-Secure Employee

    Hello Steven,


    All Firewall logs in 14/15 versions are located in c:\ProgramData\F-Secure\Log\Firewall\ folder.

    For 15 versions it is possible to change the logging level from PMC Centralized management -> Logging. But there is no possibility to add new logs.


    Best regards,

    Vad

  • Steven_Steven_ Posts: 20 New Member

    Hello,

    thanks , we only found "blocks/event" logs in the folder but not like in older clients.

    In older clients action.log sample ...

    2021-01-01T09:56:37+01:00,info,appl control,C:\Windows\System32\svchost.exe,allow,listen,17,0.0.0.0,62851

    2021-01-01T09:56:37+01:00,info,appl control,C:\Windows\System32\svchost.exe,allow,listen,17,::,62851

    Can we activate that for newer clients that use the windows-firewall?

    regards

    Steven

  • VadVad Posts: 1,075 F-Secure Employee

    Hello,


    No, it is not possible. Those logs were generated by F-Secure Firewall binaries, which doesn't exist in new versions.


    Best regards,

    Vad

This discussion has been closed.