1. Open wf.msc > Advanced Settings > Properties

  2. Under each profile (Domain, Private, Public), click Customize under Logging

  3. Set "Log dropped packets" and "Log successful connections" to Yes

  4. Review logs located at %systemroot%\system32\LogFiles\Firewall\pfirewall.log

Regularly reviewing logs helps detect suspicious activity early.

Was this answer helpful? 0 Users Found This Useful (0 Votes)