Windows Firewall policy changes like new program exceptions enabling/disabling/deleting policies can be monitored and detected with EventSentry along to detection when firewall is disabled. Enabling Policies Changes Audit In order to monitor Microsoft Windows Firewall policy changes the subcategory MPSSVC rulelevel Policy Chang...
The EventSentry management console and services excluding the agent need access to the following: Application Process URLs / IPs Purpose Management Console eventsentryguix64.exe https://store.netikus.net 216.92.16.192https://www.eventsentry.com 216.92.10.83 Patch/Setup Down...
